Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa
File: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (raw, json)
Hash identifier: MgcMx+oefs15/nQbZUdwlcSVTiP7l92updO5vKD+R9s=
Subject key identifier: B9:E9:05:5C:40:5E:B0:3A:3C:9C:73:8F:2B:0E:58:76:2C:A0:C3:94
Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial: 73A0188C897A6E68FF5FE71A0495785167B5AA09
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa
Signing time: Tue 21 Apr 2026 21:00:03 +0000
ROA not before: Tue 21 Apr 2026 20:55:03 +0000
ROA not after: Tue 20 Apr 2027 21:00:03 +0000
asID: 133835
IP address blocks: 2001:df4:5400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a0:18:8c:89:7a:6e:68:ff:5f:e7:1a:04:95:78:51:67:b5:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Validity
Not Before: Apr 21 20:55:03 2026 GMT
Not After : Apr 20 21:00:03 2027 GMT
Subject: CN=B9E9055C405EB03A3C9C738F2B0E58762CA0C394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:fd:c9:99:a4:5b:cc:2d:02:45:da:e6:91:
32:6b:e3:15:e9:14:4d:88:55:a9:39:f4:b8:36:ce:
50:c6:ee:8f:9e:f0:d4:4a:a3:2b:c0:d2:95:14:e9:
2f:1e:ca:5f:f8:b8:4a:58:a3:0f:2a:30:7e:7f:c8:
5f:ca:ea:ad:2c:0d:08:ee:c5:b0:bb:36:0c:db:63:
90:70:15:01:13:99:b1:c7:30:f9:9e:c0:f0:9c:2d:
20:83:ea:7d:fe:90:1f:8a:8f:c9:43:18:84:13:72:
2a:61:62:10:9b:69:67:a5:cb:16:5a:3e:4e:e1:18:
31:8d:bd:a2:77:f5:d6:8b:af:8a:ff:f9:6c:98:35:
c7:d5:e0:9b:b9:42:c3:c9:b8:1d:45:7e:d4:dd:ca:
bf:27:02:53:e8:54:dc:9a:18:d6:62:2c:2e:91:0b:
ae:85:1d:62:16:c9:45:21:25:dc:e3:af:00:ed:18:
0c:3f:19:e3:0c:3e:78:55:60:6f:ce:1e:35:57:a4:
77:a7:2c:6e:8d:1e:f1:bb:c9:46:e9:f4:6a:55:23:
44:99:67:d3:d6:7e:76:63:27:98:9a:85:e3:05:2e:
36:ea:fb:f1:6a:08:33:58:11:54:b2:2f:ec:28:19:
e7:4f:f8:33:63:5e:e6:f6:47:9b:de:09:bc:53:7b:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:05:5C:40:5E:B0:3A:3C:9C:73:8F:2B:0E:58:76:2C:A0:C3:94
X509v3 Authority Key Identifier:
keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5400::/48
Signature Algorithm: sha256WithRSAEncryption
0a:45:43:f4:11:8c:f4:b5:b3:57:e8:7b:ea:93:c7:5b:05:a7:
87:b8:f1:98:ac:2a:42:05:de:65:dd:31:57:39:dc:d3:6c:50:
42:d6:42:72:3e:72:d5:fb:e4:35:68:4b:7f:96:d2:18:25:5d:
6d:5f:d1:c3:d4:0e:88:44:64:33:94:d4:40:68:22:0a:3f:8a:
dc:e6:2c:f3:9f:41:2c:ca:d7:49:90:f1:a1:04:23:cb:2d:d2:
7d:0a:c1:4c:5c:e5:b2:aa:9f:14:f7:36:3f:21:06:a9:9f:65:
2e:3c:bc:c6:e1:31:a9:73:35:6a:1f:39:bf:70:40:8b:1f:aa:
aa:7d:09:77:ea:8d:5c:c4:91:e4:9f:87:31:c5:2e:2b:12:d0:
75:1e:07:d7:30:20:68:b0:b2:36:9d:8a:e5:57:28:39:41:d1:
f6:0b:84:7a:4e:fa:b7:43:62:2a:d6:09:fc:8f:aa:48:d2:29:
71:ea:be:d8:af:7f:a9:49:bd:5f:13:5d:02:d2:f3:6f:a4:09:
18:bd:45:72:7b:e3:77:cf:ca:c5:4b:6a:e6:8a:23:ef:13:92:
40:b4:e3:5c:3d:f3:6c:10:00:bc:74:21:55:d4:cb:e8:bf:d1:
c1:32:d3:9f:8b:82:e5:9a:e3:69:8a:4e:87:99:ff:ec:f0:59:
25:b1:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:56 2026 by rpki-client