Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136302e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: WHYqDwhkDP0VbOSUApKHzwSOjOqlAOKK9Haa10LlwiI=
Subject key identifier: C3:C3:F4:BE:03:17:60:16:1A:86:51:61:32:E9:66:B6:B0:EB:DB:DB
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 34FDA850459CDFFE292DED739A95C663BD95DD65
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136302e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 04:00:01 +0000
ROA not before: Sun 23 Mar 2025 03:55:01 +0000
ROA not after: Sun 22 Mar 2026 04:00:01 +0000
asID: 9341
IP address blocks: 119.252.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fd:a8:50:45:9c:df:fe:29:2d:ed:73:9a:95:c6:63:bd:95:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 03:55:01 2025 GMT
Not After : Mar 22 04:00:01 2026 GMT
Subject: CN=C3C3F4BE031760161A86516132E966B6B0EBDBDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:da:09:cb:76:50:65:1c:fc:04:89:ba:7c:
32:f4:69:3a:03:86:f0:03:65:08:2b:52:d5:a9:49:
a9:d6:45:80:f6:40:16:01:e5:ef:7b:44:78:ac:e6:
ce:cb:ca:5a:52:27:db:e2:2c:7d:6f:e9:52:f3:95:
df:c8:a4:86:36:0a:f9:f8:e3:be:38:02:16:8c:c4:
4c:5f:57:2b:61:71:40:d1:67:d1:e4:2b:92:05:ac:
60:32:0c:f8:31:7f:41:76:98:78:f6:a0:6d:08:3e:
41:f8:e1:1b:34:ab:5c:af:d1:1b:50:63:45:85:2a:
d4:71:f3:23:3a:35:9a:5c:05:3f:56:52:ca:67:56:
a8:28:d3:c8:ae:8a:8a:36:10:d2:10:f3:c9:d4:d2:
e7:71:a4:5f:e9:a5:a5:70:72:0e:05:4c:90:37:5a:
df:45:90:29:66:94:04:c8:93:7f:be:6d:de:7f:06:
2b:6a:ec:e5:71:03:8f:0c:9e:74:d0:dc:42:d6:46:
ea:12:4c:56:b6:f3:ce:fe:0e:fb:e2:f8:ae:9c:30:
79:2c:4f:d7:7a:68:47:e3:5c:46:74:c8:39:a3:0a:
41:bf:23:52:a1:80:33:fd:63:1e:db:04:c5:70:67:
a8:b9:cb:b3:6a:fd:63:db:06:b8:a6:e1:a6:a8:15:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:F4:BE:03:17:60:16:1A:86:51:61:32:E9:66:B6:B0:EB:DB:DB
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:61:54:a0:b2:cb:a9:7a:d7:5e:ac:67:34:9a:1c:bb:0f:6d:
14:f3:56:c6:70:b5:02:ee:57:f0:4e:12:4d:d9:be:7d:37:6d:
e9:f4:36:c5:93:05:40:4a:cd:ed:2c:dd:ab:9b:7c:d5:b9:e6:
45:50:ba:04:8f:d2:c5:4b:fc:6b:3b:ca:fe:8e:4f:41:f6:31:
4b:19:fe:f2:63:ff:56:d3:d4:e9:54:fb:2f:28:f1:d3:ba:19:
48:10:5a:84:f7:a2:6a:f5:07:fa:2e:5f:db:40:af:86:19:5c:
90:d7:d8:98:4a:8d:82:d3:6a:16:f3:ed:9b:f9:45:65:a7:d5:
61:99:14:f6:c2:73:56:89:26:c8:11:50:ec:fb:ab:3d:e4:2d:
27:3e:57:f0:88:36:80:e2:61:4f:10:8f:60:fb:35:dc:fd:6b:
30:16:8d:d5:0e:a3:73:ce:f9:d1:70:58:54:58:66:8c:cc:13:
fb:e9:c8:bf:bf:9f:81:b3:8e:06:e8:0f:b7:83:36:56:cb:47:
0a:57:3a:f4:ff:7d:cf:d1:e0:eb:2e:60:af:5b:03:b3:86:f1:
bb:db:49:88:d1:2e:4e:cc:4c:9a:6b:0a:7b:f5:18:5e:7c:81:
d9:1a:0b:84:ff:eb:c5:46:08:b3:3c:3d:fb:2a:c8:c8:f0:b5:
e5:b2:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:46 2025 by rpki-client