Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
File: 3131342e33312e3234372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: 6b5vV20og/d3kD1+6ugOkRKoekQpxxunFTIEMPUVqao=
Subject key identifier: 56:F1:BE:8F:D9:DB:7D:7E:51:77:D2:37:BE:E1:C3:7B:52:24:7B:B9
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 73DECE48A3EA64CA48046D023D355514C5C61E04
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
Signing time: Sun 09 Feb 2025 04:00:02 +0000
ROA not before: Sun 09 Feb 2025 03:55:02 +0000
ROA not after: Sun 08 Feb 2026 04:00:02 +0000
asID: 38496
IP address blocks: 114.31.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:de:ce:48:a3:ea:64:ca:48:04:6d:02:3d:35:55:14:c5:c6:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Feb 9 03:55:02 2025 GMT
Not After : Feb 8 04:00:02 2026 GMT
Subject: CN=56F1BE8FD9DB7D7E5177D237BEE1C37B52247BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:9c:98:2e:46:ec:be:e9:b5:ba:0e:d1:07:
70:83:ae:45:0f:65:26:2f:55:54:f6:9c:47:e5:f4:
2b:96:19:4f:5e:90:49:96:03:00:97:29:02:c0:c2:
31:fe:ae:c3:a8:02:d1:f1:07:82:47:69:fe:9e:ea:
bd:8a:65:f3:e0:e4:e4:48:ca:3b:9c:31:6a:87:72:
ee:ce:c2:a1:70:41:39:71:cc:e4:e5:47:ab:c7:7e:
45:98:a4:52:db:4d:9c:dc:df:35:b3:d8:56:3a:ca:
31:16:10:4b:c3:4e:82:7e:86:cd:21:a4:73:e1:b5:
c0:91:72:67:c9:08:b1:1c:ee:26:44:9d:6b:21:e0:
99:83:38:03:f7:56:34:0f:80:e0:f8:62:7b:7f:72:
5a:3d:34:99:35:f7:5d:00:94:36:10:94:a6:91:78:
1c:58:a2:53:c8:e9:36:68:8a:1f:2b:96:ca:5a:d6:
fb:ae:9c:b4:e6:a8:17:a3:93:32:a0:7b:ac:c8:cd:
17:bd:a3:af:0c:11:c6:21:18:d0:de:7c:12:24:b4:
44:3f:39:7c:2e:38:3f:71:dd:22:e4:df:1d:25:19:
7a:a1:d8:c6:52:e5:9b:38:0d:3f:65:b3:ea:2c:56:
eb:80:48:c5:d5:c2:11:f3:fc:b9:1d:e2:ff:e0:53:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:BE:8F:D9:DB:7D:7E:51:77:D2:37:BE:E1:C3:7B:52:24:7B:B9
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.31.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9a:7c:42:e5:86:61:b0:a4:f9:c3:3b:61:94:87:c7:af:47:
a5:4e:a4:64:fa:0e:5b:ee:fd:4d:4b:27:99:c6:45:be:ad:ef:
71:e9:cc:6a:46:0e:0a:82:c8:a8:4a:a3:de:04:69:34:a2:43:
95:bb:27:c5:09:6c:d4:dc:9a:fd:ca:68:66:d0:eb:fa:e1:a4:
95:c4:6e:e2:06:41:e4:cb:bc:14:ee:91:71:7a:d0:e9:cf:38:
d9:dc:d1:11:5f:e5:45:ad:fb:1c:9a:8a:df:bd:85:ec:85:8c:
1f:c9:52:ec:1a:3d:d8:f5:bf:f9:0b:ab:71:5f:00:34:54:7f:
b1:05:7a:3c:6e:5b:9f:a0:45:d2:a6:d8:91:87:fd:26:7d:95:
82:e0:26:15:06:36:f3:60:a2:c5:83:59:b8:d2:72:df:e2:09:
fd:c0:6e:01:e0:88:be:ce:39:80:b2:3f:84:a1:00:2c:c8:de:
fe:cf:2b:11:26:82:31:49:86:df:31:43:0c:e9:e2:74:1a:dc:
6e:9e:95:9f:29:88:a3:0e:7a:ea:ec:86:a9:99:07:3d:03:01:
98:6c:5d:ff:f5:d7:f1:38:01:4c:87:e7:47:54:77:bc:d2:70:
6d:49:f2:d9:ea:1b:87:f7:55:03:26:b1:c6:86:ab:45:27:19:
6b:ea:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:34 2025 by rpki-client