Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: eM3HVrPcreAeucRByV37c+JRXniGRFix+YRiOKtKRWI=
Subject key identifier: 42:F7:A0:77:C4:D4:7B:6E:84:1C:86:34:C0:A5:C5:F4:70:50:8A:6C
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 6FCC0DDB3CF2435298EF8B63B0F14405259F75C9
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 05:00:02 +0000
ROA not before: Sun 23 Mar 2025 04:55:02 +0000
ROA not after: Sun 22 Mar 2026 05:00:02 +0000
asID: 9341
IP address blocks: 119.252.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cc:0d:db:3c:f2:43:52:98:ef:8b:63:b0:f1:44:05:25:9f:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 04:55:02 2025 GMT
Not After : Mar 22 05:00:02 2026 GMT
Subject: CN=42F7A077C4D47B6E841C8634C0A5C5F470508A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:15:a8:38:2d:38:ed:d2:71:54:72:43:11:
91:58:33:c6:c7:63:2d:37:6b:16:63:5f:00:60:df:
b5:23:a3:d0:38:34:bd:7a:0a:3f:76:80:85:49:e0:
44:94:98:af:6d:b7:9a:66:92:89:00:73:59:02:d0:
72:1b:1f:b0:f3:60:8b:85:3a:0f:bd:e5:1c:59:11:
b4:a0:32:72:10:01:43:f6:16:f2:e4:8a:2a:12:69:
54:aa:73:71:32:33:dd:64:6b:08:bd:05:0c:54:3f:
6b:81:0e:3f:c4:d5:99:fa:7b:1d:84:a6:5f:4d:b6:
68:6c:fc:11:c8:fc:de:e5:27:87:35:27:ef:f7:6f:
e9:4b:2d:95:cb:2e:ba:44:b1:ba:e7:4c:4b:a4:2d:
18:32:1d:29:de:58:c6:57:c5:2a:8f:4b:d5:09:4e:
7e:46:f9:d2:8b:02:d9:63:0a:28:d9:75:f2:86:57:
fc:37:79:d2:30:69:97:82:31:0b:a3:62:cd:d0:0d:
73:17:67:78:9d:e7:f1:33:49:38:36:a2:66:de:de:
d0:33:13:a0:f6:73:e0:12:d4:b6:9a:29:7b:e4:7b:
27:73:37:dd:be:19:2d:eb:66:e4:f7:37:1f:1c:df:
ce:f7:a2:47:af:d1:ce:65:e7:b2:73:25:a1:a9:d2:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:A0:77:C4:D4:7B:6E:84:1C:86:34:C0:A5:C5:F4:70:50:8A:6C
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.171.0/24
Signature Algorithm: sha256WithRSAEncryption
19:88:50:e8:3c:2d:af:7d:86:18:a8:95:20:54:69:f5:88:c0:
48:35:32:55:31:dc:6d:5d:45:40:ad:5a:6d:02:17:1d:83:ea:
a6:5d:85:b8:e5:99:8d:43:2d:53:fc:96:cd:38:b0:91:8e:b2:
55:ad:84:e1:b7:5b:9c:68:a4:1b:02:72:da:e0:05:b4:e4:41:
1f:74:e0:e3:8c:44:34:a2:a1:39:35:d6:af:1e:0a:bc:db:65:
09:0d:aa:d2:e0:4f:b7:95:d8:31:ab:02:b5:79:c7:c6:d5:a9:
42:14:12:c5:15:1f:e8:59:59:01:7d:6e:76:0d:df:1f:00:a7:
4c:e4:f3:96:bb:ef:d0:d2:5f:c5:1f:35:b3:79:9d:8d:c3:45:
4f:03:a3:e7:64:0e:83:3a:c6:fd:a2:a0:13:7f:6d:48:9d:1b:
c7:ae:33:07:6b:36:99:38:db:dc:0b:d2:c2:24:05:00:b8:ba:
87:82:bc:be:3b:81:7a:45:53:b2:39:a4:78:9b:4f:0a:37:ea:
cc:bd:c7:a2:3d:9b:6e:08:89:f2:6e:5a:21:3b:ec:76:c3:38:
d1:cd:df:72:c3:a6:c0:12:00:81:ad:d0:10:7e:ca:c9:7f:17:
c5:83:ba:34:52:9d:8b:cb:78:4c:c8:d2:eb:a3:24:cb:4b:82:
2e:a8:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:34 2025 by rpki-client