Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa
File: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=
Subject key identifier: D1:74:59:BE:77:7A:20:B6:97:62:82:0C:62:F2:F3:10:D3:D3:C2:42
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 0761D108F39A5F1129EF5E5788C8B7C51BA8BBA0
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa
Signing time: Tue 10 Dec 2024 05:53:19 +0000
ROA not before: Tue 10 Dec 2024 05:48:19 +0000
ROA not after: Tue 09 Dec 2025 05:53:19 +0000
asID: 153087
IP address blocks: 2404:97c0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:61:d1:08:f3:9a:5f:11:29:ef:5e:57:88:c8:b7:c5:1b:a8:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 10 05:48:19 2024 GMT
Not After : Dec 9 05:53:19 2025 GMT
Subject: CN=D17459BE777A20B69762820C62F2F310D3D3C242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:4e:01:85:45:cd:e2:cd:18:e8:19:82:bd:
a0:bf:a8:82:6a:7f:5c:a3:d8:af:cb:ab:89:a8:8e:
97:db:08:22:b1:51:62:69:9c:21:eb:36:c1:fd:f8:
e3:65:22:4e:8b:ba:09:12:59:23:e1:46:6a:65:3c:
48:40:bb:b6:af:91:12:b8:4b:80:ad:9e:1b:fe:02:
6c:b0:4b:0d:4d:c8:f4:33:a9:be:0f:50:2d:7c:53:
2b:29:05:80:59:3f:90:7f:a3:81:d5:cf:54:9a:a1:
97:5f:2b:3e:c3:9c:90:f9:d2:a4:27:1d:1d:87:01:
2d:f4:bd:5e:76:b2:ab:31:5f:0b:9c:d5:70:f6:17:
3b:ef:f1:ed:09:05:02:36:52:35:74:10:72:93:e7:
cd:2d:48:79:0b:9d:98:53:ee:d8:6d:67:0f:e2:be:
90:02:6d:eb:fd:94:55:51:34:c0:93:9b:bd:db:db:
63:d5:ce:c2:ea:1b:92:0a:68:c7:02:c5:32:c2:95:
6e:3f:8e:c9:2e:70:e3:3b:f0:a0:bd:d9:1f:73:e2:
8f:91:98:5e:e4:20:8f:ea:45:3a:7f:a0:85:9f:0d:
c5:f6:ff:93:0d:10:3d:1e:77:98:06:a2:8d:13:78:
f1:a0:eb:20:e8:2a:a9:84:6f:eb:7e:77:9b:e6:81:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:59:BE:77:7A:20:B6:97:62:82:0C:62:F2:F3:10:D3:D3:C2:42
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
66:04:14:09:8c:08:4a:a3:29:3a:ec:c0:02:a5:b2:47:96:24:
0a:cb:70:25:2e:1b:9c:dc:6a:50:1d:f8:11:43:ba:c1:25:56:
1c:93:ef:53:0b:89:2b:45:dc:35:eb:27:6c:5a:b0:fd:fc:45:
ec:53:59:ba:16:b1:59:8d:85:08:79:c3:cf:85:13:ed:3b:9f:
0b:ec:1c:f7:a2:46:a9:80:97:66:34:15:cc:c6:fa:5d:7d:2f:
09:e2:1e:17:11:01:8f:fd:de:11:94:24:db:8e:44:c2:78:48:
5f:36:34:1f:2c:2a:3d:18:32:28:62:98:72:d7:e4:ab:9a:84:
af:0a:2f:be:5f:3f:12:a4:ef:d3:3b:34:b1:69:1e:16:0a:c8:
e3:30:cd:2d:80:04:7d:48:06:94:61:64:fd:18:39:c3:18:0e:
4c:3f:09:cc:4d:87:2e:d6:01:b8:6c:1b:ed:c1:bc:fe:6a:5b:
f5:c3:d7:e8:7e:c9:af:8d:89:6e:e8:97:e8:95:ef:ac:62:8a:
28:5c:d6:51:58:46:84:46:66:6a:b8:90:2a:a7:f0:25:0f:26:
97:7c:e8:67:83:93:6e:98:46:e9:28:1f:b1:40:a9:e6:02:7b:
0d:a1:6d:28:42:5e:3b:08:d8:61:d1:35:cb:9c:a1:ea:d7:e3:
ad:29:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:23:36 2025 by rpki-client