Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa
File: 3131342e33312e3234352e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: p6lhpid+LEgj1F2X/fP1g3rOt1xP2xhZr/3O20ZWkOY=
Subject key identifier: BA:2F:78:8C:15:61:FA:E3:D3:27:B8:86:A9:B5:46:C1:A3:D7:D6:62
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 246F6D03F0079B52DB2F85FE7F7C0C9467CFCF97
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa
Signing time: Tue 21 Jan 2025 11:00:02 +0000
ROA not before: Tue 21 Jan 2025 10:55:02 +0000
ROA not after: Tue 20 Jan 2026 11:00:02 +0000
asID: 38496
IP address blocks: 114.31.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6f:6d:03:f0:07:9b:52:db:2f:85:fe:7f:7c:0c:94:67:cf:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jan 21 10:55:02 2025 GMT
Not After : Jan 20 11:00:02 2026 GMT
Subject: CN=BA2F788C1561FAE3D327B886A9B546C1A3D7D662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:1f:73:4d:9d:f5:aa:41:8a:12:38:37:3d:
c2:c0:a5:1f:76:18:64:9c:ee:6b:7d:69:62:e7:8c:
56:87:2d:70:37:17:fc:37:19:a6:62:73:0e:08:fd:
ff:00:70:fc:56:b4:16:3a:eb:30:6a:7a:b4:de:e1:
37:2a:88:e3:b0:8e:86:6c:bd:c6:85:2d:4b:9e:25:
29:2e:8c:16:72:c0:ea:b7:c9:07:16:0c:30:5e:ee:
67:de:62:ed:06:dc:90:14:d3:e2:b5:e2:a1:aa:c5:
ca:44:f8:c1:5f:94:c1:13:f0:67:1a:fd:9f:43:8e:
6f:4b:fa:b5:bf:20:c1:4e:cf:eb:c5:9e:d4:89:7e:
1c:16:e9:70:4c:76:f1:ba:91:99:50:f2:b8:a0:8c:
73:66:6c:d8:80:0d:91:43:97:9a:1e:19:13:a3:50:
85:15:09:7f:0d:a6:9f:f6:da:ff:0f:d0:5d:38:89:
8c:c6:5c:24:8c:9e:a1:95:2b:f9:96:91:03:e1:ff:
7e:bb:58:d4:cd:89:56:a2:a7:06:46:f2:42:44:c8:
57:98:f6:2d:e9:b0:ae:75:23:4a:4b:93:9a:2f:ba:
d1:da:71:bf:86:44:14:29:46:5d:4b:30:0a:7c:ff:
d3:20:22:42:71:47:91:83:30:c6:a4:70:a9:7e:6e:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:78:8C:15:61:FA:E3:D3:27:B8:86:A9:B5:46:C1:A3:D7:D6:62
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.31.245.0/24
Signature Algorithm: sha256WithRSAEncryption
42:67:31:63:fa:dc:9d:e9:eb:5e:92:69:c5:a5:ed:2b:a5:df:
14:d3:be:d6:16:b2:28:3e:84:98:87:49:b2:5c:a0:44:86:97:
2d:6f:63:1d:b6:83:62:20:ff:61:2a:f2:0a:1c:d0:a3:99:23:
35:ae:a8:36:22:91:a5:7d:ec:f1:75:e3:d2:ad:ff:a4:ad:5a:
43:1f:c5:5c:be:e2:e0:1a:0f:f5:50:0a:99:d6:46:7f:d5:6b:
b8:5d:42:a0:97:34:2a:dc:aa:a1:a2:a8:bc:43:38:fc:20:c4:
7e:c3:b4:f1:9c:cc:5d:99:50:5a:c1:3b:e5:4a:d9:ab:89:ef:
0b:41:53:a6:b7:c1:04:92:72:82:d6:65:ea:4d:3c:ef:a3:9b:
6b:6e:44:42:39:46:8f:62:66:e8:42:2f:8b:0c:3a:64:5b:c7:
59:89:24:26:f4:f6:d1:ff:91:9f:93:61:64:93:b2:dc:4c:0b:
d0:7d:af:cd:cd:fa:69:71:de:da:1b:fc:98:e4:16:23:70:97:
a0:56:b9:a8:6d:3e:a7:fe:db:0a:29:8a:c1:98:cf:c8:e9:b2:
b1:72:7f:8c:e8:73:47:35:c4:eb:fb:84:44:8a:b4:5e:43:56:
cf:5d:3d:16:02:bf:ea:75:92:57:5b:04:2e:e2:ba:43:27:db:
9c:3e:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:13 2025 by rpki-client