Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa
File: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (raw, json)
Hash identifier: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=
Subject key identifier: 3B:63:98:A7:ED:4D:C8:AA:EE:80:99:BA:C9:BE:2C:EE:52:2C:FB:86
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 103261E3CD7DC68E1CF1FD785262102DA9FE71EB
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa
Signing time: Mon 06 Jan 2025 14:34:03 +0000
ROA not before: Mon 06 Jan 2025 14:29:03 +0000
ROA not after: Mon 05 Jan 2026 14:34:03 +0000
asID: 150248
IP address blocks: 119.47.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:32:61:e3:cd:7d:c6:8e:1c:f1:fd:78:52:62:10:2d:a9:fe:71:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Jan 6 14:29:03 2025 GMT
Not After : Jan 5 14:34:03 2026 GMT
Subject: CN=3B6398A7ED4DC8AAEE8099BAC9BE2CEE522CFB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:23:b3:70:3c:10:38:16:ab:7f:a7:4c:ea:
58:43:24:a4:90:67:21:f0:39:f2:55:68:be:1b:6c:
93:c0:ef:bd:b4:2c:ae:1f:09:47:bb:df:6a:99:e0:
f6:b7:8b:9d:8c:bc:d1:b3:90:7e:8e:a8:4b:94:1b:
e7:d7:fb:75:f8:6e:1d:94:ea:58:34:8f:8b:f3:1e:
9e:9f:41:0d:0f:ae:3f:32:30:68:ce:0c:45:cc:02:
d1:94:40:f5:34:f2:42:56:94:fc:78:00:0c:e9:b4:
55:96:b3:af:9f:9d:75:1e:da:ff:41:34:41:06:c0:
18:6a:0f:de:25:70:47:bd:bf:a6:be:23:9e:4f:82:
0e:0d:d7:24:4f:86:61:05:ee:35:c6:22:9b:c1:b1:
8a:5c:0d:9a:01:fe:d0:31:c8:bc:17:18:37:2d:e0:
1c:80:72:9c:d1:ec:63:40:58:29:56:00:ff:12:df:
84:96:ec:e2:58:52:fc:0e:1d:b8:c7:8b:38:83:d6:
d1:7a:f4:7a:6f:4f:61:3f:0c:33:b8:8a:43:07:ff:
86:c6:65:73:0f:1a:a3:87:1e:6e:ed:d6:3b:88:40:
08:f0:4f:39:cd:50:98:33:33:e3:ff:cb:e3:9c:36:
8b:48:46:95:d2:35:ae:80:32:ff:e3:f1:ff:e1:62:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:98:A7:ED:4D:C8:AA:EE:80:99:BA:C9:BE:2C:EE:52:2C:FB:86
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.95.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ff:28:22:51:34:ec:d3:8b:ae:0d:77:d4:98:00:e4:ca:e9:
d9:0e:f3:8e:da:0f:1e:10:2d:d1:04:66:15:a6:aa:92:ac:22:
ee:78:11:f6:48:e4:9a:db:ff:62:7b:9e:e8:95:25:4a:2b:57:
0f:be:d4:04:bc:60:d7:53:91:a4:53:d2:c6:21:24:23:6e:eb:
19:a2:6e:03:a4:23:39:61:44:29:28:29:95:c1:f9:05:e6:42:
fc:3c:c1:21:62:6e:8c:58:32:97:7a:09:38:d5:7b:dd:ca:90:
c3:01:b1:39:87:8d:82:47:ea:50:2f:e2:20:11:9f:db:04:e3:
7f:68:56:7d:62:21:42:62:8a:ee:53:b7:25:f8:80:c3:c5:c5:
d2:4b:d0:9e:37:84:49:08:9c:65:7a:b9:3b:0d:ea:91:29:3e:
16:35:a1:e0:30:23:6f:80:63:07:91:c0:73:14:83:d8:03:51:
86:51:6f:74:ad:9a:89:20:6d:5a:f9:49:2b:13:3f:c5:b4:66:
27:35:0a:91:0c:f3:37:05:6b:0c:7f:ea:8d:b2:c1:12:19:14:
99:3b:f2:53:4f:73:4b:ee:2a:fb:6b:05:01:39:5a:2a:76:5d:
84:a1:75:a1:83:6a:b0:98:bf:71:26:9c:0e:7d:8c:d1:ff:af:
ae:d2:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:19 2025 by rpki-client