Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: EIT34InsDQvMAPecWHmVfk6/bVvpUTORhpjoqMv/6U0=
Subject key identifier: 02:82:93:41:E8:74:1E:91:E1:6F:17:3C:AB:AE:03:AB:51:46:DF:36
Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial: 7CF4CBF69FA7D1FC6BFCAC048DD171B493618C02
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
Signing time: Mon 27 May 2024 09:16:18 +0000
ROA not before: Mon 27 May 2024 09:11:18 +0000
ROA not after: Mon 26 May 2025 09:16:18 +0000
asID: 23671
IP address blocks: 111.92.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f4:cb:f6:9f:a7:d1:fc:6b:fc:ac:04:8d:d1:71:b4:93:61:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Validity
Not Before: May 27 09:11:18 2024 GMT
Not After : May 26 09:16:18 2025 GMT
Subject: CN=02829341E8741E91E16F173CABAE03AB5146DF36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:1d:61:0c:62:68:42:60:64:84:ea:c5:68:
06:20:99:9a:9d:6d:07:aa:64:43:56:6f:96:36:7a:
bd:5c:31:11:b8:36:f2:aa:70:1f:d4:e8:cc:48:e1:
6a:be:03:68:df:34:c1:14:95:d1:d6:83:bf:22:cb:
cf:f0:44:9e:91:fb:4f:e4:05:8d:48:f6:4d:65:69:
01:53:59:7b:ff:74:26:16:10:46:47:ef:a8:e8:24:
ec:a6:78:45:ab:85:51:fe:ff:b6:20:32:43:93:66:
bb:00:b7:5a:53:dc:e3:79:34:94:66:ba:1a:b7:ae:
20:10:35:35:1a:3e:fd:6b:be:fa:ca:38:44:9c:04:
09:ba:4c:c6:57:b7:9c:e9:d8:09:a3:11:7a:a4:12:
ea:0f:04:c2:1a:31:d9:6c:a5:9c:66:ca:73:d4:65:
09:e5:3a:58:f1:b9:bf:14:86:7c:7f:ca:91:0c:16:
43:03:c9:c1:0c:fa:d6:ab:eb:d0:39:dd:4d:b7:b1:
41:6a:8e:0f:ae:76:29:b6:c1:c9:23:9c:b6:ea:a5:
95:85:46:c2:38:f3:b4:87:0f:ca:86:09:89:47:5f:
5f:20:52:e0:57:9c:18:89:3a:17:49:9e:ff:9d:ed:
91:24:28:08:f9:d8:05:0a:40:fe:1e:c5:84:97:2a:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:93:41:E8:74:1E:91:E1:6F:17:3C:AB:AE:03:AB:51:46:DF:36
X509v3 Authority Key Identifier:
keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b7:60:31:cc:12:9a:24:1d:1e:5c:5b:7f:f6:18:a7:7f:b4:
31:ab:40:4d:b5:4c:3a:a5:ce:c2:31:fb:e3:2e:63:3f:03:cf:
a4:3f:3e:4b:3d:ea:60:a3:50:7b:82:2f:40:08:a3:43:87:4c:
83:86:77:81:1b:d0:ed:f6:72:76:55:03:c3:88:ad:96:ed:ca:
57:98:df:30:95:de:45:11:aa:a8:fb:7f:88:3d:e6:d3:2c:58:
16:09:37:55:a9:a9:71:c4:6f:d9:7f:72:d3:2c:67:d1:14:97:
81:b0:83:79:19:24:dd:9b:56:4f:2a:4f:29:43:80:9d:1a:be:
4c:37:8c:eb:ef:f0:f7:50:63:02:34:a7:b9:76:76:97:09:4c:
f9:f3:d3:55:2b:62:70:e4:3f:f4:30:b4:c7:4e:e5:0d:c6:08:
72:2c:e7:e9:10:e9:f4:23:03:2f:ba:e0:67:43:e9:ea:3f:b3:
8f:7e:6d:bf:85:3d:78:d7:b7:57:f2:fd:66:87:29:3e:32:d0:
8a:4e:81:9f:64:2c:a2:a6:ae:28:28:53:a1:25:1e:5b:95:ef:
40:53:91:c6:f7:bf:d3:37:c1:31:f8:03:9f:dc:bf:66:40:23:
b0:95:e5:e7:ff:85:b2:f9:c7:be:37:34:b0:c5:61:4a:d8:2a:
e9:89:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:15:02 2025 by rpki-client