Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
File: 3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa (raw, json)
Hash identifier: H1Ehj5teFFzgxCljJRj0gxvRRdxy+g/hVzQo6QST2ns=
Subject key identifier: 3E:6C:77:A7:5B:85:E3:B9:DF:70:0C:F9:B3:E7:B7:4F:B4:DB:7C:1D
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 6B38955E4C9CBDAC05EFCE26F3AB480A5928B0DA
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
Signing time: Fri 23 Aug 2024 06:00:04 +0000
ROA not before: Fri 23 Aug 2024 05:55:04 +0000
ROA not after: Fri 22 Aug 2025 06:00:04 +0000
asID: 138841
IP address blocks: 110.232.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:38:95:5e:4c:9c:bd:ac:05:ef:ce:26:f3:ab:48:0a:59:28:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:04 2024 GMT
Not After : Aug 22 06:00:04 2025 GMT
Subject: CN=3E6C77A75B85E3B9DF700CF9B3E7B74FB4DB7C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:69:0d:37:73:93:9e:04:83:9b:6c:17:34:
c1:ca:af:29:7a:e3:12:1f:fe:bc:a5:ef:ff:6b:37:
4d:8a:74:63:0f:06:5a:b4:59:eb:4d:8e:bb:97:4b:
95:c1:33:34:c4:d2:f2:b3:22:fc:90:9b:92:e2:49:
4f:52:fe:d1:de:5b:d3:04:69:88:6d:92:75:f7:52:
28:6f:fa:d0:8d:32:3f:38:0b:88:55:66:88:87:47:
f8:31:a6:74:b2:bb:0b:65:93:cd:57:37:8b:ff:30:
cb:eb:e5:67:44:0c:66:9c:7a:59:b4:23:2d:37:a9:
fd:41:7a:f8:ce:41:87:a3:59:d6:39:63:cd:62:2f:
c7:b4:03:15:c1:c6:68:45:20:cc:19:de:f2:10:98:
41:fb:0f:89:79:ae:0a:63:37:15:be:b4:c0:62:fc:
96:24:ca:f9:ae:af:84:5c:f7:1d:29:2f:9c:ad:36:
bf:9d:fd:ca:00:38:0e:0f:d9:b0:cc:06:a8:ef:db:
5a:80:2b:04:b7:ad:ad:04:aa:53:ff:70:20:61:ed:
7f:80:10:22:cb:ca:59:59:e9:ce:5b:69:5e:00:15:
de:18:41:80:3e:6a:fb:80:f0:94:e9:d8:32:3e:51:
05:e8:c8:0a:41:62:c9:51:aa:5c:65:07:ef:60:16:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:77:A7:5B:85:E3:B9:DF:70:0C:F9:B3:E7:B7:4F:B4:DB:7C:1D
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.88.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f3:9e:b5:f2:d0:3f:c8:f3:ee:ba:00:1b:cb:1b:e8:a8:42:
1f:70:62:85:18:ca:23:e9:2e:80:ee:67:40:4b:ab:5e:49:ff:
f6:54:90:b9:63:85:d8:ff:d0:52:ac:4f:9a:43:be:3f:da:aa:
f2:de:47:ee:45:a2:cc:69:83:9e:ca:62:38:5d:0e:e7:5d:d5:
c1:9c:a9:36:6d:31:b3:3e:56:7c:4d:4a:52:f4:3f:97:a5:96:
00:c2:9e:50:77:28:24:61:d8:31:8e:29:2c:1f:a5:3f:50:56:
34:ad:a4:41:27:ed:dc:a3:1d:08:3a:40:a6:a1:2b:81:42:08:
b7:54:eb:95:d2:92:2d:25:50:a7:2c:1d:79:df:65:30:d7:88:
31:d1:da:d3:0f:f1:26:73:94:f6:c6:95:00:5f:3e:c5:a0:05:
5b:16:a8:8d:fe:80:85:d4:c5:79:91:be:56:83:b3:07:11:7b:
57:84:2f:3f:31:e3:b4:ec:b9:03:6c:05:df:57:bf:85:6d:43:
61:99:10:ae:84:39:4c:c1:61:0d:bb:3f:fc:df:60:f3:12:19:
84:b8:b1:de:cd:2d:93:58:be:b5:e4:4e:12:6e:6f:df:b1:4b:
26:21:7f:e2:b7:00:c0:e4:2a:e6:d1:26:33:98:b1:6e:32:b3:
af:63:8d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:18 2025 by rpki-client