Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: UufP6hGQXR6qRrJiLTjsi5VATdfJFLLVEfNufWTaIcc=
Subject key identifier: 18:6A:49:B3:E6:48:20:85:D0:C5:0C:EA:37:67:FA:24:E9:ED:93:DC
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 16D1EE34170002DDECE3FCC260576A285A4F9FCB
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 119.252.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d1:ee:34:17:00:02:dd:ec:e3:fc:c2:60:57:6a:28:5a:4f:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=186A49B3E6482085D0C50CEA3767FA24E9ED93DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:d5:17:cf:87:52:92:55:a2:b1:86:df:2b:
b6:dc:f1:45:34:d6:0b:28:59:3e:30:f9:48:6d:73:
05:c0:90:66:ac:91:22:15:82:9e:7d:8d:79:c7:55:
24:1f:94:a1:3b:ec:63:a9:fa:3e:94:39:8d:8d:7f:
63:6c:93:80:29:d5:2a:23:35:82:ff:17:37:a7:54:
51:c2:fd:1b:0d:a6:57:c0:53:d2:d3:d1:82:82:d1:
60:68:38:14:5b:86:90:04:92:e7:c4:d2:03:b1:bc:
f2:f5:3b:54:d3:3d:02:6b:18:35:03:10:db:2f:b2:
e5:48:d2:52:9a:8b:7b:de:c6:04:aa:f4:d4:c6:7b:
e1:1d:45:6b:ba:cb:e9:3a:4a:2b:45:21:27:2a:02:
84:57:aa:f8:51:6c:4e:f0:21:20:80:ad:05:c6:56:
82:ed:a8:91:46:2d:68:2a:d1:f2:ed:3f:0e:0f:2d:
bc:3b:d2:11:7f:01:90:8d:91:bc:e2:d1:70:62:52:
8c:60:fd:31:12:9e:6f:4e:22:07:8a:96:8d:c9:58:
d2:82:e2:bf:3c:e7:4c:d4:5d:d6:b9:b7:8e:3a:79:
83:23:cf:a6:20:dd:6e:72:26:74:fd:6c:ea:65:27:
27:70:5a:c5:2f:8f:4d:c1:f1:99:ab:a7:80:10:56:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:49:B3:E6:48:20:85:D0:C5:0C:EA:37:67:FA:24:E9:ED:93:DC
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:47:5e:d0:4c:25:f8:5d:25:c6:73:1b:be:63:13:f7:49:85:
59:95:af:df:80:24:17:15:ce:54:e2:54:6f:2c:76:dd:ec:45:
23:ee:5f:dd:b6:ea:c0:b4:ae:43:27:79:34:68:b5:2d:43:ad:
1f:8d:a0:11:7e:5c:0a:75:32:e7:e4:39:dc:45:a1:09:26:70:
a4:00:7f:eb:64:fa:8a:16:8a:11:e3:ac:d2:07:4c:64:27:ce:
b6:e2:b9:1d:aa:4f:01:3d:8b:75:5c:33:14:43:f9:91:f2:31:
b3:c7:39:5e:f4:65:53:e0:57:cb:f3:d2:a2:03:3b:e7:b1:ab:
0d:fa:85:e7:0f:7f:8d:cb:eb:68:f7:76:09:4e:4f:aa:d1:21:
08:16:6a:ee:7e:2f:b9:a5:d0:09:28:5a:7a:c8:38:94:60:80:
34:1d:72:99:8c:c9:b4:74:bb:68:43:52:1d:cc:85:2a:f8:19:
e2:f5:ac:3e:65:99:b7:31:27:d9:54:c9:bb:ba:17:18:19:7d:
12:cc:80:c9:d0:58:29:20:94:bd:d1:ba:e6:32:ca:6a:84:76:
df:22:2e:6b:d0:21:f3:de:a0:04:47:7f:02:6f:7b:f0:9b:8b:
06:4d:85:b3:df:54:39:44:f9:9e:b9:0f:db:7b:d4:aa:67:78:
a7:97:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:32 2025 by rpki-client