Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
File: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: E91qPHjK8m5Mv2khDE7bEa7W7xohnDWUTW0O3oOANlo=
Subject key identifier: 3D:65:1E:AB:04:33:4E:C8:17:F2:32:82:A3:49:12:E2:EC:5B:15:43
Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial: 3C1D3480F3419178B4E5945CB6B5699797F23827
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
Signing time: Mon 27 Jan 2025 02:00:01 +0000
ROA not before: Mon 27 Jan 2025 01:55:01 +0000
ROA not after: Mon 26 Jan 2026 02:00:01 +0000
asID: 38165
IP address blocks: 114.30.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1d:34:80:f3:41:91:78:b4:e5:94:5c:b6:b5:69:97:97:f2:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Validity
Not Before: Jan 27 01:55:01 2025 GMT
Not After : Jan 26 02:00:01 2026 GMT
Subject: CN=3D651EAB04334EC817F23282A34912E2EC5B1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:5c:b7:73:70:5d:d7:65:b7:25:a7:3a:c2:
ed:a4:e7:d0:00:31:5a:b9:05:5d:5c:cd:54:76:b9:
67:fd:41:72:e8:52:e8:6b:6d:91:1b:6a:a4:f3:1a:
fa:64:fd:16:3f:b1:78:0d:04:d0:d6:09:4f:c4:ba:
2e:6c:a1:e0:76:b9:35:03:4a:a8:cf:b8:0b:d8:50:
81:d8:fa:c5:4e:c2:b3:b2:cb:a9:1a:f6:f2:18:28:
97:a5:9e:42:70:db:a2:a3:06:17:2d:9b:e1:1e:cc:
9d:bd:9f:89:e0:62:af:75:b6:83:9e:95:ee:aa:b8:
4b:3d:81:0d:ed:56:b7:d3:54:04:c4:98:31:dd:89:
a7:52:88:04:71:89:d5:45:5a:e1:ee:a4:57:78:31:
a9:a3:fd:85:33:1d:32:60:e9:1f:8d:1d:6d:69:b9:
73:64:4e:45:64:de:22:fd:98:00:a3:7a:2e:b6:b0:
36:57:8d:d2:6e:96:76:d4:6d:0b:9f:3a:ca:9f:9b:
69:2b:df:41:41:f1:ea:5c:d4:9e:62:15:4c:59:d6:
84:1b:c0:e8:a0:df:18:f2:d9:9f:f6:1c:8a:3d:71:
39:23:01:c6:73:01:4a:21:3a:f5:4a:7f:28:a5:5b:
00:65:72:d5:77:c7:a2:8a:4f:b8:12:5b:b9:6f:67:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:1E:AB:04:33:4E:C8:17:F2:32:82:A3:49:12:E2:EC:5B:15:43
X509v3 Authority Key Identifier:
keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.30.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:17:cd:70:6c:e6:18:ed:d3:68:b2:43:e2:46:79:44:22:89:
91:55:5e:cf:cc:0e:e6:c9:31:5d:bc:34:0b:0f:43:fb:a8:94:
77:e4:db:20:34:ce:e3:94:4f:ba:0a:e9:ff:48:f0:81:65:12:
e4:9a:af:16:5b:d9:a7:e9:e6:44:15:c7:06:6e:ed:7d:52:4b:
ab:a2:9f:09:23:50:44:0d:22:fa:a4:10:b0:4b:5a:f3:12:88:
b4:a6:a8:e8:a2:59:71:a3:8d:75:90:fd:f7:f0:f5:0a:99:74:
a8:a5:6c:ed:f1:ad:b2:b6:c7:02:69:0d:7a:c8:5a:f4:06:d5:
9d:02:6a:a2:18:f7:e2:42:ed:63:cd:d2:e8:04:06:1f:31:47:
ce:98:6f:30:b1:cf:ea:9e:b6:da:52:c1:e2:59:25:5a:89:e4:
0d:ec:e3:f3:bd:82:93:cc:6a:5a:5d:a2:dd:8f:50:ae:33:64:
c3:87:fd:4c:62:17:8b:59:bc:90:d2:60:d3:6a:ea:c5:51:4f:
b0:08:76:21:df:d3:97:27:a3:c0:77:8d:48:49:98:06:b1:60:
95:49:34:48:8f:83:ce:db:fe:88:9c:cf:c9:49:e6:5b:23:4f:
0c:42:7c:d8:62:c0:e6:7f:b5:04:fa:da:f8:f2:6c:ec:29:a3:
ff:57:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:04 2025 by rpki-client