Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: 1jcj5y534Ovu2YHmHHhnL080+SRSLvj+r70RPCDA3TM=
Subject key identifier: 60:23:FA:EF:92:22:B0:28:08:86:49:68:E7:67:B9:73:36:FD:58:CF
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 3781543AE542BC3D8FBE70ACC39AD89941757D97
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 04:00:01 +0000
ROA not before: Sun 23 Mar 2025 03:55:01 +0000
ROA not after: Sun 22 Mar 2026 04:00:01 +0000
asID: 9341
IP address blocks: 119.252.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:81:54:3a:e5:42:bc:3d:8f:be:70:ac:c3:9a:d8:99:41:75:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 03:55:01 2025 GMT
Not After : Mar 22 04:00:01 2026 GMT
Subject: CN=6023FAEF9222B02808864968E767B97336FD58CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:60:9f:a2:c9:9c:b9:70:34:7f:02:2d:26:
b7:86:c9:07:8e:e2:0b:32:29:fc:97:83:53:01:29:
c5:40:87:f6:5e:2c:90:24:bd:36:4d:2f:8a:ff:43:
76:b5:7b:58:5f:79:9a:93:c1:84:5e:bf:cd:5b:a0:
05:c1:22:c0:4c:f4:b5:bd:78:d7:05:e4:01:68:a2:
46:71:77:54:9c:53:bb:80:dc:ce:30:37:17:c3:59:
92:82:71:4d:47:b1:f9:80:33:c8:01:08:12:eb:3c:
e2:1f:65:15:f2:e2:51:a3:80:53:26:02:8d:f6:a9:
60:76:83:07:da:22:5c:fb:56:2b:11:0c:81:62:0a:
b3:75:f8:8e:f8:a7:94:ba:25:7d:97:59:f7:d5:41:
93:34:2d:04:23:b2:9c:bd:51:72:a5:51:0a:ac:d7:
18:87:d0:a5:a0:c8:12:64:7b:cc:84:be:47:12:8f:
12:64:61:f5:c9:5d:9a:d4:ff:49:b0:e7:f3:62:e4:
4e:8a:62:b5:52:6c:aa:fa:67:37:d1:86:52:e7:59:
63:2b:46:28:87:27:46:fa:f4:07:a7:d1:20:08:3c:
ce:24:63:a8:eb:d2:55:6c:48:22:58:f6:d7:a2:83:
86:87:ee:7c:17:3c:94:ef:04:43:b8:25:94:4b:05:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:FA:EF:92:22:B0:28:08:86:49:68:E7:67:B9:73:36:FD:58:CF
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9d:a7:e3:ec:15:3c:d4:9a:7f:71:85:df:e6:63:6e:8d:86:
ab:64:f4:11:ef:e4:a4:99:87:dc:c0:1a:ea:cc:87:39:6d:3c:
24:dd:8f:1c:b7:53:1c:d5:f0:70:af:ef:f1:06:24:96:9e:f4:
7e:d0:b2:75:fe:6d:54:e0:a6:10:b2:e4:eb:6b:83:25:91:1e:
3b:9f:10:b4:35:39:ac:e8:62:75:61:5b:7c:81:3f:f9:fb:1c:
25:bf:85:b5:b1:ce:8b:c1:97:a7:c4:7d:cf:62:1f:62:36:ea:
0d:21:b0:30:a4:f3:78:f7:63:a4:d6:37:ff:f8:95:e5:50:39:
ca:f7:e8:7e:3d:8d:db:3d:0f:c1:6e:70:e0:54:26:07:4e:3e:
4f:a1:5b:df:33:5e:9a:ba:e4:aa:74:bd:f8:e2:54:05:60:05:
18:02:18:90:56:26:90:df:47:f8:cd:b9:59:8e:32:1c:61:79:
d7:a7:22:d9:64:29:5e:c7:0a:14:7b:37:21:57:d9:f5:d6:2c:
18:5f:bf:c5:b3:cb:28:2b:31:d5:d0:1f:80:c3:9c:6c:bd:32:
26:71:5e:3d:81:60:79:fc:0b:17:a0:51:3f:5e:4a:d0:e0:43:
14:f1:47:e8:89:20:ec:f8:9a:60:fb:a9:5f:d9:82:3f:65:85:
5c:fb:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:25 2025 by rpki-client