Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32332d3234203d3e20313430303331.roa
File: 3131302e3233322e38342e302f32332d3234203d3e20313430303331.roa (raw, json)
Hash identifier: Dc9MsXy72pOcLVQ+pfOhLoVVECs01sTt6mxXjr2Hko4=
Subject key identifier: DC:04:86:B2:EE:B7:04:17:6A:22:35:AA:6D:9B:56:5B:3D:32:02:CD
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 7817D86D6004C5ABDE68BB34E0EBA6D744C85950
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32332d3234203d3e20313430303331.roa
Signing time: Fri 23 Aug 2024 06:00:03 +0000
ROA not before: Fri 23 Aug 2024 05:55:03 +0000
ROA not after: Fri 22 Aug 2025 06:00:03 +0000
asID: 140031
IP address blocks: 110.232.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:d8:6d:60:04:c5:ab:de:68:bb:34:e0:eb:a6:d7:44:c8:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:03 2024 GMT
Not After : Aug 22 06:00:03 2025 GMT
Subject: CN=DC0486B2EEB704176A2235AA6D9B565B3D3202CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:21:b9:c7:75:da:5a:85:a8:9f:ba:3f:7b:
a9:31:a1:9a:5e:ba:64:e5:ef:3e:79:bb:b9:5d:b0:
90:28:f1:c7:b6:fa:fe:0c:e5:dc:a4:bf:c4:dd:9c:
aa:ea:95:ec:84:88:7d:f5:87:c3:e1:6b:ad:19:5e:
9e:b6:14:ca:4d:51:23:0e:2f:34:ec:2e:b5:08:c8:
d4:8f:e2:1c:c1:23:7d:5e:6f:e9:a8:14:0d:66:79:
92:e5:f9:7f:5b:32:1c:92:6e:6b:4c:66:fd:0a:1b:
7a:97:81:07:34:18:ff:ce:21:86:ea:49:66:b6:f0:
20:68:9c:ae:74:9b:92:2f:3f:5f:99:e2:68:2d:6b:
b5:e2:ef:7e:d2:0a:7b:8d:4a:2c:e5:6f:0f:b3:fb:
54:1f:89:f6:5d:51:08:33:eb:fe:9b:6f:d1:d0:5d:
ba:24:51:ec:b8:1d:f3:fd:41:03:a9:a2:35:69:2b:
c6:ef:fa:c8:4f:f7:43:e1:28:4b:38:5f:a9:ce:d8:
38:f5:a6:72:9b:dd:50:d3:b9:32:c7:08:ea:76:72:
75:33:2e:2d:e7:07:12:90:13:f1:1f:2b:a7:4b:1e:
9a:e5:28:4b:68:43:dd:4e:31:69:01:c6:d0:70:52:
a9:b0:1f:25:81:a4:7a:21:65:53:a9:b3:fc:aa:11:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:86:B2:EE:B7:04:17:6A:22:35:AA:6D:9B:56:5B:3D:32:02:CD
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32332d3234203d3e20313430303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.84.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b8:9f:0e:f0:47:24:39:0a:56:fe:ac:3c:d5:de:7d:be:e0:
0b:1c:1e:4a:f4:36:89:16:99:7c:68:3e:b0:73:d8:12:74:3b:
1b:39:32:bf:17:b5:32:67:1e:f2:91:62:61:a4:52:6c:f3:48:
3f:6f:42:23:c8:14:a6:b4:75:98:84:10:fb:94:d2:4b:d9:70:
91:f0:cb:cb:39:05:41:c7:1c:c3:5e:67:aa:71:fe:dc:42:c7:
91:e0:b4:21:56:5b:85:29:1f:b7:95:57:41:de:6c:30:bb:58:
dd:90:26:fc:92:e4:d9:eb:2f:5d:64:17:df:4b:e7:53:e1:54:
cc:61:9d:77:a9:8a:a2:a3:58:26:13:c0:1b:e5:7d:fd:b6:fa:
d4:48:14:b7:44:00:1a:f3:66:fa:3f:59:72:ff:6d:06:8b:16:
4a:f8:33:7c:0c:92:f6:9f:d6:33:37:5e:ba:d3:83:d5:e1:6b:
cb:6f:d6:ec:ea:43:cd:19:91:51:c2:33:67:bc:82:ce:c4:a4:
dd:b1:e3:f9:0c:5d:06:83:73:45:0b:0e:58:fd:e6:9f:89:98:
e8:78:e0:ae:0f:36:99:4c:96:74:dc:25:2e:a2:9e:53:76:a4:
bf:73:64:c7:e5:cb:99:55:c8:10:22:cc:7b:af:05:04:e8:8f:
70:cd:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:56 2025 by rpki-client