Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e39322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: LQjh0Csza4FeHhuC9dW/qsuUxgoyBVvWcZMT0ZtC1vI=
Subject key identifier: D3:0E:91:7D:DA:F1:C7:82:CF:51:DB:B9:A7:45:56:AB:CC:C5:2B:A3
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 130502EFAFA9AD325FDBA5E56A39E735AF7E0A77
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa
Signing time: Mon 24 Feb 2025 01:57:10 +0000
ROA not before: Mon 24 Feb 2025 01:52:10 +0000
ROA not after: Mon 23 Feb 2026 01:57:10 +0000
asID: 23679
IP address blocks: 110.232.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:05:02:ef:af:a9:ad:32:5f:db:a5:e5:6a:39:e7:35:af:7e:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Feb 24 01:52:10 2025 GMT
Not After : Feb 23 01:57:10 2026 GMT
Subject: CN=D30E917DDAF1C782CF51DBB9A74556ABCCC52BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:49:d9:68:d1:58:b6:26:2e:0a:9d:25:18:
62:71:b8:9e:9a:0d:a4:63:58:7a:ce:e8:87:13:bf:
6d:fd:43:e8:52:32:3c:bc:2e:3e:93:ac:ca:b5:f3:
b6:85:ea:87:f8:11:e1:68:67:e0:ac:1f:74:56:78:
d7:37:a0:80:f4:29:87:ed:33:4a:63:e6:2c:e9:7d:
06:34:9a:dd:df:73:6e:25:89:fb:90:d1:99:18:a1:
11:68:e4:5b:1e:e7:7a:0d:02:95:00:b5:c5:fd:16:
7a:30:0a:8b:ed:16:7d:44:06:50:f9:fb:8e:78:36:
c9:13:59:03:2a:c6:ce:ae:42:69:7e:2b:31:b9:57:
de:e1:d3:7e:3c:ab:9a:03:31:38:6c:c3:69:e8:fe:
bd:84:e0:0e:80:d6:2b:17:5b:c2:8e:9c:54:a9:bf:
c4:aa:fa:1e:d0:c5:86:72:45:80:85:97:cb:56:5b:
e7:ac:e4:53:0c:7a:8d:31:6b:15:af:f8:c4:97:f7:
d8:e1:46:4d:cc:5b:6d:71:b7:81:82:6e:6a:f3:b5:
22:c4:5a:9f:4a:62:a6:4f:5e:9f:37:0e:05:59:23:
3c:bb:79:c7:68:d3:a3:94:61:30:db:5f:ce:f0:9f:
e2:c7:d1:f1:0b:d1:0a:0b:f7:3a:f3:1b:33:46:33:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:91:7D:DA:F1:C7:82:CF:51:DB:B9:A7:45:56:AB:CC:C5:2B:A3
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:db:72:e0:8a:bb:0e:46:cd:d9:ee:73:f5:21:69:02:1a:36:
22:02:b3:13:5b:31:6c:93:37:3a:09:14:b2:9f:f8:ad:8b:d8:
0c:7d:ea:fb:d1:5b:84:fd:8d:54:5a:b8:9e:8e:59:7d:07:67:
7a:e0:25:66:d0:e8:6d:c6:d4:55:86:15:dc:ec:87:3e:08:7e:
e7:c2:e9:5f:76:73:a7:4a:de:2e:8c:47:26:a5:8b:e7:f9:be:
32:15:88:f5:be:ef:9f:db:4b:9d:ce:61:da:a0:7e:42:b3:49:
68:4b:b7:07:22:0b:0d:9a:cc:59:8a:31:37:37:73:ea:9a:ed:
2f:95:6f:e8:83:15:a4:05:9d:20:35:27:3a:96:a1:6d:27:86:
65:a5:8f:24:08:09:96:24:dd:9f:cc:4d:ac:e2:ee:5a:3e:02:
40:88:b5:dc:4a:8f:a5:6a:40:0e:92:f9:42:87:06:08:16:ab:
37:3e:72:df:b6:20:59:83:be:a2:41:b1:e8:48:9d:15:9d:43:
de:44:83:08:9d:9b:fe:3d:f2:2f:ef:37:42:3b:dd:c1:88:dd:
5d:5c:93:32:f7:d8:6a:81:0f:34:88:b9:e6:3c:20:7d:ad:5d:
29:4a:fe:7c:dd:9f:d6:eb:a3:e2:95:1a:4a:af:91:ec:d4:12:
de:ca:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:02 2025 by rpki-client