Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa
File: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (raw, json)
Hash identifier: EdbrEo0Jx4O+lJjEDUnzfrxBdroS7nG8BbsEC8vmXwA=
Subject key identifier: 40:45:74:4B:91:B7:A4:82:8C:F0:38:22:56:6D:73:0E:A4:56:F1:09
Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial: 52E18BDA4A9F14686D9C4765528B43ECB82F908A
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa
Signing time: Wed 29 Apr 2026 09:00:00 +0000
ROA not before: Wed 29 Apr 2026 08:55:00 +0000
ROA not after: Wed 28 Apr 2027 09:00:00 +0000
asID: 24526
IP address blocks: 2402:da00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e1:8b:da:4a:9f:14:68:6d:9c:47:65:52:8b:43:ec:b8:2f:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Validity
Not Before: Apr 29 08:55:00 2026 GMT
Not After : Apr 28 09:00:00 2027 GMT
Subject: CN=4045744B91B7A4828CF03822566D730EA456F109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:39:ac:25:fa:6d:9a:9d:8b:2f:43:7f:aa:
8d:bc:10:2e:40:b9:86:3c:76:ff:ca:17:42:ae:78:
d4:24:3f:4b:0e:56:cc:ed:77:d7:43:f7:33:28:9c:
2b:98:9b:1a:37:2a:7b:0c:58:c7:6b:46:43:6e:c0:
f1:03:ae:79:f1:22:40:af:06:85:d2:28:05:68:2e:
a7:75:5c:5c:ea:a2:3b:6b:d1:6b:50:e1:c3:23:23:
9b:f8:bc:3f:0e:f1:bb:8e:27:a8:87:08:08:14:e0:
9b:c6:81:e2:1c:c1:41:c5:ea:fa:d8:0e:1e:2c:54:
ad:2a:31:c7:84:0d:3b:71:90:95:a9:be:4f:ae:7e:
95:4c:59:57:12:a6:55:f1:fa:44:93:1b:81:48:81:
d0:30:e1:ae:72:aa:d5:fe:3b:5f:c2:d1:60:77:39:
08:46:35:f5:22:fc:a9:e8:f6:50:67:a8:e7:b7:38:
aa:41:47:38:ef:9f:27:b9:d1:a4:bb:fd:75:90:85:
ff:20:ea:a9:ed:4a:93:e4:ba:e1:a8:c8:5e:54:9d:
e3:46:8a:28:a9:ae:9d:49:7d:82:25:22:99:65:83:
d3:76:8e:fc:bd:96:2a:c8:76:e9:5c:63:98:f8:6a:
ed:0b:2e:f9:5d:d8:27:e6:9d:b9:5a:32:88:a0:ee:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:74:4B:91:B7:A4:82:8C:F0:38:22:56:6D:73:0E:A4:56:F1:09
X509v3 Authority Key Identifier:
keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:da00::/32
Signature Algorithm: sha256WithRSAEncryption
7c:69:a2:22:c6:49:ae:7e:41:ae:93:95:44:ed:8b:94:2b:09:
13:fb:ed:9b:74:e5:e4:90:cc:7c:65:9d:9e:c1:3b:20:41:6e:
2f:42:2d:ef:ae:6f:fe:fc:f6:55:f9:34:25:aa:65:ea:4c:6d:
d7:86:14:0e:f0:90:ed:2a:9c:d6:41:0b:18:66:b1:c8:02:56:
56:73:11:df:58:70:a3:3b:93:d3:9e:30:e0:79:87:1c:3d:62:
82:ff:c0:73:49:98:5f:d0:c1:2c:60:20:f5:e8:77:3a:a6:99:
3b:bd:32:07:40:f0:df:cf:29:cf:bd:6b:6a:06:15:d3:7d:82:
02:f9:25:f7:ce:64:22:ce:6a:4c:69:2f:21:32:ec:c9:7e:96:
40:97:ed:b0:7f:8e:53:9e:1b:9e:38:63:3c:da:93:99:c0:5d:
27:67:f2:39:9b:3c:ea:74:9e:ad:f0:ac:d2:03:02:fe:d9:f4:
89:a5:cf:90:9b:6a:49:e6:75:ab:2b:32:f8:51:bf:5d:35:a7:
b5:71:69:21:88:f7:ce:a4:67:89:a2:03:49:48:25:4e:c6:7e:
83:9f:10:ba:aa:ab:02:1a:b8:e5:f1:c8:22:00:0f:4d:f9:ed:
50:80:5a:b6:24:74:37:4d:5c:2c:ca:0b:f6:62:e3:ca:ea:8d:
28:4f:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:23:02 2026 by rpki-client