Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: dtt/pgXtAtAASL0c1K6/OMcl6bk3pQGQ/R0u4c9cNoc=
Subject key identifier: BD:66:7F:07:6B:4A:8D:8B:AE:8E:2D:E7:7F:CD:6C:D5:49:1F:0E:8B
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 021E272312CDC8334C916E6998D2CFC1BA9EF514
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa
Signing time: Sat 01 Jun 2024 08:00:58 +0000
ROA not before: Sat 01 Jun 2024 07:55:58 +0000
ROA not after: Sat 31 May 2025 08:00:58 +0000
asID: 24525
IP address blocks: 114.199.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1e:27:23:12:cd:c8:33:4c:91:6e:69:98:d2:cf:c1:ba:9e:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: Jun 1 07:55:58 2024 GMT
Not After : May 31 08:00:58 2025 GMT
Subject: CN=BD667F076B4A8D8BAE8E2DE77FCD6CD5491F0E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:10:9a:2a:87:fc:37:b9:8a:36:12:44:4e:
bc:95:48:f8:29:da:8a:f2:9b:8e:b3:28:f6:64:0d:
0f:8c:b9:5a:5d:86:f2:16:47:e2:74:41:d2:ac:92:
61:d3:b1:f2:45:eb:3a:84:92:dd:3b:af:99:03:4d:
86:81:b1:20:a7:00:58:72:85:ff:7c:ab:ac:05:70:
64:37:ca:1f:88:4f:d9:34:03:cc:40:49:8e:cd:4b:
f1:5c:ac:80:5d:dd:e7:2a:da:4a:4c:85:92:20:ea:
52:96:8a:e6:c0:cb:fb:89:f2:54:d6:2c:0c:94:c3:
7c:79:3e:28:4c:42:66:6a:75:23:27:2d:d9:fe:e6:
c0:cf:f1:5b:e0:81:70:21:b3:68:3e:c6:57:13:72:
1a:7d:2a:c3:59:53:c5:7c:fb:6c:79:10:1e:59:03:
11:c4:ab:b8:a6:a1:71:46:99:b9:98:f5:7f:f3:a3:
35:ea:74:13:5c:fe:64:2a:03:9a:22:be:18:69:68:
1d:6c:f6:4f:b1:8d:69:e9:11:88:42:34:6d:40:8f:
ce:53:5e:c2:e3:1d:83:a5:6c:56:39:4d:0e:59:10:
64:14:78:4e:15:ba:c4:ab:21:06:83:f2:2f:8d:44:
3d:97:c1:ec:c5:15:46:bf:c8:dd:e4:db:61:05:7c:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:7F:07:6B:4A:8D:8B:AE:8E:2D:E7:7F:CD:6C:D5:49:1F:0E:8B
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:dd:ca:ff:48:1f:2c:97:94:8b:67:fc:64:68:d0:48:24:55:
e4:4a:bc:07:2b:92:28:f3:53:67:ca:c4:52:ef:96:14:72:39:
1f:5e:07:04:a2:3c:8b:1a:92:a7:df:64:89:33:2c:cd:e6:73:
aa:89:b2:d0:89:b6:07:2a:c2:67:95:26:aa:88:4a:2a:63:db:
17:65:9a:a9:db:aa:80:af:72:b7:d6:78:47:49:bc:40:71:a2:
9a:81:22:33:4d:8a:d1:a1:fb:4c:e8:1b:43:c3:7b:04:98:87:
fb:c6:d3:4b:42:b7:58:33:eb:10:14:eb:28:ac:19:3f:b6:c0:
ac:1a:23:43:03:57:6d:7a:d8:5c:19:ab:c4:ab:bb:d4:bf:5f:
03:70:4d:03:90:29:34:d2:5d:ba:03:62:c0:43:7e:c0:1b:bc:
89:4d:5e:10:0a:26:c6:f7:25:ae:0c:e7:5a:e9:a0:69:16:04:
ea:e3:8e:4f:3e:62:40:47:54:22:81:e5:3a:6c:75:92:5a:8a:
34:11:f1:55:62:af:7b:ba:3b:47:31:35:45:ee:96:d1:1b:c2:
3c:ab:ba:77:75:44:d4:b0:6c:4e:42:b3:2d:ed:cf:d8:01:3b:
69:fb:85:1e:43:0d:74:7e:45:ab:5a:71:33:c1:dc:aa:29:19:
ed:ca:06:32
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAh4nIxLNyDNMkW5pmNLPwbqe9RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNDA2MDEwNzU1NThaFw0yNTA1MzEwODAwNThaMDMxMTAvBgNV
BAMTKEJENjY3RjA3NkI0QThEOEJBRThFMkRFNzdGQ0Q2Q0Q1NDkxRjBFOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcRCaKof8N7mKNhJETryVSPgp
2orym46zKPZkDQ+MuVpdhvIWR+J0QdKskmHTsfJF6zqEkt07r5kDTYaBsSCnAFhy
hf98q6wFcGQ3yh+IT9k0A8xASY7NS/FcrIBd3ecq2kpMhZIg6lKWiubAy/uJ8lTW
LAyUw3x5PihMQmZqdSMnLdn+5sDP8VvggXAhs2g+xlcTchp9KsNZU8V8+2x5EB5Z
AxHEq7imoXFGmbmY9X/zozXqdBNc/mQqA5oivhhpaB1s9k+xjWnpEYhCNG1Aj85T
XsLjHYOlbFY5TQ5ZEGQUeE4VusSrIQaD8i+NRD2XwezFFUa/yN3k22EFfPVhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUvWZ/B2tKjYuuji3nf81s1UkfDoswHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd5MA0GCSqG
SIb3DQEBCwUAA4IBAQC53cr/SB8sl5SLZ/xkaNBIJFXkSrwHK5Io81NnysRS75YU
cjkfXgcEojyLGpKn32SJMyzN5nOqibLQibYHKsJnlSaqiEoqY9sXZZqp26qAr3K3
1nhHSbxAcaKagSIzTYrRoftM6BtDw3sEmIf7xtNLQrdYM+sQFOsorBk/tsCsGiND
A1dtethcGavEq7vUv18DcE0DkCk00l26A2LAQ37AG7yJTV4QCibG9yWuDOda6aBp
FgTq445PPmJAR1QigeU6bHWSWoo0EfFVYq97ujtHMTVF7pbRG8I8q7p3dUTUsGxO
QrMt7c/YATtp+4UeQw10fkWrWnEzwdyqKRntygYy
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:32 2025 by rpki-client