Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
File: 3131342e33312e3234372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: q41iRpHny6vVqv0umNXx1w8jZh5EBoILebydPrzCyAE=
Subject key identifier: 86:6B:41:22:99:25:02:CF:0F:CD:F5:41:A7:8A:FD:99:82:DC:22:E7
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 1890B8A42EA474DF96C09291740B3CEDE00673BB
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
Signing time: Sun 10 Mar 2024 04:00:02 +0000
ROA not before: Sun 10 Mar 2024 03:55:02 +0000
ROA not after: Sun 09 Mar 2025 04:00:02 +0000
asID: 38496
IP address blocks: 114.31.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:90:b8:a4:2e:a4:74:df:96:c0:92:91:74:0b:3c:ed:e0:06:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 10 03:55:02 2024 GMT
Not After : Mar 9 04:00:02 2025 GMT
Subject: CN=866B4122992502CF0FCDF541A78AFD9982DC22E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:c1:f0:e6:cf:45:8b:c8:97:88:fe:4b:5c:
e4:6e:b7:28:36:8a:f5:eb:d2:c5:df:b1:09:68:9e:
75:85:99:83:e0:6a:81:11:ed:72:28:65:00:01:54:
7c:a2:b9:08:a9:83:64:5b:77:23:da:34:a4:5f:a8:
7b:68:ad:a8:3b:9c:30:b7:3b:55:6e:45:a5:c6:91:
c1:28:92:50:a0:13:ee:96:a2:00:bc:50:2f:9c:31:
fc:d1:64:d0:e7:a9:98:08:13:fe:f0:88:01:61:0f:
91:57:07:22:9f:55:84:fb:5b:2e:96:79:ee:59:eb:
c5:23:0d:be:81:b7:de:24:c1:ed:ba:26:d5:04:a8:
c9:7c:45:05:80:74:62:f2:a6:25:c2:28:d4:4c:00:
02:8e:54:24:e4:41:ce:74:b1:bc:11:95:89:2f:b5:
2f:7b:15:d6:8d:f8:b7:29:1f:4d:85:67:b1:61:61:
4a:db:d7:be:5e:1e:5d:02:1d:88:44:1f:9a:d9:47:
44:0f:b4:6f:50:16:3b:68:50:75:5b:22:0b:71:92:
78:22:f8:f8:04:ce:fe:6d:73:4d:ec:e6:a3:44:ce:
ca:d6:fb:01:9f:fc:10:57:1b:d5:ff:18:41:04:df:
50:dd:03:5f:f2:87:4c:59:32:fa:14:e1:96:89:31:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:41:22:99:25:02:CF:0F:CD:F5:41:A7:8A:FD:99:82:DC:22:E7
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.31.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:90:aa:dc:83:ee:d0:41:41:1b:ed:9f:72:fa:5c:44:15:5c:
6c:68:80:7c:0c:f2:ba:56:23:32:81:0f:0b:61:11:d3:ac:40:
cd:0e:c9:50:75:11:c3:1f:dd:a5:9f:87:64:cf:de:60:e8:d2:
d9:f3:b6:58:51:bd:01:6b:1b:6f:71:23:8b:a9:06:59:ba:07:
80:f8:12:57:0f:f2:a2:8b:7a:08:48:86:43:44:1c:14:82:3a:
14:47:95:26:da:08:39:80:e3:5b:52:4d:fd:ac:ae:62:bb:d5:
b0:b3:9e:59:67:a4:fc:d2:88:cd:6b:82:97:7d:82:d6:73:bf:
0a:be:b6:da:58:5a:27:b7:b4:0b:0a:4c:7e:2d:af:a4:c2:e1:
14:b2:68:75:d0:3e:a2:81:83:b3:95:13:6c:28:a2:c3:7e:df:
e4:58:fc:d9:16:53:53:8d:de:b2:db:29:91:73:53:e7:4e:5f:
f1:fc:1f:80:d3:fb:d2:de:69:c8:42:fd:dd:f1:52:52:b4:25:
c2:2a:1e:3f:29:75:c8:38:55:68:a3:68:b9:36:6d:5c:f5:25:
3a:15:e8:cf:78:b1:3f:94:0a:09:a3:9c:de:5e:07:e8:6e:aa:
1d:92:1c:5e:81:49:4e:94:27:fc:a8:58:f7:fe:df:4f:49:ef:
cd:9c:5b:c3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGJC4pC6kdN+WwJKRdAs87eAGc7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDAzMTAwMzU1MDJaFw0yNTAzMDkwNDAwMDJaMDMxMTAvBgNV
BAMTKDg2NkI0MTIyOTkyNTAyQ0YwRkNERjU0MUE3OEFGRDk5ODJEQzIyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybcHw5s9Fi8iXiP5LXORutyg2
ivXr0sXfsQlonnWFmYPgaoER7XIoZQABVHyiuQipg2RbdyPaNKRfqHtorag7nDC3
O1VuRaXGkcEoklCgE+6WogC8UC+cMfzRZNDnqZgIE/7wiAFhD5FXByKfVYT7Wy6W
ee5Z68UjDb6Bt94kwe26JtUEqMl8RQWAdGLypiXCKNRMAAKOVCTkQc50sbwRlYkv
tS97FdaN+LcpH02FZ7FhYUrb175eHl0CHYhEH5rZR0QPtG9QFjtoUHVbIgtxkngi
+PgEzv5tc03s5qNEzsrW+wGf/BBXG9X/GEEE31DdA1/yh0xZMvoU4ZaJMbtZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhmtBIpklAs8PzfVBp4r9mYLcIucwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNDJlMzMzMTJlMzIzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHIf9zANBgkqhkiG
9w0BAQsFAAOCAQEAnZCq3IPu0EFBG+2fcvpcRBVcbGiAfAzyulYjMoEPC2ER06xA
zQ7JUHURwx/dpZ+HZM/eYOjS2fO2WFG9AWsbb3Eji6kGWboHgPgSVw/yoot6CEiG
Q0QcFII6FEeVJtoIOYDjW1JN/ayuYrvVsLOeWWek/NKIzWuCl32C1nO/Cr622lha
J7e0CwpMfi2vpMLhFLJoddA+ooGDs5UTbCiiw37f5Fj82RZTU43estspkXNT505f
8fwfgNP70t5pyEL93fFSUrQlwioePyl1yDhVaKNouTZtXPUlOhXoz3ixP5QKCaOc
3l4H6G6qHZIcXoFJTpQn/KhY9/7fT0nvzZxbww==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:13 2025 by rpki-client