Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa
File: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (raw, json)
Hash identifier: 2HIYGLNxqy8bZPIjVkEkA/5t30ifHC7UYSQqcWO9160=
Subject key identifier: CC:3C:51:27:47:45:1A:A2:91:36:19:D6:72:6F:77:11:61:A5:17:43
Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Certificate serial: 34555FAA13177D13734202276FC37C7D446E9C06
Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa
Signing time: Mon 20 Apr 2026 07:00:00 +0000
ROA not before: Mon 20 Apr 2026 06:55:00 +0000
ROA not after: Mon 19 Apr 2027 07:00:00 +0000
asID: 149398
IP address blocks: 2001:df0:7b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:55:5f:aa:13:17:7d:13:73:42:02:27:6f:c3:7c:7d:44:6e:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Validity
Not Before: Apr 20 06:55:00 2026 GMT
Not After : Apr 19 07:00:00 2027 GMT
Subject: CN=CC3C512747451AA2913619D6726F771161A51743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:e0:af:1b:7f:ff:d7:ec:32:2d:cf:11:f9:
f1:8a:5f:78:46:3e:4a:01:78:c3:15:7c:e5:46:19:
4c:61:e0:d1:8a:ab:b3:c0:9a:06:40:70:7f:3a:70:
10:2a:94:c0:ab:86:b8:e7:9f:38:c4:cd:06:8e:c9:
2f:f7:a5:99:36:bd:19:39:98:6a:40:df:cc:58:24:
34:8e:7e:95:62:67:f5:3f:95:5f:71:f3:53:65:d0:
4a:56:53:1d:22:86:a9:69:b1:df:8f:4a:e1:92:71:
b4:df:b4:7a:56:ae:f4:e8:00:31:2d:44:f8:df:11:
66:4c:db:ac:8a:35:7f:b0:38:16:7f:68:55:0b:1d:
2c:92:84:a4:b1:e7:db:20:3a:90:88:35:4c:87:a9:
bd:85:ee:38:dc:fb:1a:24:51:f8:aa:47:f6:80:fa:
95:3a:77:ac:32:4c:1c:3f:57:ae:4b:f4:ac:25:a9:
c8:28:39:eb:08:93:9c:bb:d1:80:4b:5d:dc:24:97:
8a:9c:f5:fe:4a:c4:73:ac:a4:5a:52:3c:59:40:61:
48:38:5d:97:74:25:b5:af:71:2d:0d:3e:1d:fa:ab:
99:d8:87:da:3e:9f:99:00:b9:b9:7c:1e:d3:a7:98:
98:25:ca:4a:02:3a:cd:14:ca:7a:07:79:8d:21:84:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:51:27:47:45:1A:A2:91:36:19:D6:72:6F:77:11:61:A5:17:43
X509v3 Authority Key Identifier:
keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:7b40::/48
Signature Algorithm: sha256WithRSAEncryption
3d:28:36:46:6e:fc:99:69:1e:2c:66:68:84:e1:bd:5b:21:6b:
d6:aa:19:cc:76:e3:16:6f:48:19:a2:62:9a:13:b0:35:f4:c4:
8c:09:08:df:20:73:91:a5:2f:45:56:c3:f8:81:f5:6f:f6:59:
0d:de:9f:fa:53:f1:6e:73:b1:31:de:de:dc:7a:67:eb:d5:f7:
e0:e7:0f:6c:d8:a2:dd:4c:d0:ce:c4:d9:59:e4:9e:fd:50:15:
b7:61:3f:e3:fb:f9:dd:ff:d3:b8:4a:b4:07:02:bf:3b:37:d1:
6f:47:81:c6:b0:9a:d8:3d:fa:4c:bf:8f:6c:b8:2b:30:c2:60:
b9:f5:d4:ad:08:a8:c5:2c:28:9f:9c:a5:7e:e8:6b:c1:b6:99:
e8:83:57:7d:f6:63:11:9f:74:8b:4a:cd:4c:0f:1e:12:40:7e:
7a:4e:e7:0f:7e:5e:ce:92:d7:32:51:bc:5f:db:ca:d3:10:c7:
53:48:67:3c:1d:4b:6a:87:58:15:ed:3e:3d:d5:82:41:56:ed:
ff:08:a6:10:55:36:30:57:ff:04:c0:eb:ca:a4:26:f8:12:a0:
3c:89:13:e7:f9:6f:d7:06:9c:b8:d4:bb:5a:3e:10:64:b0:8e:
cf:e0:66:43:d5:c0:ab:1f:ca:98:ab:15:e3:70:d9:7e:8d:ad:
2f:94:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:44 2026 by rpki-client