Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa
File: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (raw, json)
Hash identifier: KvZLwtwl7aT1+4VaO36QTe7ow8oCYWWhsH86C8UoGl8=
Subject key identifier: E7:D1:74:4F:F4:04:B3:E9:87:3A:24:CF:4A:0E:C2:B9:21:6F:B9:97
Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Certificate serial: 2863A43B8221D06F10636EA73860F927CDC42405
Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa
Signing time: Wed 22 Apr 2026 08:00:02 +0000
ROA not before: Wed 22 Apr 2026 07:55:02 +0000
ROA not after: Wed 21 Apr 2027 08:00:02 +0000
asID: 152440
IP address blocks: 2001:df3:c240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:63:a4:3b:82:21:d0:6f:10:63:6e:a7:38:60:f9:27:cd:c4:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Validity
Not Before: Apr 22 07:55:02 2026 GMT
Not After : Apr 21 08:00:02 2027 GMT
Subject: CN=E7D1744FF404B3E9873A24CF4A0EC2B9216FB997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:6b:8d:a7:9d:c2:66:06:dc:d4:ba:1c:0e:
8f:24:52:7e:eb:95:b7:6a:f1:3b:00:3f:33:02:54:
67:0c:d9:0b:17:28:b3:67:55:d9:0c:f6:89:c9:98:
1b:57:c5:06:72:56:ab:3d:e5:a7:7b:84:d7:c3:fd:
52:7f:a1:b2:ab:4e:aa:c9:d5:18:8d:88:0a:eb:26:
42:38:62:38:59:7f:30:8d:a8:1d:ac:45:1d:90:08:
52:77:17:8f:9b:dd:de:9a:25:86:d6:d4:f1:9f:84:
0c:5a:f3:04:a8:e4:4a:a2:06:27:13:79:b2:a1:0a:
76:f3:6c:6e:b6:55:d6:c3:b7:bd:62:0a:6a:11:62:
40:17:20:00:94:f9:ed:4c:7e:3f:0f:05:37:7d:03:
c6:b1:2f:56:f8:62:d0:5f:d5:16:96:2c:0a:a5:bb:
81:95:3b:aa:4b:a6:cc:9e:7a:9f:d4:cd:5f:1e:f9:
9b:76:5b:a2:84:14:41:9d:ee:fa:5d:df:da:e7:7a:
c9:87:55:5e:dd:de:73:40:26:a9:93:ff:da:a3:dd:
37:1a:62:51:f2:58:8b:9d:70:f7:46:49:05:56:ea:
d7:56:ae:7e:1b:5b:af:71:57:2d:49:6b:52:d6:cc:
c6:19:02:ed:63:ae:3f:95:10:be:a0:31:ab:0d:60:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:74:4F:F4:04:B3:E9:87:3A:24:CF:4A:0E:C2:B9:21:6F:B9:97
X509v3 Authority Key Identifier:
keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c240::/48
Signature Algorithm: sha256WithRSAEncryption
44:8d:4a:c1:5c:b1:21:99:c9:11:4e:9a:d6:36:73:cd:5c:44:
ac:f1:8e:91:52:bf:97:92:c9:84:cc:6c:f3:d8:3d:c9:55:63:
90:28:51:20:8a:3a:91:13:6d:cb:c6:38:5e:54:52:7f:a6:b0:
1e:fa:5f:76:8f:31:53:66:75:f9:a5:c7:c7:58:b1:24:37:f0:
c6:72:88:10:db:55:82:86:cf:0e:cd:c8:a1:78:b3:6d:3b:11:
35:27:66:ee:37:39:fe:0f:2d:02:a1:74:84:0b:3a:38:c7:fb:
1a:c4:cd:14:92:f8:a6:c1:0b:02:e2:84:af:e1:5b:2d:74:e1:
cb:8b:98:33:a6:a2:03:4b:e9:a3:46:12:41:f2:4e:cd:61:7b:
b8:46:cf:e0:e0:9a:d1:24:ef:20:17:03:be:5c:a3:f3:52:0d:
16:31:cf:ab:a4:5f:db:61:37:ab:09:a4:01:49:99:b4:58:93:
8c:96:8a:27:a8:2a:95:94:94:6f:a2:eb:e8:b8:ae:db:f5:3c:
3a:59:87:54:ff:b0:9a:53:66:04:48:af:81:d2:ce:f2:6f:f0:
f6:47:aa:a1:fc:63:ed:78:f9:72:af:c5:d6:69:9d:a6:a2:95:
2b:cc:c4:9c:18:16:49:0a:06:f0:89:94:38:df:0f:bc:af:7e:
97:31:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:13:14 2026 by rpki-client