Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa
File: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (raw, json)
Hash identifier: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=
Subject key identifier: 26:AC:35:1D:96:4D:22:58:6E:64:82:AE:9C:B5:4E:8B:4C:36:71:92
Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
Certificate serial: 4B8B38857E05B0E52AE6A8FC1119B2129E440698
Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa
Signing time: Thu 05 Dec 2024 04:03:04 +0000
ROA not before: Thu 05 Dec 2024 03:58:04 +0000
ROA not after: Thu 04 Dec 2025 04:03:04 +0000
asID: 141898
IP address blocks: 2400:4be0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8b:38:85:7e:05:b0:e5:2a:e6:a8:fc:11:19:b2:12:9e:44:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
Validity
Not Before: Dec 5 03:58:04 2024 GMT
Not After : Dec 4 04:03:04 2025 GMT
Subject: CN=26AC351D964D22586E6482AE9CB54E8B4C367192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:55:95:ba:9b:e9:3e:70:c5:e3:af:8e:f7:
52:b1:4f:14:a9:67:82:8f:54:9e:84:68:11:bf:08:
29:74:ce:57:73:0a:a9:1f:52:2b:21:7f:69:4e:08:
ff:e3:45:0c:d3:ef:23:8d:e6:8c:14:1a:3b:db:0c:
72:c1:bc:12:ad:ca:81:e6:b9:db:06:54:fb:4d:f1:
4f:fb:10:21:58:2d:76:b2:f9:21:6b:00:b0:92:35:
ee:58:77:f6:79:3e:18:ae:98:52:9b:a2:cc:19:68:
65:df:4d:e2:70:e0:53:0a:c8:bd:c2:33:25:aa:a4:
74:79:39:fc:0c:56:58:46:04:f2:e7:b3:ac:f2:fa:
7b:db:cd:db:87:40:32:46:82:d2:c5:8a:2f:58:64:
20:32:fa:c2:cc:3c:e5:43:72:f2:e7:01:9d:52:a4:
b3:bf:69:7a:bd:3d:12:03:4c:bc:a8:a0:3c:3d:ec:
1a:fa:da:a8:bf:34:e6:13:90:d0:f1:fd:6a:4e:2f:
62:5b:13:3a:3a:7c:90:7f:b7:d9:e1:d6:9f:b5:e2:
7b:4b:15:83:a8:33:74:e6:0b:69:2c:97:62:d8:28:
b6:be:07:b3:81:09:f6:f0:b6:0a:af:40:23:9d:0b:
46:56:aa:37:9b:33:e0:3e:28:a4:67:c8:30:27:b5:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:35:1D:96:4D:22:58:6E:64:82:AE:9C:B5:4E:8B:4C:36:71:92
X509v3 Authority Key Identifier:
keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:4be0::/32
Signature Algorithm: sha256WithRSAEncryption
af:2c:f9:ec:4e:4e:1a:64:25:ca:7a:0c:46:53:2e:75:42:65:
49:4a:1d:f1:20:50:df:d1:87:f7:8d:fb:c7:d5:32:0e:6b:02:
9e:53:ce:c1:13:ad:ec:04:7f:a7:6b:0f:cd:b0:4a:b7:a5:bd:
8e:52:d7:92:c0:b9:ef:46:c3:ce:65:6e:b9:6c:1b:26:f5:31:
59:40:58:f6:6e:ea:d8:b1:f8:87:0e:4e:b3:fb:3b:54:30:4a:
18:be:79:46:9b:3a:b8:01:14:21:06:71:50:0e:8b:21:ad:50:
76:a5:e9:be:ac:90:02:fb:5a:9e:47:06:ec:cd:a5:2a:0c:c6:
62:fd:8b:91:ef:de:a7:57:cf:5d:00:42:2a:b1:7e:b7:b2:71:
0a:53:44:dd:69:5e:17:ac:d2:d4:52:0f:c6:ab:d5:c3:d4:57:
d1:c9:c9:3f:71:da:38:78:9d:1a:e8:6c:c6:26:bd:46:ec:9c:
61:b8:b3:ac:85:92:1f:69:b7:a6:2c:cb:b9:13:a8:57:4e:8e:
17:d5:a1:d9:79:05:4f:d6:5e:e2:f7:f9:af:e0:82:5a:a1:c4:
e2:0e:35:4a:c2:ae:bf:53:50:72:b7:46:08:4c:3a:4e:da:4f:
d8:af:d8:3a:d0:e9:85:30:aa:88:75:98:50:f1:1b:49:2d:c9:
3c:c2:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:32 2025 by rpki-client