Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
File: 323430303a346130303a3a2f33322d3332203d3e2039333431.roa (raw, json)
Hash identifier: g80n0PWLNl0kKwv7JNpigSZlmQsrz709iEdEh3Wwj9M=
Subject key identifier: EE:DD:61:92:AC:B6:4F:BC:23:2A:07:C7:94:68:FD:2C:48:F2:F8:1D
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 358D3820419DA3FC6A8C357ED6ED8B1F670113EA
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
Signing time: Fri 13 Dec 2024 07:03:03 +0000
ROA not before: Fri 13 Dec 2024 06:58:03 +0000
ROA not after: Fri 12 Dec 2025 07:03:03 +0000
asID: 9341
IP address blocks: 2400:4a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8d:38:20:41:9d:a3:fc:6a:8c:35:7e:d6:ed:8b:1f:67:01:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Dec 13 06:58:03 2024 GMT
Not After : Dec 12 07:03:03 2025 GMT
Subject: CN=EEDD6192ACB64FBC232A07C79468FD2C48F2F81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d1:6d:24:32:eb:87:75:b1:16:77:dd:07:15:
2b:0b:55:a3:72:c0:7a:0e:a6:61:85:4f:21:47:b0:
75:83:9b:4b:75:5f:ba:8c:95:db:66:f5:1d:01:a8:
2a:00:db:af:0f:67:7e:bb:88:ec:50:7b:68:66:d8:
97:0b:4c:20:f5:5d:a7:b5:62:f7:17:43:81:90:95:
33:83:ea:ce:8f:9e:89:cb:89:46:61:86:c0:b0:0c:
a5:00:a4:c2:09:c1:28:63:08:a0:9a:85:4d:a6:63:
ac:e8:90:b0:59:bb:40:92:3e:b0:f7:3a:64:44:7a:
cb:8d:a0:44:87:33:45:0f:4a:ce:96:7e:92:36:5b:
05:d1:ab:33:a9:29:f0:79:5e:e6:3c:07:60:b2:3c:
79:fa:1a:5c:f5:a1:2b:e7:8a:b0:46:f7:b6:65:d4:
67:a5:e3:f0:2a:c1:e5:57:1f:bf:e7:23:3e:ea:a0:
1b:c3:03:76:47:19:20:68:0a:93:fb:6e:39:df:08:
23:56:fc:70:fa:0d:17:1f:9a:d4:46:a0:9a:76:2f:
d8:8c:59:e5:12:02:dc:7b:ac:d8:27:5a:38:95:d9:
5f:0c:af:8c:b2:d5:27:cf:1d:fc:a4:b2:af:b0:51:
41:7a:ec:ff:74:49:fe:96:d4:87:22:f0:2b:28:6c:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:61:92:AC:B6:4F:BC:23:2A:07:C7:94:68:FD:2C:48:F2:F8:1D
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
20:52:88:16:17:0a:85:36:72:13:75:af:be:1e:f1:b4:d6:87:
0a:84:fe:b0:0e:b6:ad:b9:3f:68:0c:f6:12:92:7d:aa:ce:64:
86:79:85:fd:84:98:e1:1b:0c:79:16:1b:15:f5:ef:27:9d:36:
f1:db:c7:bd:8e:5a:5b:42:b4:d6:3e:36:0b:d7:f7:7b:b3:ca:
c1:6a:fd:e8:9e:ab:9b:b1:55:47:89:6a:51:bf:e6:30:27:36:
3b:df:9e:a1:39:e7:5b:dd:cf:bc:ea:3a:1f:4c:20:54:04:0f:
cb:5f:45:50:60:09:4e:31:b4:e7:48:fc:87:68:11:f2:1e:fb:
79:74:87:21:9b:36:d6:24:4c:fe:72:0c:e6:11:0c:ec:5f:6e:
7b:6d:29:13:dc:3d:70:1f:f6:d6:0a:9a:86:9f:28:f3:07:f8:
92:c0:69:fb:51:91:4b:ba:6b:b4:63:7d:79:f2:99:35:00:62:
a8:84:8d:a0:bb:b3:34:10:4b:40:0e:82:10:4d:6e:cf:ef:74:
43:20:96:7d:e1:2d:b0:ee:2a:b7:63:18:dd:34:ef:c0:ce:b1:
7a:84:7b:a1:01:e2:f3:bb:8d:75:e6:61:81:1c:de:c9:60:ca:
eb:34:59:00:72:8a:78:51:56:16:8b:79:15:4f:99:9e:85:fc:
fb:ac:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:33 2025 by rpki-client