Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137332e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: F7AWTK39RhCgupTMq14YGAXEzyIjC9Tk1pER6cPeYr0=
Subject key identifier: 1B:BE:4D:E3:B5:93:1C:D7:87:EA:A1:E3:81:5D:C6:CC:AB:17:2B:5C
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 6F74C44FDE424D850760D8E24CCFDA2D50BC6339
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137332e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 07:00:01 +0000
ROA not before: Sun 23 Mar 2025 06:55:01 +0000
ROA not after: Sun 22 Mar 2026 07:00:01 +0000
asID: 9341
IP address blocks: 119.252.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:74:c4:4f:de:42:4d:85:07:60:d8:e2:4c:cf:da:2d:50:bc:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 06:55:01 2025 GMT
Not After : Mar 22 07:00:01 2026 GMT
Subject: CN=1BBE4DE3B5931CD787EAA1E3815DC6CCAB172B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:56:08:10:f4:b2:7d:1e:c2:17:89:8f:ff:
ba:28:bf:45:49:7f:5c:29:fb:1a:36:36:04:0e:8c:
e2:07:08:fc:b0:d4:89:a6:ac:29:6b:d9:fb:ee:37:
a8:c7:ac:9a:61:5d:12:b8:81:02:e4:ae:4d:12:9d:
9a:63:21:ce:9c:ae:93:4b:cf:c6:e1:8b:62:f9:e3:
16:74:46:3a:0c:2d:a8:97:1e:3e:54:7a:1b:82:28:
71:73:7b:3c:23:5b:15:4e:5c:6c:a7:49:3e:c4:36:
45:68:45:d5:2b:ee:77:21:06:d4:ad:81:0b:e4:84:
b9:61:f6:35:85:04:c6:e6:65:bb:c0:06:de:7d:21:
3f:b8:6e:d8:0d:0e:38:ce:41:3c:50:93:76:31:e7:
11:16:17:86:4c:2f:6d:71:0d:d6:57:85:dc:96:5b:
08:02:20:4a:dc:22:fe:5b:84:5e:77:6b:3a:0e:71:
ac:90:83:0e:a4:81:9b:2b:9a:42:b2:e3:5d:3b:39:
c6:e9:6c:7d:8a:69:9f:e4:cb:32:5a:7a:8c:09:08:
2a:15:2d:65:17:67:77:0d:17:68:97:41:3c:b7:3b:
ca:78:17:d4:9d:d4:98:37:13:5b:51:f3:cd:61:81:
8b:23:0a:32:0e:d4:fe:e7:27:e0:5e:d7:5c:26:d4:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:4D:E3:B5:93:1C:D7:87:EA:A1:E3:81:5D:C6:CC:AB:17:2B:5C
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137332e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.173.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8e:6f:0b:f8:b6:ff:f8:e9:69:b9:ab:c3:66:5b:79:73:d8:
8a:af:40:bb:d5:4a:24:cb:36:d7:24:f9:c4:9f:5a:35:c1:d1:
12:25:0d:cb:74:6a:16:b5:24:f3:39:a7:17:43:80:c8:d6:d9:
74:42:30:30:f2:84:10:20:ee:f4:75:1a:26:4b:52:ee:81:f4:
78:1e:86:71:9a:e4:7e:24:cb:df:16:1e:cb:b6:87:75:62:a3:
b6:da:d4:b4:92:aa:99:2e:6f:93:f8:d9:c7:9b:66:97:f9:85:
ae:1e:11:60:68:bc:24:1d:1f:37:5f:23:70:71:60:22:a4:e4:
74:7b:55:6e:b3:6d:09:b3:5d:27:70:15:0c:13:ea:66:cf:8f:
9f:3a:cb:36:e5:cc:c9:64:58:cc:28:93:c5:14:62:61:b3:01:
e5:24:63:f6:66:e4:a8:fc:8c:de:d9:62:14:8a:46:cc:17:82:
f1:9a:a1:c6:3f:7a:64:bc:a1:28:bd:ce:f7:9b:14:eb:e0:49:
2f:73:f3:48:44:72:83:29:3c:fb:bb:b5:16:92:55:ee:d0:8d:
a5:0a:ea:0b:0f:99:e3:6a:43:a0:64:a1:00:8e:b5:c9:29:ad:
de:6d:78:24:43:e4:fa:3d:ad:28:05:60:2b:93:64:c5:30:94:
33:d2:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:29:18 2025 by rpki-client