Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa
File: 323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier: V9yddt6zFtTtVntAfSOPKd5rKpyKrL+SelFBGEOr+DQ=
Subject key identifier: AC:14:2A:96:69:26:DD:9A:F7:CA:8B:55:5F:8D:CB:13:21:83:7F:BB
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 53793F0A337DB0F614D848922C45E41E98709992
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa
Signing time: Fri 02 Aug 2024 12:40:58 +0000
ROA not before: Fri 02 Aug 2024 12:35:58 +0000
ROA not after: Fri 01 Aug 2025 12:40:58 +0000
asID: 153087
IP address blocks: 2404:97c0:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:79:3f:0a:33:7d:b0:f6:14:d8:48:92:2c:45:e4:1e:98:70:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Aug 2 12:35:58 2024 GMT
Not After : Aug 1 12:40:58 2025 GMT
Subject: CN=AC142A966926DD9AF7CA8B555F8DCB1321837FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:ba:62:d2:f5:77:fd:df:31:e6:af:de:32:
d7:3d:0d:b3:3e:5f:49:72:06:f6:3a:13:84:7e:c5:
b1:ac:a1:c8:cc:da:88:9b:a5:cc:4a:84:ef:d2:8f:
3c:09:75:d6:1b:ae:6f:87:ec:e8:40:b0:ef:0f:60:
e1:4e:db:9c:01:9c:68:83:ba:02:1f:de:49:6e:d8:
b0:15:38:73:d5:94:51:48:ec:80:af:93:d5:8e:f8:
01:97:44:4c:5f:47:ae:c1:df:93:2e:d1:ca:11:b9:
a9:eb:ab:19:a0:07:f3:1b:b7:da:8c:ef:34:dd:05:
9f:0d:61:e3:a0:fe:88:ed:7f:8b:70:7f:31:ca:54:
40:93:f2:3e:cb:de:76:72:60:cf:c9:3b:e3:24:72:
5a:8e:78:a2:38:a2:24:61:95:50:64:88:4f:93:c9:
26:44:29:1b:af:4d:da:c1:00:7d:60:22:a8:3e:91:
84:67:5e:09:d9:11:8f:b3:f0:3e:a8:ec:9f:80:d0:
df:4f:4b:d5:2e:1f:40:30:8d:d4:9c:38:80:4c:f2:
24:93:f5:34:a3:d7:65:2e:1a:17:22:99:24:4c:02:
a2:7b:51:b7:50:b4:c9:24:e8:45:4c:06:2d:03:f8:
0b:e6:ec:c2:1b:24:e6:6e:82:11:a3:0c:80:1f:46:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:2A:96:69:26:DD:9A:F7:CA:8B:55:5F:8D:CB:13:21:83:7F:BB
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:13::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b7:78:38:32:23:e4:ca:ed:4d:f9:16:83:1a:40:01:d4:31:
46:3e:de:5c:45:a5:20:7d:91:bb:d7:6c:b9:a4:a0:ee:f7:33:
b2:92:02:09:97:71:f0:e9:ed:fd:39:7d:f6:1f:1b:da:e2:d0:
e9:92:b8:46:e6:c2:90:dc:0b:6c:ed:b5:6c:24:b7:b5:f2:e9:
fd:3b:d2:4e:3b:8a:3c:bc:51:bd:66:54:71:c7:cf:a8:f0:08:
e0:62:a1:e3:3e:41:b1:40:11:02:16:6c:62:a0:06:44:be:af:
01:bd:06:7d:9e:5c:be:3b:5f:97:a7:5e:6e:1f:f5:58:4c:e4:
c0:50:45:05:fa:98:00:79:18:af:b4:4d:f9:41:34:71:50:5f:
59:89:e8:f2:ac:4c:6c:c1:bb:07:89:6e:1d:59:55:7e:fc:e0:
86:b1:df:d0:f6:9e:63:30:cf:98:4f:79:1f:36:b1:16:9f:f9:
d0:85:67:39:b8:15:2e:e5:ea:90:23:a0:c5:37:ad:9e:de:29:
ac:1c:70:5a:68:d5:e8:aa:33:d7:7c:6b:3e:cb:46:57:d9:51:
ee:89:95:34:e5:3e:89:43:30:2e:0d:ba:56:d9:34:4e:9b:11:
22:fb:77:6f:0a:30:5c:dc:91:e5:19:69:76:a8:b9:cb:2f:ee:
ca:ba:94:0b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUU3k/CjN9sPYU2EiSLEXkHphwmZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA4MDIxMjM1NThaFw0yNTA4MDExMjQwNThaMDMxMTAvBgNV
BAMTKEFDMTQyQTk2NjkyNkREOUFGN0NBOEI1NTVGOERDQjEzMjE4MzdGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+Lpi0vV3/d8x5q/eMtc9DbM+
X0lyBvY6E4R+xbGsocjM2oibpcxKhO/SjzwJddYbrm+H7OhAsO8PYOFO25wBnGiD
ugIf3klu2LAVOHPVlFFI7ICvk9WO+AGXRExfR67B35Mu0coRuanrqxmgB/Mbt9qM
7zTdBZ8NYeOg/ojtf4twfzHKVECT8j7L3nZyYM/JO+MkclqOeKI4oiRhlVBkiE+T
ySZEKRuvTdrBAH1gIqg+kYRnXgnZEY+z8D6o7J+A0N9PS9UuH0AwjdScOIBM8iST
9TSj12UuGhcimSRMAqJ7UbdQtMkk6EVMBi0D+Avm7MIbJOZughGjDIAfRkw3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrBQqlmkm3Zr3yotVX43LEyGDf7swHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEl8AA
EzANBgkqhkiG9w0BAQsFAAOCAQEApLd4ODIj5MrtTfkWgxpAAdQxRj7eXEWlIH2R
u9dsuaSg7vczspICCZdx8Ont/Tl99h8b2uLQ6ZK4RubCkNwLbO21bCS3tfLp/TvS
TjuKPLxRvWZUccfPqPAI4GKh4z5BsUARAhZsYqAGRL6vAb0GfZ5cvjtfl6debh/1
WEzkwFBFBfqYAHkYr7RN+UE0cVBfWYno8qxMbMG7B4luHVlVfvzghrHf0PaeYzDP
mE95HzaxFp/50IVnObgVLuXqkCOgxTetnt4prBxwWmjV6Koz13xrPstGV9lR7omV
NOU+iUMwLg26Vtk0TpsRIvt3bwowXNyR5Rlpdqi5yy/uyrqUCw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:31 2025 by rpki-client