Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: 3ZkqtRT8rSxOBXIrCwyBPiDQVYyy1EhxymGZp35bWg0=
Subject key identifier: 33:34:E1:D9:29:1C:B4:0A:E0:E7:7C:5F:10:4C:9A:64:69:37:DC:7E
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 7FBDA6722A04895F1EA809C7C033F3B2FAC7B54D
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Fri 10 Jan 2025 12:00:00 +0000
ROA not before: Fri 10 Jan 2025 11:55:00 +0000
ROA not after: Fri 09 Jan 2026 12:00:00 +0000
asID: 140423
IP address blocks: 2406:20c0:b000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bd:a6:72:2a:04:89:5f:1e:a8:09:c7:c0:33:f3:b2:fa:c7:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Jan 10 11:55:00 2025 GMT
Not After : Jan 9 12:00:00 2026 GMT
Subject: CN=3334E1D9291CB40AE0E77C5F104C9A646937DC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:14:56:32:50:b7:2f:57:08:92:cb:94:40:
52:78:46:68:0a:f0:09:f1:98:28:9c:d2:c1:b5:32:
0a:f1:fd:0a:48:aa:9e:8c:a7:21:e5:9e:40:81:6c:
9a:f5:3a:ca:44:2e:6c:76:e4:0a:36:4e:83:67:cf:
ae:c6:df:04:57:c3:39:03:d0:f9:9f:15:bf:8d:d3:
e2:c3:ce:ad:bd:bc:be:5e:48:07:a4:17:31:7a:c0:
de:61:aa:86:ca:f5:2b:c2:6a:4d:27:ee:21:46:e5:
24:82:06:73:c9:14:da:5e:e5:ad:b4:a7:11:fd:42:
51:8e:a6:46:f7:e2:cc:80:b0:9a:f4:39:72:d2:5a:
a0:58:47:4c:d6:98:6d:f9:f9:a4:10:26:a9:a0:63:
d3:33:3d:6d:60:c3:95:96:2a:85:5b:eb:22:ea:60:
c8:9b:95:3b:c5:a2:2b:ff:47:e5:b9:3e:47:78:6f:
ee:e6:e4:6b:6c:01:a1:1a:b5:20:ed:b3:d4:2d:4c:
06:ed:4a:62:ec:c2:9c:74:75:4d:2d:41:d3:66:7d:
1f:fb:47:12:6a:35:45:9d:35:23:55:23:57:c8:f3:
03:65:aa:31:0d:39:f3:4d:8d:ab:80:41:59:4f:21:
da:e1:a8:2d:9b:44:e2:f0:94:44:be:28:85:18:0b:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:E1:D9:29:1C:B4:0A:E0:E7:7C:5F:10:4C:9A:64:69:37:DC:7E
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:b000::/36
Signature Algorithm: sha256WithRSAEncryption
ae:3c:c4:a5:14:5d:4e:5b:db:61:b0:be:c3:be:71:69:a1:96:
a5:44:0b:ac:04:9c:b5:76:e4:51:9e:cb:40:de:79:4c:11:51:
b3:4c:b1:49:9c:1a:5e:c9:e0:64:a8:4b:ae:14:23:fb:7b:b3:
5a:14:54:75:c8:d8:93:fe:a3:f3:bb:42:b6:9f:dc:62:61:6f:
42:2a:ee:df:d3:02:fb:0e:7b:06:f3:c4:93:12:6d:47:7e:ab:
37:c4:03:c0:cb:d2:bf:85:2b:51:83:75:f0:f3:fa:48:03:96:
a3:32:3a:4e:e6:3c:23:b1:1c:74:aa:ff:68:14:55:1f:b1:d6:
cd:51:4c:8e:9d:c1:79:47:31:8f:36:f7:22:43:36:eb:72:8c:
2f:9e:e6:6d:55:59:d7:6d:fc:3c:89:c0:37:ba:47:54:d0:4e:
52:23:df:49:c2:ee:68:fd:d5:f5:f8:30:92:95:a9:ff:b2:3a:
f6:47:95:66:58:89:a2:68:a7:fc:a1:93:0a:5d:a1:f6:ce:5f:
8e:14:16:dd:d9:24:ff:fb:02:94:ee:e2:2d:19:f8:f8:1d:09:
73:3f:75:dd:af:93:a1:12:f1:ef:cb:a6:98:a0:79:3b:4a:73:
6c:3e:b7:8f:48:57:84:61:b3:8e:7b:48:0f:6d:b0:41:53:88:
fd:e8:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:20 2025 by rpki-client