Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: r3oimHfn4evrRFBOg8fkyTyfxpIx2FYCvOkFi3/qMLo=
Subject key identifier: F3:D8:D0:47:1B:E2:54:C3:5A:C5:C6:1C:F2:41:27:63:0B:63:F2:9B
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 3F80911018906ED3A5E1DA78E834606E9BD0FC0A
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Fri 06 Dec 2024 12:00:02 +0000
ROA not before: Fri 06 Dec 2024 11:55:02 +0000
ROA not after: Fri 05 Dec 2025 12:00:02 +0000
asID: 58369
IP address blocks: 2403:fd80:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:80:91:10:18:90:6e:d3:a5:e1:da:78:e8:34:60:6e:9b:d0:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Dec 6 11:55:02 2024 GMT
Not After : Dec 5 12:00:02 2025 GMT
Subject: CN=F3D8D0471BE254C35AC5C61CF24127630B63F29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:03:d6:fa:d1:99:a6:7b:20:fd:34:6a:2b:
20:2e:bb:22:45:86:82:cc:f2:fc:34:4f:f8:f4:0f:
c3:9d:37:92:2a:d1:63:c3:69:e0:89:7a:4f:53:7e:
fb:12:f7:f5:a2:45:ce:81:e4:48:ac:22:99:d3:d6:
b9:66:88:8f:e1:65:5b:8f:66:5c:1d:36:8a:2c:f8:
1f:7b:d9:7e:68:77:9b:11:b8:b3:c4:c7:24:bb:32:
b4:0a:ce:a3:e1:62:36:af:77:86:86:fd:8b:74:04:
aa:17:57:23:3d:37:52:ca:2b:16:b2:07:70:21:62:
94:3d:dc:55:33:ff:75:b6:fb:59:e4:18:7f:65:b6:
1c:fc:27:b0:42:4f:f0:79:3a:d6:78:31:77:bb:07:
6d:c1:ca:eb:60:43:57:a9:63:8a:a5:3b:d8:8d:2a:
0e:21:81:67:eb:ca:5b:46:ae:ec:0f:ea:ce:99:05:
d7:d1:48:31:88:7b:41:f1:c2:bd:18:9b:2e:88:a8:
28:4c:93:53:a6:7c:25:f3:53:6c:eb:b6:d2:0d:cc:
39:9b:af:21:35:8d:c5:ac:7e:ca:c3:de:86:1a:b8:
24:af:ed:8e:6e:1f:5f:ca:12:de:03:7a:d9:c8:d5:
ef:3b:83:33:c0:3d:7e:0c:ef:60:d2:c1:8b:3b:84:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:D0:47:1B:E2:54:C3:5A:C5:C6:1C:F2:41:27:63:0B:63:F2:9B
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:c000::/36
Signature Algorithm: sha256WithRSAEncryption
36:84:96:00:77:a7:2b:7f:90:9a:c2:dd:ed:2c:92:49:22:b3:
ad:58:aa:76:c6:de:2e:3b:fb:d8:6d:c6:34:dd:85:5c:61:f7:
c9:85:77:d5:17:29:f2:16:e3:5d:77:8b:df:b6:a4:59:fb:e3:
e4:34:d1:38:7c:9a:0e:d4:e1:fb:00:4c:80:48:aa:ac:a7:2e:
73:6e:a4:8f:8e:28:50:64:cf:5c:b9:8d:4a:51:96:7b:36:b7:
36:8a:87:21:22:1b:90:7c:a0:9a:e8:ba:ee:df:86:68:49:cc:
a1:e2:12:0c:51:ce:a2:02:94:ce:ff:31:dd:c6:d1:39:2b:7d:
c3:3e:c6:67:3e:55:f6:15:21:25:ae:0f:80:71:ee:ba:5a:66:
d0:63:89:12:dd:18:91:6d:09:25:38:3b:1e:2c:b4:47:2e:f2:
0b:28:d9:f3:31:83:7b:99:34:0c:70:02:d2:0d:54:2a:d9:bf:
61:e8:82:fa:fe:ad:e1:f3:78:ed:8b:72:71:0d:62:da:24:76:
78:e1:71:e6:9f:78:27:12:05:d8:26:b6:d8:e6:c3:69:0e:e6:
de:8b:16:e7:13:77:2c:5a:cd:db:0c:e3:6a:27:a1:15:84:1a:
dd:ef:d9:9a:1a:77:dc:2c:71:13:7a:8c:2a:1d:22:fb:30:aa:
4a:d2:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:31 2025 by rpki-client