Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39322e302f32342d3234203d3e203338313635.roa
File: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: Iyo4CRQgLrQ4clz0wqdgGeITY/Sc+cn/PGnj1QtX8Is=
Subject key identifier: E4:7F:5F:E1:E2:49:FB:A3:0D:16:D3:1B:F9:8E:FF:B0:40:00:A8:B2
Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial: 576E0F8EE4A47960FE3D7AFC24BBC7C86634B5BA
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39322e302f32342d3234203d3e203338313635.roa
Signing time: Mon 27 Jan 2025 02:00:02 +0000
ROA not before: Mon 27 Jan 2025 01:55:02 +0000
ROA not after: Mon 26 Jan 2026 02:00:02 +0000
asID: 38165
IP address blocks: 114.30.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:0f:8e:e4:a4:79:60:fe:3d:7a:fc:24:bb:c7:c8:66:34:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Validity
Not Before: Jan 27 01:55:02 2025 GMT
Not After : Jan 26 02:00:02 2026 GMT
Subject: CN=E47F5FE1E249FBA30D16D31BF98EFFB04000A8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:77:9b:77:39:5b:97:e9:dc:8f:5c:8e:9a:
6e:a5:b2:45:c6:2d:31:e6:99:6c:4b:5b:60:72:17:
22:06:54:9e:06:84:7c:7e:8f:8f:9e:17:f6:91:4d:
64:2e:ca:d0:1c:de:99:ab:75:eb:6c:1b:ff:15:7c:
98:d9:7f:4b:f0:be:ae:2b:fa:75:75:53:14:b9:f7:
a6:5d:af:08:70:c2:23:15:f6:82:b4:e8:62:9e:f4:
97:12:2f:0b:9b:a9:92:2d:39:27:25:6a:a5:81:43:
63:9d:c2:de:fc:06:ad:e7:07:a8:51:3f:b3:6f:57:
92:f7:01:d5:33:2d:fc:63:f9:35:1b:c9:07:4a:3e:
ba:08:a4:ae:7e:34:24:50:9b:0c:b7:ac:a7:f7:ed:
26:bf:11:fc:84:08:35:7d:4a:11:2c:a1:5f:e7:91:
05:a6:13:3b:34:13:e4:1e:81:5f:4a:df:bf:bd:b1:
fb:c1:05:6e:31:d7:45:d2:74:f8:2e:61:55:9c:a7:
5b:4a:2a:a0:c3:06:14:d7:be:20:2c:91:33:38:b5:
c8:3d:6e:83:2a:d3:d7:f1:42:e9:65:1e:68:74:72:
fb:57:9f:43:7f:bf:09:18:42:65:03:d3:49:fb:94:
56:28:15:6a:fa:7e:e0:3c:24:5b:c0:09:79:4e:8c:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:5F:E1:E2:49:FB:A3:0D:16:D3:1B:F9:8E:FF:B0:40:00:A8:B2
X509v3 Authority Key Identifier:
keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39322e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.30.92.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2a:eb:ea:b8:4e:c4:30:f2:b0:9f:ab:4f:95:d7:76:de:bd:
8e:2a:06:91:ae:9c:d7:68:bc:66:03:a1:96:0f:d5:85:b1:82:
03:67:fa:29:de:fa:33:ea:af:e8:80:7b:41:6f:9c:74:1b:89:
ba:ed:34:2b:9c:76:58:97:f1:50:2f:ab:6a:59:63:8c:c2:8f:
a5:2f:b4:e2:82:44:0c:73:74:7a:52:98:bb:da:40:dc:5c:3d:
b1:f5:60:83:b0:09:c6:d3:37:89:ff:10:81:4d:3c:8a:bc:e1:
c6:4c:25:58:73:27:08:dc:fa:8c:71:52:7c:f6:54:c3:29:70:
9a:d6:d5:c3:b5:e3:88:f9:24:fd:db:a7:13:f6:d1:27:6a:78:
89:b8:ac:ee:9a:96:38:6d:3c:33:79:9c:0f:6e:81:39:fb:d9:
79:8a:4d:57:02:55:ca:c4:b0:77:ff:91:f3:c6:c4:76:1d:c0:
02:3c:93:06:22:64:15:43:b8:57:73:eb:63:bc:3b:41:c3:85:
23:e3:d6:a2:fa:7a:f4:2e:df:c3:32:08:94:10:b6:19:ca:c6:
37:33:aa:18:40:b0:7e:e8:85:3b:a9:32:15:9c:d6:45:cb:08:
28:7e:09:65:8c:b7:be:4d:d8:f0:0b:8d:3c:f1:14:2d:3b:9b:
91:7e:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:21 2025 by rpki-client