Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa
File: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (raw, json)
Hash identifier: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=
Subject key identifier: 54:96:00:BB:5E:D9:B9:80:4E:92:40:E9:6B:39:AE:DB:FD:88:92:79
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 4F25D39970C1EB06B6512639D852DB3604D3F6D9
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:00 +0000
ROA not before: Mon 27 Jan 2025 06:55:00 +0000
ROA not after: Mon 26 Jan 2026 07:00:00 +0000
asID: 38320
IP address blocks: 2404:3900:1992::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:25:d3:99:70:c1:eb:06:b6:51:26:39:d8:52:db:36:04:d3:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:00 2025 GMT
Not After : Jan 26 07:00:00 2026 GMT
Subject: CN=549600BB5ED9B9804E9240E96B39AEDBFD889279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:c0:23:f0:eb:c1:e7:9d:b7:b9:cd:ed:97:
0b:55:cd:d2:f8:02:cb:8c:10:d2:e6:92:07:67:0d:
e6:9b:ce:43:b5:4d:d4:55:67:09:38:a3:95:b8:b9:
8d:74:03:a5:d6:97:b3:66:96:f6:e2:02:d9:f9:84:
39:ab:6c:08:b5:57:81:cd:53:8a:24:41:ae:a7:88:
04:2b:71:a8:19:45:15:64:c0:08:c1:1b:91:99:8b:
dc:3c:a2:fd:1e:d3:80:21:c3:8d:81:8e:1a:08:64:
49:59:c7:e5:9e:3a:fe:a0:61:4d:43:f1:fc:f6:dd:
a1:f5:21:65:e5:71:3d:b0:51:3a:43:9d:17:22:ad:
07:11:a6:b5:93:03:22:c6:59:60:d8:65:44:2d:8b:
6f:25:41:d7:63:0e:e4:ed:a9:fb:39:ab:51:53:2b:
9c:67:97:a1:61:51:41:0d:76:8c:4f:5b:f5:df:cb:
4e:d8:f5:ea:bd:0f:7c:5d:34:c0:5f:6e:d7:b0:b1:
cb:0e:a2:88:03:55:76:f4:ef:4f:2d:12:51:00:e5:
ca:53:31:75:5a:fc:9c:ec:80:36:69:1f:c2:17:6a:
14:68:f1:12:f5:ce:f6:e2:41:a6:8a:99:e9:83:25:
97:23:f0:7a:49:0f:d8:8c:a9:20:bb:f0:ce:89:e3:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:00:BB:5E:D9:B9:80:4E:92:40:E9:6B:39:AE:DB:FD:88:92:79
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3900:1992::/48
Signature Algorithm: sha256WithRSAEncryption
86:6a:28:ff:fa:c6:ce:b2:51:99:a7:2d:9f:b8:0d:1c:0d:ab:
83:e8:bc:28:23:fc:4c:24:e0:57:98:c3:3c:d4:ad:19:77:0a:
a3:0a:23:1b:47:fa:26:fa:ad:a7:82:a2:9d:d9:ee:34:94:3b:
09:14:e3:76:9e:cf:2a:e4:b4:27:ab:a3:1a:04:7d:72:3d:56:
a7:e9:10:f5:74:80:fb:73:c3:62:b9:31:e7:06:07:d8:d8:77:
9b:81:5e:5b:4a:14:02:35:91:27:06:9b:13:e5:94:73:99:ad:
c2:e5:a2:75:c5:ed:07:28:2a:59:e8:11:5f:6b:cb:8a:9c:6d:
c9:88:b5:37:e6:c1:35:29:56:0c:97:81:53:59:12:f9:c2:ae:
3f:53:77:8e:db:3f:c1:5a:9d:27:25:09:2b:0b:d0:45:f5:e3:
49:18:58:eb:94:90:b3:ee:c3:33:d2:d2:dc:58:53:a6:5c:4b:
d2:9d:cb:eb:65:3e:36:88:3f:89:73:5b:86:e5:d2:da:f8:d6:
41:7e:6d:20:96:26:1d:70:78:4c:84:db:69:79:5d:29:07:68:
ab:7d:1a:f0:05:97:c4:c4:99:e9:45:52:1d:2b:e8:ee:f3:4a:
63:f0:eb:d6:eb:a3:cc:6d:37:eb:16:17:d9:f9:bd:7f:a1:32:
46:e2:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:29 2025 by rpki-client