Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: NiC3QFDv08+XCls57Tk9yzXIUDlZH6R+1/UJrf9zchk=
Subject key identifier: 07:E6:DF:7E:CB:68:85:FA:3D:45:31:B0:57:94:51:50:CB:88:4C:14
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 120DD535609B43D1E2054F082FCED732028E367A
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 17:00:00 +0000
ROA not before: Tue 28 Apr 2026 16:55:00 +0000
ROA not after: Tue 27 Apr 2027 17:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9980::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0d:d5:35:60:9b:43:d1:e2:05:4f:08:2f:ce:d7:32:02:8e:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 16:55:00 2026 GMT
Not After : Apr 27 17:00:00 2027 GMT
Subject: CN=07E6DF7ECB6885FA3D4531B057945150CB884C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:28:cd:9d:cb:5e:4e:da:80:79:87:98:7d:
50:1d:13:41:3c:4d:04:7b:9f:6f:7f:89:f5:61:d5:
19:58:9f:14:81:82:98:19:9e:a4:cb:2c:0d:8c:69:
d8:dd:85:d3:e4:61:33:34:05:7b:ce:a6:6f:d4:be:
9f:82:85:66:61:99:a0:81:8e:a5:21:55:f1:dd:53:
d9:28:50:bf:62:9e:1a:08:4f:5d:de:9d:51:40:a8:
90:6b:79:fa:55:a3:7d:ec:08:4a:69:94:77:68:79:
37:ea:18:f7:07:fa:0f:fd:70:bb:53:93:b6:c5:81:
a7:8d:b0:a9:0a:a1:a2:66:2f:7b:b8:68:b5:5c:78:
5f:e9:8a:84:5c:6c:94:f4:8e:f7:67:b9:8e:05:74:
37:64:d4:e9:3e:d4:9f:4c:d6:f7:29:a4:f0:d6:33:
f8:9f:c4:43:a2:eb:bd:bd:94:b4:c9:39:58:c7:3e:
e8:0b:c6:9b:9e:cd:68:65:7a:e7:79:52:50:01:c9:
a0:7d:c7:0e:4d:6c:c0:61:59:01:5a:8a:09:a9:e5:
cd:d1:f9:c2:17:23:64:ef:a4:ee:d3:7e:2f:9b:3c:
b8:29:dc:b8:23:7e:54:47:2b:e1:3f:9c:72:f2:8c:
0e:51:94:9d:09:8f:48:9b:d0:8b:60:ec:fc:3c:7b:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:DF:7E:CB:68:85:FA:3D:45:31:B0:57:94:51:50:CB:88:4C:14
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9980::/44
Signature Algorithm: sha256WithRSAEncryption
44:7a:81:ea:9b:e7:61:90:fb:f2:82:e2:16:d5:93:a6:ff:38:
ce:ae:fb:d0:d9:31:1d:6f:de:11:88:91:89:b0:ff:9e:ba:88:
ff:61:d9:9d:f8:bc:4c:65:8a:41:cf:af:12:23:70:85:af:ab:
81:1c:26:d1:a6:fc:12:8c:55:23:e3:a1:b2:80:aa:06:7b:50:
97:cb:37:30:d8:9b:eb:e0:87:8d:3b:30:b1:47:ce:93:b5:3e:
49:f6:d4:44:d3:db:63:e4:24:4f:1c:d6:07:0e:ab:77:e9:2d:
22:ad:63:a7:bb:b3:94:ea:1b:8a:b2:cc:ff:1f:8c:95:9b:71:
98:59:35:f3:fb:7b:ed:1e:78:af:a0:02:93:79:b4:51:05:f9:
25:48:7e:83:48:f1:50:5a:9a:88:55:54:b6:54:95:15:df:5d:
93:84:4a:02:9d:7b:54:1e:29:79:a8:c8:33:1d:bf:59:3b:06:
76:b7:e1:81:7f:f4:86:6b:d2:a0:71:51:a0:4c:1a:7f:52:19:
c8:92:2a:eb:be:88:d1:fb:61:6b:77:b6:4e:c0:9e:4c:9a:6f:
05:bf:fe:19:8c:ac:57:a5:cf:14:50:3c:ae:76:9d:f8:11:5f:
06:47:0f:e9:f7:db:26:a8:07:89:b1:ac:95:ba:83:eb:da:2e:
2c:f8:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:27 2026 by rpki-client