Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: 4cpEHL/u8vBq+XBu56d79/eBMOewnc0o+zZffq8T9Fk=
Subject key identifier: 1B:B5:16:AA:52:97:EA:8F:27:26:38:87:2E:D6:8B:33:5A:53:91:BC
Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial: 4C3591566FE62295C5ADAF1E330D64D1B0FA6D8B
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa
Signing time: Tue 28 May 2024 02:13:04 +0000
ROA not before: Tue 28 May 2024 02:08:04 +0000
ROA not after: Tue 27 May 2025 02:13:04 +0000
asID: 23671
IP address blocks: 111.92.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:35:91:56:6f:e6:22:95:c5:ad:af:1e:33:0d:64:d1:b0:fa:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Validity
Not Before: May 28 02:08:04 2024 GMT
Not After : May 27 02:13:04 2025 GMT
Subject: CN=1BB516AA5297EA8F272638872ED68B335A5391BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:3c:69:5a:05:90:cf:37:6f:c7:43:ae:82:
f8:60:e6:1a:ed:7b:22:a3:27:b3:8d:05:2c:e4:98:
b8:ac:2e:3f:a9:d7:66:a9:87:6e:5a:b8:76:64:38:
7c:47:6a:5f:e0:ce:c0:75:51:43:d0:c7:fd:8d:6c:
5e:e7:40:d4:da:93:f2:fa:ee:52:c2:22:26:d1:c9:
fd:b9:3e:10:b4:13:6d:16:a0:3b:c1:e4:f1:05:83:
72:47:5b:c5:8f:be:96:bf:93:66:3e:be:35:b6:84:
29:c9:69:80:9e:81:bf:98:1d:64:9c:ac:aa:b9:28:
18:6c:ff:c1:5b:ad:0d:34:66:2f:be:83:58:ec:69:
27:bb:31:59:eb:bf:85:7e:a0:45:c7:39:ce:ca:c9:
6b:42:11:6c:fc:fd:01:ee:10:8f:ae:79:69:76:30:
86:d7:e8:d6:b2:1c:27:a6:78:c3:62:ae:0c:e5:70:
93:04:15:10:b8:a7:43:02:2d:5a:c7:52:07:d7:4f:
65:e3:ab:3c:a0:4c:4e:5b:fe:f4:9d:bc:81:2a:b2:
f8:df:b2:db:e0:e7:d4:58:d4:76:3f:4c:75:6f:c2:
58:fb:16:c3:36:a8:0a:4f:10:7e:e4:e2:32:de:b6:
08:c4:aa:06:87:cb:31:fd:2c:43:a2:66:c8:86:cf:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:16:AA:52:97:EA:8F:27:26:38:87:2E:D6:8B:33:5A:53:91:BC
X509v3 Authority Key Identifier:
keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ff:81:4b:c5:15:9c:fe:c5:85:86:3a:95:bf:ab:fc:e2:12:
d0:14:6b:9c:1f:67:8e:c0:c5:bf:1b:2e:79:e7:b4:e9:c1:fa:
2c:b3:8d:f3:e2:8b:ad:cb:8c:7a:a6:f9:0a:6d:54:5c:0a:1c:
12:f9:11:35:b4:e2:71:97:63:fa:7e:16:54:90:2a:38:06:70:
68:4e:98:34:93:5d:3e:e8:5b:da:c0:6a:04:0b:98:52:a4:36:
fa:30:ad:31:3d:2c:a6:69:43:8b:5d:57:80:48:3e:64:27:3d:
68:df:06:0e:51:60:60:5a:64:bd:e3:87:83:83:be:cc:3a:f8:
7f:44:61:5c:56:2b:27:22:08:1b:9a:95:00:47:77:79:48:1b:
d0:5a:45:cd:f9:f4:5f:94:1d:42:a0:56:00:7e:ee:e3:e1:26:
d2:a7:01:5e:c7:95:0b:07:b3:22:cd:41:3b:42:a2:0f:e4:c3:
8e:20:5d:15:1e:e6:fd:65:bd:a0:66:11:10:83:58:07:fc:5f:
60:b1:05:9d:59:25:59:52:71:c5:e9:01:9c:f7:0f:9f:27:53:
36:44:04:ca:2c:d0:c5:b8:49:0e:fe:03:3e:7d:c4:18:56:dd:
5e:c6:64:56:0d:66:75:21:6a:b6:af:9c:be:4e:b2:7a:e4:13:
4b:90:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:40 2025 by rpki-client