Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa
File: 3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa (raw, json)
Hash identifier: mEGhn2IB5v/5IA60OokQ9g7hx/QPLeUcQN1AIMAf1fw=
Subject key identifier: B8:CC:74:92:8F:DD:1A:04:10:88:5C:58:6E:E9:F2:71:F7:57:FD:26
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 2D74A99B62EC8D001C1470E738DFF747591F04A5
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa
Signing time: Tue 18 Feb 2025 03:00:01 +0000
ROA not before: Tue 18 Feb 2025 02:55:01 +0000
ROA not after: Tue 17 Feb 2026 03:00:01 +0000
asID: 9341
IP address blocks: 124.158.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:74:a9:9b:62:ec:8d:00:1c:14:70:e7:38:df:f7:47:59:1f:04:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Feb 18 02:55:01 2025 GMT
Not After : Feb 17 03:00:01 2026 GMT
Subject: CN=B8CC74928FDD1A0410885C586EE9F271F757FD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:e3:06:74:7c:bf:2b:01:a7:77:b9:fc:e5:
47:42:7e:9d:c9:ea:e9:0a:77:af:be:b6:23:e8:f8:
d0:96:4b:10:cd:2e:52:e2:87:26:81:c6:d3:10:3d:
30:77:e5:84:70:0c:92:53:55:d3:30:cd:4f:2e:db:
5f:09:26:95:36:7f:1c:24:ce:d0:f3:b9:53:a0:55:
ea:8d:38:a0:76:2b:b3:e1:9d:0f:84:d8:0a:ae:21:
f0:43:74:02:55:39:d8:d9:66:08:a4:e6:53:6b:cc:
ab:d7:3b:e1:bb:a5:87:c3:d9:e4:fe:f2:32:67:8d:
2a:b3:23:73:38:f4:4b:bf:62:e8:64:ed:05:d8:a9:
1a:cc:d8:5f:d5:26:b2:18:25:ce:a3:57:22:45:0c:
b4:c7:4a:5c:61:63:3f:73:91:7d:f8:84:8d:86:d5:
26:ab:a3:08:cd:17:e0:88:8c:a0:38:db:9b:04:63:
10:49:92:43:95:31:93:b1:81:50:5d:d7:da:9d:a5:
29:be:f7:b3:12:05:27:b4:ab:50:8d:7f:dd:98:c2:
48:bc:e8:aa:a8:e9:dd:7f:56:40:45:82:04:db:c4:
5f:42:5c:ed:35:72:19:7d:59:0f:5a:34:8d:ab:37:
96:a2:7c:04:47:43:ab:b5:5a:57:30:40:eb:06:20:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:74:92:8F:DD:1A:04:10:88:5C:58:6E:E9:F2:71:F7:57:FD:26
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.160.0/20
Signature Algorithm: sha256WithRSAEncryption
23:e5:33:72:d7:f4:a2:53:23:6c:51:00:f8:30:ea:9e:4f:47:
b2:56:3f:c7:8c:35:79:29:3f:84:c1:bc:a0:eb:1f:6c:9c:10:
19:03:08:bc:1e:e9:01:1d:1d:37:92:3f:58:17:dc:88:17:fd:
7a:32:10:8c:e0:ac:37:c5:d6:b6:ef:7d:76:e4:9a:a4:eb:91:
b3:99:7d:a0:1d:c2:57:36:17:22:1d:d9:8c:2d:a4:81:27:44:
48:ac:25:9c:68:8e:ad:a7:ae:91:06:ff:f3:84:73:8a:1f:9c:
6f:0f:88:e0:dd:96:9e:7b:44:6a:43:b5:d5:34:a8:5c:ca:90:
7a:75:0d:ff:64:b0:55:d1:90:b1:4e:87:96:dc:78:50:21:09:
d5:71:59:a8:76:6d:a0:20:77:b7:2a:39:b2:ed:37:65:d6:41:
c1:98:1b:e3:1a:31:28:21:c5:74:9c:d8:9e:e7:06:40:27:c3:
5f:9d:dd:5f:90:fa:ce:44:4a:43:91:fe:9b:dc:10:13:9b:cc:
bc:24:70:a5:35:00:68:08:6b:c3:2e:94:98:00:82:bf:96:d3:
9f:10:8b:f9:bf:a3:79:78:34:19:8b:b0:b2:17:0f:32:3c:1b:
a6:37:83:7a:fa:2b:06:f2:31:c9:af:01:00:d3:a8:cd:d8:d1:
e1:39:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:44 2025 by rpki-client