Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
File: 3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier: M6bEMoE9yUSFwGi4R6TTpgsyJp4KBwUxK0GNnSwn7xY=
Subject key identifier: 2A:9C:01:DC:73:07:69:8D:A7:B5:1E:B6:C7:4F:67:AE:35:BC:D7:86
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 40C0332FA89675D6B0A8E27E37FFD6F1EBA9F26D
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
Signing time: Fri 23 Aug 2024 06:00:04 +0000
ROA not before: Fri 23 Aug 2024 05:55:04 +0000
ROA not after: Fri 22 Aug 2025 06:00:04 +0000
asID: 138841
IP address blocks: 110.232.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c0:33:2f:a8:96:75:d6:b0:a8:e2:7e:37:ff:d6:f1:eb:a9:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:04 2024 GMT
Not After : Aug 22 06:00:04 2025 GMT
Subject: CN=2A9C01DC7307698DA7B51EB6C74F67AE35BCD786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:72:5b:3b:ef:6f:ad:34:6b:cc:04:75:15:
bb:1f:66:11:f0:b9:45:0f:71:3b:79:f1:ca:fa:35:
c1:ae:66:8e:22:18:32:cc:9b:89:20:2b:3c:b8:98:
76:fe:82:60:39:9e:44:53:4b:33:c5:dd:46:29:77:
11:f3:8b:6e:e9:b8:34:f4:7d:97:04:ca:c8:41:75:
b9:6b:e5:8c:d0:f0:9c:55:27:c7:69:80:ae:ec:35:
bc:7b:7f:95:c3:9c:38:bd:63:75:b9:49:8e:ed:59:
61:3e:3c:ca:a1:10:77:14:d4:63:f1:e9:c8:10:03:
cb:6c:e0:51:8a:6a:8a:80:b6:a4:38:35:ac:4d:af:
17:0e:be:5e:f7:f2:eb:dc:98:f5:d1:ed:0e:cc:5a:
d6:01:a9:6d:7c:53:0a:fd:26:27:88:63:76:a7:ed:
75:64:82:4f:42:74:2f:e4:ef:3a:cd:fc:a0:18:40:
77:0e:7e:f1:79:c7:fe:73:41:e6:39:2c:7c:b0:97:
af:99:e7:a1:a6:6f:e6:20:7a:3a:1b:51:03:fe:47:
7d:64:2d:fb:59:e2:1c:5d:df:fe:75:4e:6c:68:bc:
9e:32:72:8c:46:ca:4d:d1:8e:6b:f4:48:73:bb:8b:
1e:2a:11:ce:2f:fb:a8:d8:e9:1b:19:a7:36:f1:a1:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:01:DC:73:07:69:8D:A7:B5:1E:B6:C7:4F:67:AE:35:BC:D7:86
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.73.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4a:72:f7:e3:fe:f9:e4:19:4e:da:4d:62:95:86:3d:d7:d6:
02:7a:9d:fe:9f:d1:09:3c:6e:d0:f7:63:bf:04:cf:6e:dd:2d:
91:98:84:41:6d:5e:f9:34:98:cf:4c:fe:aa:60:53:7d:52:52:
3e:13:2d:e2:2b:fa:7b:69:b7:78:d1:02:94:b9:88:d7:bb:54:
81:c8:95:2d:e0:89:e9:a9:ad:c9:39:e9:17:1a:c9:a0:7a:f5:
2a:bd:42:68:00:4a:38:d8:96:68:82:ff:b5:7a:b4:36:58:f4:
76:c6:c7:01:40:4d:f1:b8:25:60:43:eb:45:1b:a0:1e:62:c6:
bc:fe:5f:0c:25:8d:1b:55:45:b5:37:a0:e4:28:0f:46:be:9e:
aa:d5:39:98:eb:b0:7e:ad:5f:a7:4f:dd:68:3f:e7:a1:fb:31:
0c:1f:f0:a1:c7:4f:9a:3d:83:8f:f1:44:3b:10:8d:fa:08:d0:
fb:81:0d:49:a2:0f:ba:55:a8:d8:b8:4a:81:d1:4b:80:c0:4f:
f2:9c:18:00:74:c5:af:20:ed:c1:6f:a6:ea:83:0f:52:db:80:
95:ba:62:67:b9:86:41:ee:60:c1:bf:c1:bb:e5:c4:27:1a:bd:
e6:23:c9:4c:15:ce:ba:01:99:ef:95:6b:ec:50:d6:c9:8f:6c:
9c:c3:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:16 2025 by rpki-client