Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa
File: 3230332e3136312e31392e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: 2EKyQAe9smBx6VvWBToQt+6Et1+aatUEa3lA8j4kpKM=
Subject key identifier: E1:11:C5:24:29:BC:1B:CC:68:21:15:58:A9:9D:74:F4:8C:BC:D7:51
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 1ADFB1FDED757D34899D9AA7F08694BD595E6B9E
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa
Signing time: Mon 24 Feb 2025 06:00:02 +0000
ROA not before: Mon 24 Feb 2025 05:55:02 +0000
ROA not after: Mon 23 Feb 2026 06:00:02 +0000
asID: 55685
IP address blocks: 203.161.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:df:b1:fd:ed:75:7d:34:89:9d:9a:a7:f0:86:94:bd:59:5e:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Feb 24 05:55:02 2025 GMT
Not After : Feb 23 06:00:02 2026 GMT
Subject: CN=E111C52429BC1BCC68211558A99D74F48CBCD751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:2f:4d:ac:0c:a0:5e:01:7b:21:7f:32:ce:
1a:c5:d2:eb:aa:36:1e:e3:cb:b1:50:9e:60:88:47:
32:3c:5a:83:d4:55:d3:2c:b5:60:0b:51:3a:5c:65:
df:be:af:8a:28:15:49:57:eb:1f:b8:7f:d2:6e:54:
a6:93:6a:44:54:ee:ff:3f:6d:c4:eb:c2:c9:56:00:
85:77:81:45:6e:c0:7b:73:75:5d:02:d7:86:fb:76:
61:a7:83:08:53:bb:ca:3f:b0:88:e8:c4:72:fc:99:
f5:20:86:2a:6e:60:6e:f5:76:0c:96:f4:b4:d5:93:
10:86:61:78:52:26:ec:6a:40:02:9c:55:dd:fb:af:
8a:e5:fa:fc:51:c0:e7:23:5a:e8:07:a5:34:ca:ee:
60:71:82:47:01:dd:03:34:0e:b2:ec:42:b4:94:98:
7e:ec:df:72:1b:b3:65:5f:ea:2c:06:d8:ed:49:34:
7c:b3:17:b7:8e:cb:f5:0a:a7:e2:87:31:23:56:bc:
2e:67:88:37:ed:37:c9:cc:32:56:ca:6c:5a:54:34:
a5:94:b5:8b:72:ec:38:50:7c:46:82:a6:c7:2f:fd:
a6:07:9a:1f:97:e1:57:31:bf:87:75:0c:b1:30:fd:
8e:c1:3f:40:91:a0:57:83:da:98:93:f0:6e:3c:45:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:C5:24:29:BC:1B:CC:68:21:15:58:A9:9D:74:F4:8C:BC:D7:51
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.161.19.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a5:39:4d:86:93:0d:7f:6c:b8:aa:11:a7:d4:a7:82:04:c1:
cd:22:39:4b:8c:28:88:b0:35:59:58:75:2d:32:eb:cf:a2:10:
b0:12:e0:b6:24:d8:44:29:20:bd:50:2e:d4:c6:10:e3:6c:49:
e1:c4:37:50:f3:f4:d5:01:51:d8:4d:af:70:ea:21:34:a4:4e:
f6:42:cc:5a:d8:e5:36:34:cb:0c:66:b6:61:12:d7:c4:3a:02:
bd:57:44:57:2c:1a:57:26:de:5c:62:37:6e:e5:db:6b:95:fa:
2a:0a:45:da:0e:c4:58:5d:bc:e0:8f:d1:1e:33:e8:bd:e8:bf:
63:6a:97:28:7b:a6:23:08:70:71:d4:9e:72:48:dc:73:f8:4f:
52:53:f6:a1:8e:54:a3:0d:5b:68:f5:6d:ca:ad:13:bb:ce:6d:
73:53:ad:ed:7f:6a:23:30:3d:1b:3f:38:8b:92:3e:35:16:c9:
8a:d1:b8:fc:5c:ab:62:93:28:df:23:16:9b:57:e9:92:37:30:
fa:ed:d4:b1:4d:f3:7a:7a:4b:2e:c4:58:ef:50:92:32:cc:2b:
be:24:94:fd:9b:b1:3e:63:d4:3d:1b:d3:95:e2:99:4d:ca:98:
9d:2c:a1:79:5d:5d:0f:c4:f3:ca:0c:87:98:54:df:17:68:b6:
01:58:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:16 2025 by rpki-client