Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: /FsDGkhJVeOpImagI3W77Zhf3KHhqfI6n1GZ7eOu8to=
Subject key identifier: 18:1A:D7:3C:64:7F:05:FA:E8:3B:95:5D:03:39:7E:6B:F6:F1:44:60
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 71F41A59690E13048BB0B6E7BCF24EF56A782A66
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 119.252.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f4:1a:59:69:0e:13:04:8b:b0:b6:e7:bc:f2:4e:f5:6a:78:2a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=181AD73C647F05FAE83B955D03397E6BF6F14460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:92:51:ef:53:f8:c7:bd:31:a1:34:c3:7e:
2c:02:43:b2:9a:f2:a4:64:29:d5:c7:5e:05:80:8e:
16:16:44:66:18:06:3e:64:76:10:9d:f3:9d:ad:d7:
b0:c9:a2:2b:32:69:1a:80:9c:58:c7:ff:a1:ae:63:
f4:f1:48:77:44:ac:07:54:2d:65:81:77:c2:c4:39:
d6:35:4d:39:61:df:e3:26:09:be:fc:b1:30:f2:30:
5f:4a:14:af:c8:15:c6:6f:e3:e7:98:79:f5:00:30:
07:39:a2:14:f3:9b:2b:41:2d:13:d1:fe:d5:c3:e8:
86:fa:06:9c:87:0d:c0:a5:4e:0c:af:af:07:6d:ae:
36:b3:84:f2:70:f2:f8:19:b5:85:51:5d:7f:14:4c:
2a:81:89:fd:1b:c3:1b:1c:d0:90:87:1f:99:a5:a8:
38:71:d3:28:b4:08:53:a9:14:b7:d0:db:b3:3a:af:
bd:88:bf:7c:d1:6a:36:4f:cb:dd:b4:3a:ab:7d:54:
e1:ba:a0:ff:7e:30:a3:5f:5f:ed:d4:20:54:5d:7b:
9f:2d:52:8b:97:08:c8:83:d1:b7:bc:12:8c:20:45:
04:a3:32:20:c2:78:0d:1d:29:0d:dd:09:40:f6:85:
40:26:99:42:60:60:13:09:17:cd:70:c4:48:3f:ef:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:D7:3C:64:7F:05:FA:E8:3B:95:5D:03:39:7E:6B:F6:F1:44:60
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.172.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6b:e7:ff:53:e3:53:70:ea:92:cc:a4:5d:2f:f1:cd:a4:98:
1c:47:d6:63:19:91:ee:e7:05:93:85:b7:3c:92:7a:6c:10:8a:
8c:44:9d:8d:f6:76:6c:bd:2d:38:82:1c:74:1c:bc:0e:b0:6c:
c6:10:86:3e:0b:78:89:ab:00:74:23:e6:49:83:46:55:8e:39:
86:33:88:c8:07:09:07:20:5d:6c:5f:1f:d7:c6:12:3d:75:c2:
ad:0c:ef:18:b8:3e:13:47:c6:ff:96:ce:ae:ef:f2:31:a8:d7:
9d:91:fe:fb:b6:d3:91:2c:78:88:91:29:dd:45:c3:35:3a:a5:
12:50:a5:f0:b4:ac:50:02:2f:f5:4c:57:a9:60:eb:30:70:02:
49:9e:b7:66:9f:26:12:d2:23:25:44:a1:ab:77:3d:d8:f8:22:
f0:36:e1:e8:4d:72:59:93:a1:19:49:fa:64:d4:37:aa:e4:c0:
78:f9:2a:81:05:fe:d0:2f:30:59:f3:b7:15:ad:94:91:e4:51:
74:d2:fe:d5:f6:c7:ea:4f:e7:4a:d9:15:0e:9e:a4:9b:41:81:
f1:45:f4:cc:85:56:1b:85:7c:c6:ee:94:d5:ff:04:f4:e7:43:
cb:8a:30:52:ea:cc:b4:a7:a6:65:49:9d:02:c1:fe:9a:11:1b:
3d:ee:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:31 2025 by rpki-client