Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: oQ4d+ArqLq3UckAYv+guUn8vs2X0zRs5XRxZEpXgbQY=
Subject key identifier: 74:DE:61:39:BA:C5:94:09:B2:C1:DF:1D:8B:7A:17:F5:37:D5:73:8C
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 3933B33FD2BC694C9BA7BFCC890978519A541B26
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Fri 06 Dec 2024 12:00:01 +0000
ROA not before: Fri 06 Dec 2024 11:55:01 +0000
ROA not after: Fri 05 Dec 2025 12:00:01 +0000
asID: 58369
IP address blocks: 2403:fd80:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:33:b3:3f:d2:bc:69:4c:9b:a7:bf:cc:89:09:78:51:9a:54:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Dec 6 11:55:01 2024 GMT
Not After : Dec 5 12:00:01 2025 GMT
Subject: CN=74DE6139BAC59409B2C1DF1D8B7A17F537D5738C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:dd:02:f4:a9:db:7a:00:96:09:0c:38:98:
da:fc:9b:e4:c4:8e:7b:57:85:47:1c:ec:24:f2:95:
f6:00:99:b8:c5:46:26:54:3f:e0:e6:78:49:bf:e5:
13:9c:52:02:09:ca:ed:c0:21:39:35:3b:84:ab:b2:
ff:3e:06:be:23:56:91:fa:76:76:38:21:de:0d:bf:
61:c5:88:34:30:7b:69:82:15:5c:f6:22:41:8f:a3:
41:68:95:a0:1c:e2:f8:81:46:10:d0:71:61:22:74:
48:fc:90:36:fd:a6:43:25:e6:38:ef:d7:0f:db:11:
50:26:91:55:44:a1:bf:9e:36:ac:2a:20:42:49:7b:
82:d5:53:eb:99:c2:31:97:ba:d0:5e:3c:26:8b:a9:
28:25:ac:ab:7c:f4:a2:c8:5d:e0:ab:e4:38:a4:57:
a5:97:07:16:f5:dd:e7:a4:74:ef:d0:5f:ac:39:38:
9f:23:87:d7:d3:44:5b:3e:6d:5c:55:3e:56:86:18:
7c:a5:c3:ce:4f:10:69:59:f8:11:d9:74:b2:fd:60:
fb:2a:54:22:7d:64:d7:6d:7a:f5:c3:74:7a:a1:5e:
20:64:f6:ee:b5:b7:4f:59:37:de:f3:fe:e6:80:6f:
75:ba:09:a6:04:10:cd:b1:a3:63:21:4f:9f:aa:c0:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:61:39:BA:C5:94:09:B2:C1:DF:1D:8B:7A:17:F5:37:D5:73:8C
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:e000::/36
Signature Algorithm: sha256WithRSAEncryption
86:63:0f:9b:b4:a1:d9:76:c0:10:97:c3:41:41:b4:03:7f:cf:
80:b9:90:43:ab:2f:91:af:99:d2:0a:d8:78:93:03:a4:d4:a5:
10:e0:04:f8:89:13:93:f5:fc:2f:0f:6c:c0:b3:78:2d:c2:da:
2c:d5:37:bc:86:aa:8b:38:7a:53:05:e4:a0:7d:04:b7:95:74:
d7:fb:58:5a:53:c5:db:f4:1e:62:a9:ba:dd:dc:82:67:6c:1b:
12:b3:4e:6a:c0:70:b9:b1:62:2d:be:56:55:ce:a1:44:ae:9b:
85:ca:d1:16:35:f0:31:f3:0a:51:37:96:7e:9c:ad:f8:5d:2e:
be:ff:8e:84:18:9b:c6:ed:b3:a3:99:fe:df:aa:b8:be:e8:89:
52:cf:bd:17:64:1d:cc:71:54:ba:05:95:fb:32:f6:2b:18:48:
ba:eb:63:11:2a:dc:bb:e3:77:85:d9:9f:d0:a8:1a:0d:96:63:
31:df:e6:ae:86:30:86:76:3e:3f:1f:5a:03:36:6c:d7:03:7f:
45:58:e4:da:07:54:8b:4f:9d:a1:2f:63:d9:ea:61:c0:d6:97:
9c:8e:c5:11:ef:2b:65:fb:59:ea:d0:ff:0f:42:e9:f2:c3:d2:
bc:91:81:bd:b5:b9:e0:0b:09:c3:92:05:f8:17:18:27:96:97:
a9:aa:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:11 2025 by rpki-client