Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa
File: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (raw, json)
Hash identifier: 11nlz0jvsSlyIEKPVIPqB9bPzM3+Qq59EKDDexnszBQ=
Subject key identifier: 24:24:10:5B:03:05:0E:90:C4:2A:6D:35:59:6C:43:7E:E2:D0:7C:F4
Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial: 581ACCE220CB165B9725EA030542009FBD802203
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa
Signing time: Mon 27 Apr 2026 08:20:24 +0000
ROA not before: Mon 27 Apr 2026 08:15:24 +0000
ROA not after: Mon 26 Apr 2027 08:20:24 +0000
asID: 38496
IP address blocks: 2001:df4:bd00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1a:cc:e2:20:cb:16:5b:97:25:ea:03:05:42:00:9f:bd:80:22:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Validity
Not Before: Apr 27 08:15:24 2026 GMT
Not After : Apr 26 08:20:24 2027 GMT
Subject: CN=2424105B03050E90C42A6D35596C437EE2D07CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:dc:d6:b2:52:db:91:e3:14:52:93:5a:60:
86:30:54:ff:3c:f1:46:fb:19:9c:ac:8b:05:94:15:
31:74:a8:25:f3:c1:6c:66:18:0e:9f:c1:1a:2c:fe:
e0:e4:39:6d:5f:ee:88:0f:dc:25:66:5f:df:04:e8:
24:1a:46:9a:82:6e:67:f4:88:46:f1:e9:8c:18:92:
12:35:7c:e2:c3:c9:97:77:07:5f:73:70:5b:31:95:
38:4f:6a:05:c5:ce:12:ac:08:82:5e:e2:a7:25:8f:
19:7a:9a:99:c6:67:ad:4a:de:f7:a0:97:aa:20:61:
a0:25:85:a1:7e:23:8d:6a:e5:96:66:b4:f8:e3:5c:
fc:43:75:8a:a9:6a:08:ea:19:66:de:19:2c:ff:63:
55:0f:15:2c:0e:77:07:32:fe:b4:ed:ea:43:ba:bf:
be:ff:02:f7:33:b2:f2:4f:14:fb:07:c0:0a:da:53:
97:04:6c:5e:71:5b:a1:7d:9d:f4:ce:ff:0d:08:dc:
e8:7f:8a:93:8a:25:9c:51:67:aa:63:7f:86:a9:02:
8a:90:a1:43:21:0c:21:db:49:9a:5c:3d:a4:82:ea:
7c:92:46:dc:cc:83:2a:2a:8b:2f:4c:a9:ac:62:9a:
82:b9:ac:db:4f:11:ee:5e:f1:2d:9a:d3:03:8d:69:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:10:5B:03:05:0E:90:C4:2A:6D:35:59:6C:43:7E:E2:D0:7C:F4
X509v3 Authority Key Identifier:
keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:bd00::/48
Signature Algorithm: sha256WithRSAEncryption
36:e9:bf:70:c0:a6:e2:74:17:bb:d8:e0:99:e2:e5:04:62:b2:
40:c3:ef:27:73:dd:1c:d1:18:7d:12:50:3a:53:70:9b:01:bf:
fc:c9:bd:4c:7c:29:f5:de:82:b4:96:c4:91:55:f8:b3:af:ce:
6f:b5:56:36:a1:d1:3e:60:d2:28:76:50:bd:97:53:9b:3d:80:
62:2d:fd:c3:92:12:eb:ce:fb:1a:c4:01:29:81:22:cc:29:9c:
31:8b:9c:6b:90:29:27:17:8e:73:07:69:20:a5:68:b4:fd:8a:
ac:39:b1:d9:ca:ce:d6:2d:46:0e:ce:d0:a4:f6:83:a5:b3:14:
82:75:a8:ca:1b:bc:8d:a6:92:46:61:73:2a:97:56:4f:91:90:
5e:a6:9c:c5:c7:56:11:21:cf:c7:7a:5a:a4:0a:17:51:e7:7a:
b8:8c:5d:9a:73:5f:64:c2:9a:d4:da:11:14:98:fe:ed:a8:30:
fe:53:a9:29:78:99:69:30:3f:cf:9e:90:49:08:63:dc:ac:cd:
d1:3b:42:69:fe:9e:b1:04:4a:89:be:7c:c6:07:bc:66:ec:0c:
a2:6a:f4:3b:5c:a6:cd:90:ce:eb:2c:63:60:ef:ad:9c:e6:a8:
7a:25:7d:9f:b5:97:fd:96:2a:41:b1:8d:89:0b:18:74:1c:c2:
06:ff:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:52 2026 by rpki-client