Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: aSmELMjbVbrJYcy5WtWo7WJdkIRQbL5hFTNoqcM9u0M=
Subject key identifier: 01:71:16:FA:83:A9:1F:9F:87:68:4A:33:4F:6E:A0:35:01:50:E4:26
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 4D1BA8A956A38503415FAB28A2933A39C46C2F54
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
Signing time: Sun 16 Jun 2024 06:00:01 +0000
ROA not before: Sun 16 Jun 2024 05:55:01 +0000
ROA not after: Sun 15 Jun 2025 06:00:01 +0000
asID: 45306
IP address blocks: 119.15.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1b:a8:a9:56:a3:85:03:41:5f:ab:28:a2:93:3a:39:c4:6c:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Jun 16 05:55:01 2024 GMT
Not After : Jun 15 06:00:01 2025 GMT
Subject: CN=017116FA83A91F9F87684A334F6EA0350150E426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:e6:92:19:eb:40:b3:4a:22:51:73:6d:83:
aa:1a:0a:b6:55:95:6d:aa:7b:59:69:fe:03:ba:55:
7d:46:a3:7e:10:9a:0e:19:e0:ed:56:cf:1d:23:d0:
bc:46:58:4e:ed:1a:e8:d6:41:66:c0:42:d7:a5:40:
5d:62:25:c2:05:6c:dc:3b:79:46:3d:eb:15:bf:79:
97:4e:3d:9e:be:5c:9c:1c:d2:67:3d:28:a8:97:93:
63:ae:e5:2e:26:a6:6f:a0:30:bb:88:12:e5:20:42:
92:29:88:6a:0d:49:d3:2e:74:ea:0d:67:3e:c8:db:
a2:a3:58:a0:08:38:a3:59:13:f5:25:39:12:c4:8e:
e8:9a:53:29:fd:77:af:74:84:87:c0:1c:e5:26:5b:
dc:2f:8e:76:15:57:8c:d2:f0:85:22:8a:ce:aa:86:
7f:a9:ab:bf:1e:2e:a3:34:86:03:1f:00:e6:ab:17:
5f:c9:52:09:6b:33:8b:0c:5f:24:51:78:bf:9d:4f:
35:22:53:07:2f:cb:8b:b3:13:cd:7f:07:6e:19:a8:
ee:d0:d9:b7:be:9b:46:b1:bd:7e:a5:64:5b:61:2e:
ff:ad:bc:3c:82:b6:75:80:e0:a4:97:c6:cb:42:5b:
7c:b8:72:67:9a:62:4b:15:2f:6d:05:5e:a1:94:6b:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:16:FA:83:A9:1F:9F:87:68:4A:33:4F:6E:A0:35:01:50:E4:26
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.133.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:b6:19:7f:c0:e0:a6:19:cb:df:5d:b6:1b:44:23:be:d5:
17:a6:b4:06:8d:3f:49:2b:5b:33:70:41:de:1e:d9:d7:3d:a7:
99:d1:bf:f2:63:b4:22:99:06:51:f7:07:5f:0f:82:92:59:58:
63:35:1b:98:e0:49:58:6d:d8:ea:33:8e:d6:f7:8e:39:01:51:
43:67:e0:e9:c8:d2:fd:b9:e0:44:c5:cd:75:5b:54:14:d0:95:
f4:e9:6b:72:4f:37:5e:4a:e1:04:6f:b4:7f:0a:65:f3:1b:44:
c7:71:64:2a:4f:49:cd:31:84:76:9c:62:b1:0f:09:64:82:96:
50:a2:9f:46:95:5f:43:ba:16:2b:0c:3a:07:02:11:53:2c:33:
91:99:d5:bb:40:4c:c0:ce:a3:44:c9:b1:2a:ed:61:82:a6:9d:
9d:00:e8:a6:05:04:19:87:03:a0:af:7d:5c:2f:ef:43:ce:3d:
ac:2e:4c:92:f4:6d:7d:96:32:a2:da:f5:6d:26:cf:e4:7e:ee:
84:50:7f:6e:e1:64:23:09:f8:91:bf:0a:6d:f6:af:99:33:3e:
35:4c:d3:03:0b:89:8e:cc:cd:e9:07:d2:93:ec:e9:8c:a1:7b:
77:04:c0:28:b7:14:fa:02:45:ef:c3:b1:ed:db:84:0a:9d:e2:
39:1c:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:05 2025 by rpki-client