Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: MB94tgZ44KLcfrnvGua8Dld3TbbPDye//TDEayhM5JQ=
Subject key identifier: 18:C1:E1:94:C8:87:FA:0A:DE:33:8F:A1:41:02:4E:45:3F:B7:C0:BC
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 45AD7C72D39200201515BA6975661A3425555EEC
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Fri 10 Jan 2025 12:00:01 +0000
ROA not before: Fri 10 Jan 2025 11:55:01 +0000
ROA not after: Fri 09 Jan 2026 12:00:01 +0000
asID: 140423
IP address blocks: 2406:20c0:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ad:7c:72:d3:92:00:20:15:15:ba:69:75:66:1a:34:25:55:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Jan 10 11:55:01 2025 GMT
Not After : Jan 9 12:00:01 2026 GMT
Subject: CN=18C1E194C887FA0ADE338FA141024E453FB7C0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:b1:96:61:f4:c1:32:32:a9:73:f9:35:c9:
3a:6d:63:d3:b4:22:da:05:06:4f:79:ea:0f:ef:2a:
be:20:80:77:0a:cd:00:7d:30:bc:13:61:c0:ad:ec:
db:98:ae:d3:ea:0d:f6:23:a1:24:84:f2:c0:4e:ce:
53:f9:4d:16:89:62:47:fb:35:5a:ce:5e:ea:a4:e6:
a8:1f:b5:b3:5d:f9:58:5c:f3:45:9d:ce:7a:68:ba:
59:71:e0:f2:99:0e:36:70:00:29:7f:de:34:3c:2e:
f0:21:bb:87:3a:bd:54:be:f4:02:d4:80:79:d6:06:
a7:6a:6d:cd:4f:d4:8c:0d:c0:aa:6b:cd:95:e7:50:
38:a9:21:5a:d2:91:6b:d0:a4:7a:0b:45:72:85:88:
e5:64:01:28:6f:f1:4d:74:1a:1c:d9:4c:02:e8:f0:
68:ae:90:73:43:23:f6:9c:3a:c2:a6:96:3b:2a:96:
00:82:b3:1c:b7:e8:14:58:99:20:61:68:63:a8:5b:
c6:62:94:6b:12:78:98:99:10:c7:71:30:a3:98:8b:
a3:82:ef:39:92:f4:eb:54:f6:57:60:e0:48:da:ae:
68:33:21:84:86:ac:67:69:6f:0e:ac:84:61:61:e4:
2f:92:22:ff:a0:ef:02:5b:79:49:81:ab:1e:05:32:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:E1:94:C8:87:FA:0A:DE:33:8F:A1:41:02:4E:45:3F:B7:C0:BC
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
a0:8e:53:51:09:17:35:d4:55:db:88:1d:f8:b3:a3:e7:51:85:
c1:7d:7d:af:39:f4:5b:92:8a:f4:a7:93:6c:e4:26:9d:a2:f9:
88:64:60:41:25:a0:f7:85:e9:ea:c2:93:d2:97:bf:72:a8:1e:
cb:12:c8:0f:99:7d:1a:f9:0e:e0:93:9d:ed:3e:65:41:fe:ff:
6b:e5:94:12:08:0b:62:90:44:f8:de:08:6e:0c:97:99:28:5c:
b2:72:2d:aa:d8:e9:70:dd:82:f3:2d:21:0c:50:28:2a:5d:fd:
d7:93:42:3e:dd:70:a9:be:63:3e:2a:01:3e:fe:8d:e2:73:ad:
36:4f:de:26:d3:8d:1b:83:1c:4b:b0:2b:be:9c:04:89:f9:62:
b6:7f:93:95:42:f0:de:a3:86:ef:b9:e7:3b:80:b8:4c:49:3b:
63:1d:e3:e0:e4:d3:96:2e:dd:8e:0e:99:94:b3:5a:a2:77:f0:
79:6e:3a:34:9c:fc:22:92:fe:52:6a:54:08:fd:4e:4f:2e:10:
27:3c:62:3f:d6:4b:82:1c:99:25:99:9c:7d:b4:5b:bc:0b:0b:
1c:41:eb:57:93:f6:1f:fa:67:9c:24:4d:9d:a4:3e:b3:ac:d8:
8c:7b:86:3b:69:0d:6e:58:47:ee:48:7d:55:c6:bc:17:9a:ce:
21:fb:3b:63
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIURa18ctOSACAVFbppdWYaNCVVXuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yNTAxMTAxMTU1MDFaFw0yNjAxMDkxMjAwMDFaMDMxMTAvBgNV
BAMTKDE4QzFFMTk0Qzg4N0ZBMEFERTMzOEZBMTQxMDI0RTQ1M0ZCN0MwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrLGWYfTBMjKpc/k1yTptY9O0
ItoFBk956g/vKr4ggHcKzQB9MLwTYcCt7NuYrtPqDfYjoSSE8sBOzlP5TRaJYkf7
NVrOXuqk5qgftbNd+Vhc80Wdznpoullx4PKZDjZwACl/3jQ8LvAhu4c6vVS+9ALU
gHnWBqdqbc1P1IwNwKprzZXnUDipIVrSkWvQpHoLRXKFiOVkAShv8U10GhzZTALo
8GiukHNDI/acOsKmljsqlgCCsxy36BRYmSBhaGOoW8ZilGsSeJiZEMdxMKOYi6OC
7zmS9OtU9ldg4EjarmgzIYSGrGdpbw6shGFh5C+SIv+g7wJbeUmBqx4FMqJbAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUGMHhlMiH+greM4+hQQJORT+3wLwwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzIzMDMwMzAz
YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BiDAIDANBgkqhkiG9w0BAQsFAAOCAQEAoI5TUQkXNdRV24gd+LOj51GFwX19rzn0
W5KK9KeTbOQmnaL5iGRgQSWg94Xp6sKT0pe/cqgeyxLID5l9GvkO4JOd7T5lQf7/
a+WUEggLYpBE+N4IbgyXmShcsnItqtjpcN2C8y0hDFAoKl3915NCPt1wqb5jPioB
Pv6N4nOtNk/eJtONG4McS7ArvpwEiflitn+TlULw3qOG77nnO4C4TEk7Yx3j4OTT
li7djg6ZlLNaonfweW46NJz8IpL+UmpUCP1OTy4QJzxiP9ZLghyZJZmcfbRbvAsL
HEHrV5P2H/pnnCRNnaQ+s6zYjHuGO2kNblhH7kh9Vca8F5rOIfs7Yw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:36:53 2025 by rpki-client