Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e39302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: EYRMIA0EZVeg+8HRrdzMbzdmllUU/yKuDXoIy1QDFxM=
Subject key identifier: 0F:C8:74:C7:1F:AD:F2:2A:C8:35:94:ED:F7:90:43:55:2E:EA:A5:7C
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 625FD4B356BF72B0D95DE9E0BE557936A6B6223C
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
Signing time: Mon 24 Feb 2025 01:56:46 +0000
ROA not before: Mon 24 Feb 2025 01:51:46 +0000
ROA not after: Mon 23 Feb 2026 01:56:46 +0000
asID: 23679
IP address blocks: 110.232.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5f:d4:b3:56:bf:72:b0:d9:5d:e9:e0:be:55:79:36:a6:b6:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Feb 24 01:51:46 2025 GMT
Not After : Feb 23 01:56:46 2026 GMT
Subject: CN=0FC874C71FADF22AC83594EDF79043552EEAA57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:a7:3f:b5:d5:92:22:00:47:89:5d:2e:db:
cb:46:d1:01:8b:ae:18:12:5b:a8:41:5f:be:15:42:
49:22:64:fb:72:af:59:45:42:89:5f:ff:c7:dd:d5:
b5:18:e0:6f:33:58:4b:2d:6b:34:b5:33:c6:d0:01:
f7:59:6d:55:2a:a9:21:ac:cc:07:bf:8b:94:8b:17:
ce:78:46:ff:c9:e9:3b:39:c4:a7:56:48:55:fd:01:
18:92:a9:f8:96:a8:2e:51:11:70:57:8e:e4:54:6b:
7a:dc:4d:5e:23:88:ee:ad:31:f6:ba:f5:7a:fe:82:
b1:13:d2:31:c9:cf:61:e4:44:f8:76:d2:84:ec:51:
ea:7f:23:59:99:88:9d:a1:40:f1:03:85:e9:48:4c:
49:90:d9:bf:cc:63:3a:2f:c4:17:69:27:04:7b:6b:
24:60:bf:0a:21:46:96:5b:c7:9d:10:4e:f6:bd:78:
b7:07:86:be:22:77:97:cf:aa:3e:28:00:e9:5f:f3:
58:47:d1:df:00:8c:7a:8e:31:f5:36:1c:d6:a5:f5:
30:7e:19:b8:6f:9c:d6:87:c1:1e:c9:9c:14:aa:e5:
2b:4c:b0:80:0b:3c:f9:48:3d:05:ba:6a:01:ed:c9:
ff:45:4c:7c:9a:9f:bf:f8:2a:90:17:9e:f8:59:e6:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:74:C7:1F:AD:F2:2A:C8:35:94:ED:F7:90:43:55:2E:EA:A5:7C
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.90.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:39:00:37:0d:6f:28:0b:66:94:1a:2a:99:28:80:61:1c:82:
c5:17:40:cc:30:68:b9:ba:0d:09:ee:d3:bb:fd:84:0b:34:07:
97:3d:25:cb:a8:3e:1d:3f:75:12:f5:77:40:eb:59:1d:00:e5:
ad:b2:67:39:8b:41:0b:cd:4a:6b:e7:57:fe:3a:1d:45:47:01:
70:27:e6:52:1f:83:6c:ca:b4:df:8f:4b:ac:6b:01:00:32:fc:
ee:38:bd:a4:90:0a:64:71:69:fd:fb:6a:22:49:9b:0f:d9:f1:
6f:a0:e7:a2:f0:a1:2f:c2:c9:0a:e4:6f:9e:15:31:b5:da:60:
02:0b:f1:21:39:93:ae:60:54:63:2c:d3:31:41:49:2a:c0:8d:
2c:94:06:74:00:55:b5:d9:00:f3:c4:0a:1d:82:2c:41:4a:99:
9a:bc:af:17:04:b4:d9:9d:32:75:23:0a:f1:2f:18:7a:0d:a5:
2f:51:ca:28:9f:18:53:93:75:96:de:85:6e:d8:00:81:28:8b:
e2:62:0e:05:58:fe:99:26:7f:63:4b:2b:fa:55:86:c9:3a:63:
77:e5:82:a3:7a:93:be:4c:93:b0:e7:99:c9:39:5b:62:ac:66:
64:de:97:51:aa:4f:20:58:36:a9:d9:85:2e:55:52:a0:5f:05:
4e:6f:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:21 2025 by rpki-client