Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: HdTX530ngqjf8cWTUcL6hG9DUH8dGSMuS3PyqZl8vd4=
Subject key identifier: A8:DE:00:76:BE:D9:53:F0:10:38:EB:80:A5:1F:5A:89:8E:DC:C9:23
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 33051F1B9314794BA2B2E61188ED5F1591082A56
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Fri 10 Jan 2025 12:00:02 +0000
ROA not before: Fri 10 Jan 2025 11:55:02 +0000
ROA not after: Fri 09 Jan 2026 12:00:02 +0000
asID: 140423
IP address blocks: 2406:20c0:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:1f:1b:93:14:79:4b:a2:b2:e6:11:88:ed:5f:15:91:08:2a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Jan 10 11:55:02 2025 GMT
Not After : Jan 9 12:00:02 2026 GMT
Subject: CN=A8DE0076BED953F01038EB80A51F5A898EDCC923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:a1:d8:37:ba:a0:56:6f:93:0c:f0:1e:1a:
09:12:69:c1:40:29:da:f1:c5:3e:ab:76:02:e3:91:
1c:c2:1d:00:6a:70:18:45:95:46:0a:5c:51:60:56:
06:ac:18:c1:6f:3e:b8:f4:03:4d:63:71:2b:ad:37:
90:7b:db:51:4f:75:3f:bd:8f:48:83:be:b3:43:4a:
70:c7:d9:55:2e:0f:c9:b1:e9:3b:98:54:4b:7c:0e:
6c:c9:04:2c:22:0c:4c:91:fd:63:99:1b:1c:47:24:
27:f2:46:14:0c:4f:01:ec:64:e5:d6:da:ae:e5:8c:
f9:9a:84:e8:c6:19:fa:b2:5f:7c:d1:2b:25:4e:62:
b7:80:33:aa:32:9d:9e:92:bc:da:41:43:c3:ac:62:
cc:72:d3:3f:d3:d8:eb:d1:39:c4:09:75:7c:2a:37:
88:4f:64:67:2c:af:83:36:11:4a:f5:6e:23:ba:74:
76:b4:d3:60:78:6f:7a:b4:41:e1:81:57:b7:5a:23:
a3:5d:dc:8b:d3:c4:0c:12:de:cf:ea:22:b5:df:fd:
b8:75:f3:ab:2e:bb:f1:4f:93:7b:66:3e:9e:34:56:
cc:4a:d9:8a:1e:cf:ff:ec:d1:85:a0:07:09:e2:73:
63:e5:d8:6a:93:d1:a4:47:df:91:69:54:75:35:50:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:00:76:BE:D9:53:F0:10:38:EB:80:A5:1F:5A:89:8E:DC:C9:23
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
70:d0:17:b3:5f:14:bb:bc:67:4f:5e:56:3d:b1:c2:d1:e6:37:
79:66:be:ed:fb:60:29:e0:f5:ab:72:d1:fb:99:8a:7f:27:6d:
9e:ab:45:1c:b7:7c:80:a2:7f:0e:08:c6:d2:e4:7f:e6:13:25:
c2:7e:1f:a5:6c:e2:e4:a5:ce:af:21:f1:0b:f1:cd:f9:86:a3:
f2:08:a8:19:e8:81:90:3f:82:04:9a:2e:bb:1d:20:ce:f5:a1:
ba:fa:fb:bc:69:5f:e6:0b:0c:bf:a3:2b:78:5d:8e:90:5f:18:
27:1a:28:f8:d7:25:ca:c8:61:95:7d:f0:81:f7:fe:29:3b:f1:
95:59:15:a9:37:cc:cb:2d:cf:83:40:c3:cc:6d:a9:f8:0b:1a:
0e:0c:8b:3e:50:fa:ca:2d:08:3d:82:73:d8:a4:f1:83:50:91:
f3:c0:47:bc:8c:24:00:43:32:c6:0c:85:01:0a:f1:3f:f2:54:
41:8d:3c:66:56:38:84:13:ec:4e:47:2d:54:63:9c:fe:88:d3:
3d:65:d7:b9:27:5e:60:91:3e:be:5c:e3:ef:3a:da:82:71:ad:
ea:c6:d2:23:23:f9:a7:17:55:2a:9d:b2:0b:53:ad:d5:b5:88:
8c:54:bb:d4:bb:8c:a2:a4:3c:ee:f3:28:9b:0a:e4:9f:d5:5b:
9b:63:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:31 2025 by rpki-client