Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: s6AOupuIm/I+0HuyPevqvPS6wLo0OiLBTLdZkEx1w0k=
Subject key identifier: 5E:B2:FA:D2:D0:FD:86:82:E6:F1:DB:94:DA:F1:6C:63:55:C6:20:59
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 42E708D8ABC59507C863036249DB36C9483C54B4
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
Signing time: Tue 21 May 2024 08:02:40 +0000
ROA not before: Tue 21 May 2024 07:57:40 +0000
ROA not after: Tue 20 May 2025 08:02:40 +0000
asID: 24525
IP address blocks: 114.199.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e7:08:d8:ab:c5:95:07:c8:63:03:62:49:db:36:c9:48:3c:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 21 07:57:40 2024 GMT
Not After : May 20 08:02:40 2025 GMT
Subject: CN=5EB2FAD2D0FD8682E6F1DB94DAF16C6355C62059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:9c:3c:9b:ea:9f:66:91:60:22:8c:e5:86:
72:67:bf:82:c3:31:91:e9:7e:52:51:56:2b:53:47:
54:89:95:74:f7:b8:d5:d1:95:e4:4a:82:51:41:47:
28:88:c3:b9:2b:f0:b3:69:bc:1a:4c:c2:4d:8c:f7:
06:cb:dc:1a:7e:37:5c:2a:f1:8e:13:8e:87:c5:53:
1b:c3:ee:fa:b1:ed:2e:08:f4:b3:04:55:d1:c5:b5:
ae:e0:48:40:bf:d1:a1:3b:5b:61:fc:f5:d9:00:ff:
91:26:fe:2a:3b:cf:1d:9b:3c:df:fc:f4:b4:f5:e7:
82:e0:13:92:2b:3a:37:8a:d8:2e:d1:43:e4:15:9b:
55:8d:a9:d7:31:2b:63:ad:dc:2c:6b:eb:56:34:64:
42:cf:a0:13:db:94:b0:e7:07:6d:f7:3a:81:70:e4:
55:5e:56:df:c8:f3:32:47:d3:5b:d6:c2:b1:61:69:
e8:f1:9e:f0:a5:ae:58:94:50:99:b0:2e:4e:ef:f2:
c2:41:0e:b8:83:38:0c:9b:f8:3c:1a:c8:58:30:4d:
0c:e7:8e:cc:7d:b4:ec:51:b5:f6:bd:9e:d8:db:03:
38:18:e8:3e:e3:e5:98:cc:ea:81:17:98:da:8a:af:
df:36:81:64:bf:00:b4:8d:86:91:98:74:c3:08:66:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:FA:D2:D0:FD:86:82:E6:F1:DB:94:DA:F1:6C:63:55:C6:20:59
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.126.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8b:6f:c7:46:c0:ca:2d:38:f4:e3:a2:65:3f:c7:aa:f5:f3:
84:c8:43:27:ce:4c:6e:51:0b:b3:0e:1c:b7:9e:a1:ff:e9:40:
a2:43:23:02:46:f0:26:cc:ad:39:d2:09:c3:bb:b7:62:23:ab:
d4:55:29:a0:55:8e:ed:8f:23:e7:23:12:38:80:cc:a5:05:02:
d7:09:e6:69:20:d8:3c:94:9c:f3:41:b0:f9:f0:89:cf:b2:ab:
38:a0:bd:7b:21:5b:90:58:26:a4:2e:85:2c:2f:5c:77:3a:53:
3c:6e:88:97:13:3a:b5:0d:51:16:e7:24:50:48:27:ef:24:ac:
72:c4:b2:46:dc:4d:f4:2d:10:22:18:4b:58:6b:fa:eb:9a:71:
1c:6d:e7:ff:7b:20:97:a3:17:32:89:35:70:cb:90:a9:c0:32:
08:98:e5:c4:1a:52:37:92:b4:c9:ff:9e:e4:7a:50:b4:8d:fa:
0d:b2:f1:98:ae:77:98:3d:de:dd:38:87:cb:10:99:d0:fc:fd:
a2:0d:f6:73:a7:20:e5:f0:2a:88:67:6b:c8:1c:66:fe:e6:fb:
d0:e0:0c:6e:67:d0:e0:7e:3f:09:76:8d:7a:a5:eb:0f:47:d4:
e9:f8:53:8e:98:26:a6:ae:17:24:27:be:91:37:bf:0f:f1:9d:
7f:f0:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:50 2025 by rpki-client