Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
File: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=
Subject key identifier: D1:3E:0F:58:39:64:8A:22:E7:37:5F:F3:E5:6D:40:B7:8E:28:B1:15
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 5D4BE43A6560920A30D532C1CB90D58EE23B4775
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
Signing time: Wed 19 Mar 2025 03:00:02 +0000
ROA not before: Wed 19 Mar 2025 02:55:02 +0000
ROA not after: Wed 18 Mar 2026 03:00:02 +0000
asID: 138818
IP address blocks: 114.141.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4b:e4:3a:65:60:92:0a:30:d5:32:c1:cb:90:d5:8e:e2:3b:47:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 19 02:55:02 2025 GMT
Not After : Mar 18 03:00:02 2026 GMT
Subject: CN=D13E0F5839648A22E7375FF3E56D40B78E28B115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:a8:b2:55:e7:90:75:b9:87:9e:f2:ad:19:
d3:bf:cd:e0:43:ed:52:c1:c5:65:6f:8d:94:20:27:
22:1e:f1:e8:1a:c2:7e:f1:77:ed:5c:06:00:2d:c2:
bb:33:25:c9:05:dd:e6:69:34:8a:bd:9d:a4:3f:8f:
b6:37:c1:a8:bd:cd:84:51:c6:f2:b4:44:8f:e6:e6:
4a:b6:42:75:2e:3e:17:a8:a5:ef:53:49:ad:ac:3c:
b9:d8:52:14:21:cf:d2:69:4e:23:7a:c4:75:a4:b4:
72:f8:e0:80:14:88:e6:39:cb:87:fc:5a:07:3a:2a:
e0:15:49:34:08:75:9e:68:68:11:27:e0:7d:d4:c5:
59:9d:13:30:9d:71:09:2e:f9:87:35:12:44:0f:0a:
01:1e:d1:b3:0e:20:66:f1:b6:8d:e7:d5:ec:b7:c8:
9a:bd:c4:10:e1:34:0c:4a:ac:88:9c:21:1f:02:8f:
b4:2d:24:75:43:2c:c6:f0:bc:10:ed:13:85:d3:c4:
62:39:31:e2:5b:6a:4d:51:39:7b:f8:59:dd:94:9a:
83:da:ac:1e:15:58:64:bd:0a:15:85:22:1e:66:56:
3f:43:26:24:ca:2e:4c:e4:37:39:45:5e:aa:50:03:
a4:1b:a9:d9:bc:0c:36:79:91:8c:5c:54:0c:2b:92:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:0F:58:39:64:8A:22:E7:37:5F:F3:E5:6D:40:B7:8E:28:B1:15
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.93.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b5:d9:c2:ec:06:ec:31:db:7c:8e:cd:7e:ee:cf:6a:35:2f:
4d:e0:df:02:0f:58:12:48:b0:2e:34:ed:da:de:91:89:6d:8c:
23:62:83:ba:dc:44:4a:50:c0:50:95:fd:6e:38:a7:0f:fb:c7:
16:18:56:a4:cf:ea:8e:29:d2:13:58:a3:24:b3:ce:75:bb:33:
a2:b9:d0:76:a6:f9:00:dc:07:a9:11:8f:52:ee:d3:0b:ae:a8:
3f:9a:bf:f7:71:2f:73:79:3a:24:59:3b:02:98:da:19:e9:37:
4b:73:94:e6:ef:0f:04:01:6c:a3:de:9d:64:67:9e:db:93:b0:
ee:70:22:b6:cc:19:be:33:07:eb:3f:e7:b1:3d:85:19:43:81:
ad:a4:bc:12:f8:f3:97:8d:8f:46:c8:c5:77:e7:7a:f4:0e:39:
71:50:37:2b:63:37:70:5b:65:c5:52:c6:2d:00:07:d7:29:92:
25:be:9b:3a:38:24:df:da:e9:26:18:32:80:a8:e9:d6:15:25:
9f:34:25:ca:32:5f:28:ba:00:ee:cf:21:a0:cf:c4:4a:f6:7a:
cf:49:c3:9e:7c:f0:cb:87:7a:94:e7:57:5e:e0:5c:2d:9d:f8:
b5:8b:39:16:6a:17:c4:dc:44:9d:04:b9:36:ce:6e:82:4d:48:
fa:fb:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:42 2025 by rpki-client