Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: BzMCetxD/u4gGM6CVpGZtAWlRvmuUFN0Y9DNPOz5xks=
Subject key identifier: CD:1E:EB:35:60:6E:59:68:DB:D4:CA:AA:9A:CB:D3:13:98:2B:C2:9A
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 02C076719023A61C1DB252D93C983F8D669015D5
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Fri 10 Jan 2025 12:00:00 +0000
ROA not before: Fri 10 Jan 2025 11:55:00 +0000
ROA not after: Fri 09 Jan 2026 12:00:00 +0000
asID: 140423
IP address blocks: 2406:20c0:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c0:76:71:90:23:a6:1c:1d:b2:52:d9:3c:98:3f:8d:66:90:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Jan 10 11:55:00 2025 GMT
Not After : Jan 9 12:00:00 2026 GMT
Subject: CN=CD1EEB35606E5968DBD4CAAA9ACBD313982BC29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:48:5c:c7:14:be:b9:f6:89:c6:60:1a:8d:
9f:dc:4f:bd:64:fe:36:a9:ca:25:1f:cf:29:85:f4:
d4:2c:31:6f:ac:a4:8a:45:c9:f2:55:7c:64:07:ee:
e0:9f:5c:07:06:4e:37:e8:b0:8a:3c:f9:c6:a7:68:
ef:ba:d2:2a:a9:ea:bc:06:74:49:42:a2:29:b8:25:
d3:85:d2:a4:78:6f:70:91:60:2c:19:af:5a:23:76:
5d:21:36:64:e7:55:61:30:b1:0d:06:8e:7e:83:99:
f3:ad:a3:ab:89:9c:37:57:3e:60:f8:bd:a6:fb:b9:
9b:e0:47:11:78:5a:07:c3:36:11:94:72:d9:6e:1f:
03:89:f9:6f:75:4c:5f:45:07:d9:08:ff:e4:06:d6:
f9:75:cf:a2:4f:68:c1:5a:ce:75:dd:83:4a:d0:22:
0f:ee:df:c2:56:7a:16:4e:c3:f7:83:64:a3:f9:aa:
32:27:5b:7b:c3:c7:05:e8:85:f9:2e:89:6e:a0:b9:
15:8e:5b:44:c3:c5:a5:32:94:56:91:c0:83:da:46:
ea:47:ac:04:ad:45:66:45:60:c8:dc:75:1e:15:d0:
a5:f1:7c:0e:6a:6b:70:80:90:d7:53:d1:9a:39:ac:
84:bd:5d:68:ef:40:e1:4f:e7:08:8f:c5:ad:5d:be:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:EB:35:60:6E:59:68:DB:D4:CA:AA:9A:CB:D3:13:98:2B:C2:9A
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:e0:66:77:4d:a3:f5:f8:71:19:4a:38:cb:08:2e:a9:96:23:
c5:f9:31:4b:0d:91:87:a9:cd:ad:e4:0f:d4:dc:73:ed:c5:57:
dd:b5:27:30:05:a0:c6:77:63:d4:67:a7:b3:5a:c4:ce:42:9e:
ae:52:99:57:df:05:07:e8:0a:f5:9b:51:6b:0c:a8:07:50:18:
7e:cc:12:23:1c:11:cc:86:e1:9b:a6:1d:88:99:c6:56:e6:fd:
3c:c2:a0:a3:40:d6:de:b6:a0:38:be:20:24:82:50:0e:f4:7f:
17:77:d2:8d:45:37:a8:a0:ee:65:94:89:91:32:07:55:2e:e1:
68:2a:3e:b2:df:25:4f:df:4b:2c:5b:55:d6:79:d1:a8:bf:08:
4a:34:8c:94:30:62:f2:ef:b3:49:ab:9d:31:7e:dd:32:81:c8:
ec:83:2b:a3:7d:e6:c2:82:fc:f5:64:1f:68:bc:69:31:c2:c6:
52:c0:3e:c6:0c:7a:8a:86:64:5a:69:40:be:a1:04:7c:4d:04:
1e:4e:f9:ea:60:e8:21:a8:3a:3b:2d:21:58:a7:a2:de:7e:f7:
7e:f5:94:58:f5:70:70:29:8e:75:36:43:cc:83:bb:d2:64:16:
b7:30:9f:21:c1:06:5d:df:dd:e5:e8:f4:6d:29:0e:e3:aa:4c:
41:41:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:08 2025 by rpki-client