Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: JdbChLefvVigMoWsowTTSLi5sqp8l9DfWRWL47MOlaI=
Subject key identifier: 6A:0F:F9:0D:F9:8B:BB:C4:08:A5:A1:66:89:F3:DA:21:DF:FA:37:C7
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 59BC709338B88EFABBFFA90A987450B2131BFC5F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Fri 06 Dec 2024 12:00:02 +0000
ROA not before: Fri 06 Dec 2024 11:55:02 +0000
ROA not after: Fri 05 Dec 2025 12:00:02 +0000
asID: 58369
IP address blocks: 2403:fd80:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bc:70:93:38:b8:8e:fa:bb:ff:a9:0a:98:74:50:b2:13:1b:fc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Dec 6 11:55:02 2024 GMT
Not After : Dec 5 12:00:02 2025 GMT
Subject: CN=6A0FF90DF98BBBC408A5A16689F3DA21DFFA37C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:7b:03:ef:c7:5e:08:79:b9:1c:c6:b5:1b:
d6:33:cc:7a:d0:41:58:1f:42:3f:c9:94:bd:c0:36:
78:69:5f:02:3a:00:47:15:0a:ac:23:a9:27:99:86:
9d:d2:ea:15:40:e9:22:74:55:0c:ad:37:fe:1c:f9:
0f:47:b9:da:ba:c6:28:ee:b2:a1:b9:d3:e9:9e:c2:
d4:ac:4f:b3:28:3e:4e:d1:c5:88:b5:6a:9f:70:d6:
e2:90:ca:75:43:5b:4f:0c:d9:01:ba:a7:fc:6a:3b:
18:57:b2:9c:27:79:13:24:1e:83:29:0c:e3:9e:52:
65:1c:1a:bd:29:68:35:de:13:64:81:cc:93:7e:0d:
f6:b0:58:e8:ca:c9:f7:a6:1c:c7:3a:62:9e:ba:33:
cd:2c:e6:9c:27:2c:eb:0b:f4:45:90:c4:96:71:01:
31:d4:5c:eb:ec:ab:3f:c1:47:16:ad:ce:2b:51:b6:
fc:36:66:6b:50:05:9a:b5:02:d3:e2:01:3a:90:68:
d4:de:a4:58:5c:c0:84:7d:4f:f8:a1:b5:f2:38:f9:
54:30:d3:c8:6d:67:02:03:81:93:9f:d7:bb:d0:a4:
0c:cc:12:fe:8d:6d:3e:1c:41:f0:cc:ef:d3:4e:64:
df:5b:61:48:11:5f:97:8a:70:92:f1:4e:dd:4b:ac:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:F9:0D:F9:8B:BB:C4:08:A5:A1:66:89:F3:DA:21:DF:FA:37:C7
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:a000::/36
Signature Algorithm: sha256WithRSAEncryption
30:c1:83:35:6b:1e:bd:66:67:84:9d:14:45:d4:01:0c:9d:65:
34:14:91:ca:1b:69:ab:4c:2f:ab:be:43:63:bf:66:a7:ce:df:
6a:7b:0b:c3:91:48:e8:ee:a5:6a:45:7f:b3:08:6a:5d:e4:96:
28:d4:75:66:12:d9:8f:3c:8b:ff:bc:07:dc:f5:3c:38:9c:d3:
b4:6d:73:af:14:a2:f7:c2:76:e2:f9:f4:02:80:a0:e4:a8:90:
04:aa:cc:35:87:6d:18:fa:63:04:49:ee:3a:97:a0:44:02:9a:
00:a9:6a:a5:13:86:ad:36:a4:79:d5:23:32:32:b6:f1:c2:68:
2c:78:9c:42:2d:42:6b:06:b5:c5:87:fe:d3:3b:76:98:06:87:
ed:5a:68:19:50:48:99:49:08:76:2b:84:d0:78:93:b3:90:c9:
e4:fd:be:f5:fe:31:21:4d:42:05:db:de:99:d6:8c:f9:4d:b1:
f3:d3:d8:ac:2d:34:ec:14:6b:1e:e0:7c:a5:3e:8d:b0:f1:85:
0d:0c:9d:ac:b8:6b:ad:db:3f:a4:0f:11:ec:b9:2b:eb:87:44:
a3:7c:42:22:59:2f:7c:e0:a9:5f:38:5e:ad:6d:5a:c0:5c:c4:
41:38:6e:66:19:b8:6b:7e:cb:dc:ee:0d:e0:7d:27:7e:a3:f1:
2b:1e:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:16 2025 by rpki-client