Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
File: 323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (raw, json)
Hash identifier: NPhXqawaprL4zDFa7WBE55/6WmxVMNeLg4ncWrhRL/Y=
Subject key identifier: 28:DF:86:17:1E:00:B4:C7:77:B3:54:87:38:94:7A:05:34:C2:6E:EB
Certificate issuer: /CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F
Certificate serial: 0679E3ADD76729292238263F213C0C2A1A6A6E31
Authority key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
Signing time: Tue 21 Apr 2026 12:00:01 +0000
ROA not before: Tue 21 Apr 2026 11:55:01 +0000
ROA not after: Tue 20 Apr 2027 12:00:01 +0000
asID: 131713
IP address blocks: 2001:df3:2980::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:79:e3:ad:d7:67:29:29:22:38:26:3f:21:3c:0c:2a:1a:6a:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F
Validity
Not Before: Apr 21 11:55:01 2026 GMT
Not After : Apr 20 12:00:01 2027 GMT
Subject: CN=28DF86171E00B4C777B3548738947A0534C26EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:61:93:0a:0b:38:3c:23:ec:92:6b:ad:fd:
ce:ee:f5:d3:40:f6:e3:e0:be:03:0f:1f:12:42:bf:
46:a8:52:50:e2:a3:23:ed:2c:2a:bb:db:11:15:9f:
be:9c:db:40:8f:08:8d:4d:71:65:2c:41:d7:b3:40:
5d:f3:73:cb:a1:63:33:69:6c:62:0f:4a:0a:08:18:
d7:d9:2d:0d:da:cc:ee:4e:f3:f5:6e:8b:94:6f:94:
21:32:fc:e5:09:b0:82:5d:56:b4:33:6e:07:f9:77:
c4:7b:c0:ee:96:18:5f:15:aa:a8:70:38:fe:c8:1e:
ea:e8:d0:fa:51:4a:c6:1b:2e:f4:a1:9d:6e:09:78:
42:c8:5c:47:79:43:60:d2:33:87:e7:5c:4b:ac:93:
54:8e:bb:3d:3e:96:20:dc:d4:eb:8e:24:43:34:04:
7d:6a:cc:00:3c:6e:a8:9a:90:8e:c0:7b:25:6f:d6:
5b:21:4e:4f:59:25:f8:d4:39:d2:00:17:a7:f8:25:
10:c7:b6:63:6b:ca:21:12:9d:8a:bb:1d:67:b6:e6:
9b:99:7c:14:e0:5f:8f:a8:a7:37:9b:51:32:47:30:
59:e9:f9:a2:24:c8:65:7d:5d:68:b9:27:70:4c:38:
8a:4e:8f:6c:c6:ff:64:b1:6f:e3:66:15:86:78:5f:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:86:17:1E:00:B4:C7:77:B3:54:87:38:94:7A:05:34:C2:6E:EB
X509v3 Authority Key Identifier:
keyid:17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2980::/48
Signature Algorithm: sha256WithRSAEncryption
72:37:23:72:09:c4:e5:9b:4d:7e:3c:89:d7:9a:45:8e:5f:76:
6c:df:bf:d7:22:d7:22:62:5a:c8:7d:9f:4a:04:57:54:1e:b6:
48:df:4b:f5:53:9b:03:ea:4f:60:bf:18:bb:ac:d2:7a:f5:77:
81:e0:37:59:dc:03:7b:09:88:58:7e:a6:1b:2b:d2:4f:ce:b0:
9e:53:67:fb:9c:27:d7:44:44:64:17:67:ea:80:68:ef:c1:aa:
c2:64:8c:5b:50:ed:be:8c:ea:93:5a:3b:0d:97:71:f5:20:96:
85:bc:94:1c:fd:29:2d:80:62:91:cc:30:5d:bb:39:29:96:e9:
1d:2f:6f:15:d2:92:ef:82:6e:63:e3:10:15:7e:0c:7d:da:4d:
c3:24:97:18:d4:c4:87:76:a3:50:a9:bb:ba:e5:1c:92:60:09:
be:10:19:8b:41:5b:bf:12:8d:af:b6:04:9d:43:6f:72:e0:3e:
3b:87:9c:b2:48:a7:2a:9c:a9:ae:5d:67:ac:a6:8f:78:78:b8:
55:d7:9f:48:d6:ed:5e:5d:ec:34:89:0d:9e:9c:92:d2:d7:9d:
e6:5a:c2:2d:54:5a:d2:9b:11:69:0f:4e:a2:f7:a1:35:bf:e2:
5b:86:0e:d9:98:39:ca:39:56:5a:80:a3:51:ee:45:87:e3:c1:
da:8e:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:55 2026 by rpki-client