Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa
File: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=
Subject key identifier: 1B:5A:E1:61:51:DD:2B:FF:DE:F9:FB:CA:2E:6E:F9:DE:1C:17:0C:E0
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 522177C92D00203CB2B3E25ABA5158337CC0533F
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 06:00:00 +0000
ROA not before: Mon 27 Jan 2025 05:55:00 +0000
ROA not after: Mon 26 Jan 2026 06:00:00 +0000
asID: 38320
IP address blocks: 119.110.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:21:77:c9:2d:00:20:3c:b2:b3:e2:5a:ba:51:58:33:7c:c0:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 05:55:00 2025 GMT
Not After : Jan 26 06:00:00 2026 GMT
Subject: CN=1B5AE16151DD2BFFDEF9FBCA2E6EF9DE1C170CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:95:a6:19:3b:20:97:c8:ef:e0:10:00:d5:
13:ff:12:fc:e0:3b:95:cb:6f:ac:29:bb:5a:c6:ca:
44:6e:7d:13:0a:72:dd:2f:19:e2:ae:03:c3:89:6a:
af:86:4b:f4:80:1f:6b:5b:1e:55:ba:c1:fb:ac:44:
b3:a5:22:26:c6:61:70:bf:bc:70:16:22:fb:97:23:
9f:a7:97:cd:22:8e:75:91:41:08:0d:24:1a:83:22:
11:e6:8b:59:d7:1a:e2:60:fa:5c:d9:d2:1e:bf:a3:
d2:84:26:6c:f9:f8:8a:2f:9f:97:f8:eb:a6:21:33:
47:5d:ae:90:51:eb:1a:f1:9b:de:73:2e:9d:02:24:
52:b2:b6:63:84:17:54:60:c2:fa:67:e4:48:7c:1a:
4b:23:f2:3a:ba:a3:6b:42:b0:77:20:06:dc:41:5b:
c5:8b:3f:d7:08:d4:38:ed:f1:2e:14:73:40:33:e2:
62:0e:5f:18:06:45:25:f5:d0:09:4c:13:da:f2:2f:
42:32:2b:4a:14:c6:bc:98:52:96:99:8e:aa:bc:b7:
8e:b8:e6:49:38:9a:f2:5c:86:7a:ad:80:79:6d:54:
b9:16:4d:97:ab:16:6c:50:75:90:30:b3:de:39:12:
c6:3b:bb:a8:cd:75:24:ca:af:1c:56:63:a0:57:83:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:E1:61:51:DD:2B:FF:DE:F9:FB:CA:2E:6E:F9:DE:1C:17:0C:E0
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.72.0/22
Signature Algorithm: sha256WithRSAEncryption
17:16:c7:e2:fd:a4:64:c5:29:bd:e9:52:3b:67:8b:fc:0a:7a:
08:2f:23:d5:5e:f8:29:e0:32:7b:97:5e:18:09:90:c8:f0:86:
52:05:94:7e:f0:d8:33:75:85:df:f3:ae:27:44:77:30:fa:6d:
fa:c8:75:22:65:82:e0:cd:f6:aa:35:69:38:9a:08:8d:9f:02:
81:a5:63:de:a9:b0:be:32:95:d0:fc:32:d5:ef:01:e0:42:de:
20:67:ad:77:3d:3b:67:73:8d:d6:9f:8e:3d:f1:ac:f9:79:b3:
d3:57:ff:ae:c0:06:c8:bb:1f:0b:49:41:e1:b2:e7:97:6b:63:
f5:47:28:75:75:55:21:ba:17:3f:30:b2:80:b5:c5:02:59:28:
73:27:f6:db:74:1f:f6:3c:97:fe:05:55:96:8e:e3:bf:91:e5:
a8:7c:a7:6a:a8:1a:9d:53:81:47:9b:5c:67:6c:ca:96:b6:5e:
10:23:94:31:35:c5:ab:64:7d:f4:9e:53:50:04:14:89:cd:bd:
ed:0f:54:e8:46:21:96:3a:f3:97:42:75:82:bc:96:3f:af:ba:
9d:7b:45:9a:94:fb:2e:84:05:10:c5:4e:9a:a9:07:ed:61:e1:
d9:1e:e2:c3:8c:0e:21:f0:36:9c:94:48:b3:42:7e:0d:d2:4d:
2f:2f:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:24 2025 by rpki-client