Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: dR7+852VUYMn4fPUNZ2fWlk8p0lZW3oI9L4SbwpsDws=
Subject key identifier: 84:AE:FD:87:FF:02:7F:A7:31:AC:B5:86:2E:73:B6:5B:91:59:A9:9F
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 77AD571118FB6C9D5AFCC8682C8E3120CCE4789E
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 119.252.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ad:57:11:18:fb:6c:9d:5a:fc:c8:68:2c:8e:31:20:cc:e4:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=84AEFD87FF027FA731ACB5862E73B65B9159A99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:0e:08:4d:c1:e3:e3:29:c7:dd:5c:cf:a7:
14:5a:cf:69:e3:83:4c:76:9e:47:4e:b8:15:f6:d7:
d6:a0:3c:e1:d0:9d:75:bf:b2:7b:c3:50:21:57:1c:
26:d5:23:4e:93:7f:00:be:57:fb:0e:8e:59:70:70:
fb:57:56:14:a4:4a:5d:31:83:2a:e5:e6:ec:68:76:
a1:85:10:69:f0:e5:00:b1:e8:c9:35:8c:06:9a:23:
fb:68:ec:40:7f:46:ca:b9:fd:a0:b4:94:9d:41:f5:
57:b6:2c:37:e0:c8:79:82:ec:1a:76:2c:29:70:64:
40:7a:a4:c1:95:43:74:21:86:05:2a:cd:e1:b6:dc:
9c:2e:a6:f9:fb:55:75:d2:0b:ba:be:76:86:57:0b:
b5:1c:8e:be:9e:fa:d0:8c:80:25:25:95:bc:72:68:
5d:bc:db:d7:92:f1:e9:5f:12:35:ce:d3:fc:c2:fb:
ca:7c:22:61:cc:90:6e:6e:7e:42:b7:de:77:6d:55:
02:48:f1:ed:d6:86:0b:cf:0a:2b:c7:de:e1:cd:da:
7d:b7:ae:2f:0c:ca:32:c7:29:a7:11:0a:36:a2:91:
66:d4:14:e2:bc:65:88:00:04:27:25:ba:56:e2:af:
db:d8:1f:b8:a3:fa:38:a1:da:20:49:87:aa:bc:31:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:FD:87:FF:02:7F:A7:31:AC:B5:86:2E:73:B6:5B:91:59:A9:9F
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5e:b7:8a:40:f7:40:5b:61:86:39:63:67:9c:df:1e:d9:a3:
6a:e4:ec:f2:e5:dc:77:f0:45:98:ad:83:52:e2:45:d5:53:1b:
66:75:3c:36:b3:5f:4d:32:a8:d3:7d:7b:af:29:1d:c4:27:be:
0b:08:a6:a6:d9:9f:1f:0f:8a:ff:db:69:9f:cc:cd:85:6d:7b:
75:ae:8f:76:d4:94:35:fc:8d:28:cd:4f:3a:39:db:13:5d:49:
9e:ed:25:4d:7f:47:2a:ec:80:19:db:ed:b9:3c:3b:0c:a4:61:
41:da:8a:45:27:a0:1c:76:84:05:04:b7:f4:8b:0d:57:16:20:
33:c8:12:e2:15:ca:13:0e:4e:3f:21:9b:4a:58:79:73:32:20:
c8:b5:ba:3a:82:6d:0b:a6:56:e7:0e:2c:ae:39:c7:3c:f7:23:
85:09:94:db:b0:36:13:c4:60:f3:fd:21:d8:3e:77:12:ab:1b:
11:cf:8d:67:66:f3:ec:45:fc:9b:50:e6:e3:76:9b:a1:99:1a:
ef:ba:0d:58:32:ad:dd:da:1f:48:fa:f1:93:15:23:06:62:46:
3f:9c:63:76:91:03:34:2f:d6:c7:9d:eb:22:e9:1c:ee:58:8b:
a6:e7:75:96:f2:54:d0:c3:2d:15:3f:c3:f0:12:f9:42:df:7e:
93:4c:f3:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd61XERj7bJ1a/MhoLI4xIMzkeJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDJaFw0yNjAzMjIwNjAwMDJaMDMxMTAvBgNV
BAMTKDg0QUVGRDg3RkYwMjdGQTczMUFDQjU4NjJFNzNCNjVCOTE1OUE5OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3g4ITcHj4ynH3VzPpxRaz2nj
g0x2nkdOuBX219agPOHQnXW/snvDUCFXHCbVI06TfwC+V/sOjllwcPtXVhSkSl0x
gyrl5uxodqGFEGnw5QCx6Mk1jAaaI/to7EB/Rsq5/aC0lJ1B9Ve2LDfgyHmC7Bp2
LClwZEB6pMGVQ3QhhgUqzeG23Jwupvn7VXXSC7q+doZXC7Ucjr6e+tCMgCUllbxy
aF2829eS8elfEjXO0/zC+8p8ImHMkG5ufkK33ndtVQJI8e3WhgvPCivH3uHN2n23
ri8MyjLHKacRCjaikWbUFOK8ZYgABCclulbir9vYH7ij+jih2iBJh6q8MTLnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhK79h/8Cf6cxrLWGLnO2W5FZqZ8wHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8rjANBgkqhkiG
9w0BAQsFAAOCAQEADV63ikD3QFthhjljZ5zfHtmjauTs8uXcd/BFmK2DUuJF1VMb
ZnU8NrNfTTKo0317rykdxCe+CwimptmfHw+K/9tpn8zNhW17da6PdtSUNfyNKM1P
OjnbE11Jnu0lTX9HKuyAGdvtuTw7DKRhQdqKRSegHHaEBQS39IsNVxYgM8gS4hXK
Ew5OPyGbSlh5czIgyLW6OoJtC6ZW5w4srjnHPPcjhQmU27A2E8Rg8/0h2D53Eqsb
Ec+NZ2bz7EX8m1Dm43aboZka77oNWDKt3dofSPrxkxUjBmJGP5xjdpEDNC/Wx53r
Iukc7liLpud1lvJU0MMtFT/D8BL5Qt9+k0zztQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:36 2025 by rpki-client