Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa
File: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (raw, json)
Hash identifier: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=
Subject key identifier: AD:8F:41:7D:78:A4:31:66:F7:67:34:78:14:A5:95:CA:9B:FD:A8:0C
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 65629F256D3BA7834B06A5519FA5384813A4FC21
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa
Signing time: Tue 10 Dec 2024 06:05:18 +0000
ROA not before: Tue 10 Dec 2024 06:00:18 +0000
ROA not after: Tue 09 Dec 2025 06:05:18 +0000
asID: 153087
IP address blocks: 2404:97c0:2230::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:62:9f:25:6d:3b:a7:83:4b:06:a5:51:9f:a5:38:48:13:a4:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 10 06:00:18 2024 GMT
Not After : Dec 9 06:05:18 2025 GMT
Subject: CN=AD8F417D78A43166F767347814A595CA9BFDA80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:98:4e:39:28:11:4b:98:f0:f1:b6:3e:03:
d4:5b:94:57:1b:b4:6f:6e:fe:73:3e:90:cb:b6:40:
c2:26:2d:fe:70:98:1f:34:af:9a:84:91:0f:37:85:
6e:ee:b2:2d:bf:ed:57:69:f5:fb:93:74:f6:34:30:
34:2d:30:9a:37:51:71:f0:84:7a:48:a9:f0:f6:f6:
67:0c:11:58:6c:73:6a:50:8b:d0:cd:6c:e5:a9:35:
a0:ad:bd:fc:59:f4:a5:ea:9d:91:f3:83:9d:83:0a:
19:a4:39:52:75:bf:27:bc:43:80:1a:1a:ac:81:7d:
55:d3:7d:da:f9:c8:62:ec:97:c9:ac:70:d3:44:c7:
93:6e:9e:e5:b8:7b:15:a0:16:d8:be:80:42:cf:dc:
53:59:73:89:8f:28:d6:75:65:85:ca:aa:ed:35:50:
11:d1:e7:6a:81:60:b1:6b:52:b8:14:05:8a:34:92:
c2:c5:87:81:06:c1:10:dc:12:37:c5:d9:e3:51:5e:
3c:cc:c6:6d:f6:49:1d:1c:c5:bc:f6:d2:ef:27:2d:
45:b5:f5:21:58:f6:96:8c:0f:5b:29:bf:cf:0b:4a:
bb:f5:80:33:69:1e:9c:8b:3c:40:e6:64:8d:20:05:
b6:0c:f7:0b:04:ce:f4:15:a9:55:ea:27:a9:d9:ca:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:41:7D:78:A4:31:66:F7:67:34:78:14:A5:95:CA:9B:FD:A8:0C
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2230::/44
Signature Algorithm: sha256WithRSAEncryption
93:42:09:d2:7a:96:ca:0a:f8:93:fa:2f:35:0a:b4:79:05:2e:
34:69:34:2f:da:40:eb:96:c9:bf:a9:55:85:dc:3a:47:66:f0:
8b:9b:dd:dc:f4:55:52:2d:ba:bd:5c:22:43:ac:bd:34:e5:e1:
39:5a:4a:75:fe:3a:7d:7c:47:cd:58:29:95:3b:f3:49:e0:71:
2a:fa:1c:34:55:d2:4a:5c:5f:47:be:fe:69:43:bb:9b:ff:73:
4f:c7:99:8c:05:42:d1:0f:50:cb:e6:8b:87:8b:41:f0:e7:39:
59:26:94:45:c9:4d:83:14:e0:74:96:6a:34:de:cd:d7:1e:1b:
d3:ba:42:8c:1a:a8:8e:dc:e7:6d:c4:ba:3a:80:de:f0:cf:90:
51:55:2c:44:26:ed:88:8d:5f:ce:f5:86:c9:32:0e:80:32:ff:
9f:7a:f6:7b:84:50:db:03:c7:d1:93:e1:26:d9:d9:52:a3:27:
63:54:02:f0:75:52:fb:f1:b1:8f:e7:5d:4d:24:65:03:6f:7d:
7e:d9:ba:4b:eb:37:6a:f8:f9:f7:f0:28:49:fe:83:4a:a5:2d:
df:b8:5d:e1:fc:4e:10:5f:9b:88:fa:e6:c0:b2:a5:43:7a:43:
b4:a5:5f:45:33:52:af:74:13:f9:55:f8:e9:ef:51:b0:88:d5:
5e:f2:17:df
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZWKfJW07p4NLBqVRn6U4SBOk/CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNDEyMTAwNjAwMThaFw0yNTEyMDkwNjA1MThaMDMxMTAvBgNV
BAMTKEFEOEY0MTdENzhBNDMxNjZGNzY3MzQ3ODE0QTU5NUNBOUJGREE4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7JhOOSgRS5jw8bY+A9RblFcb
tG9u/nM+kMu2QMImLf5wmB80r5qEkQ83hW7usi2/7Vdp9fuTdPY0MDQtMJo3UXHw
hHpIqfD29mcMEVhsc2pQi9DNbOWpNaCtvfxZ9KXqnZHzg52DChmkOVJ1vye8Q4Aa
GqyBfVXTfdr5yGLsl8mscNNEx5NunuW4exWgFti+gELP3FNZc4mPKNZ1ZYXKqu01
UBHR52qBYLFrUrgUBYo0ksLFh4EGwRDcEjfF2eNRXjzMxm32SR0cxbz20u8nLUW1
9SFY9paMD1spv88LSrv1gDNpHpyLPEDmZI0gBbYM9wsEzvQVqVXqJ6nZypE5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUrY9BfXikMWb3ZzR4FKWVypv9qAwwHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
BJfAIjAwDQYJKoZIhvcNAQELBQADggEBAJNCCdJ6lsoK+JP6LzUKtHkFLjRpNC/a
QOuWyb+pVYXcOkdm8Iub3dz0VVItur1cIkOsvTTl4TlaSnX+On18R81YKZU780ng
cSr6HDRV0kpcX0e+/mlDu5v/c0/HmYwFQtEPUMvmi4eLQfDnOVkmlEXJTYMU4HSW
ajTezdceG9O6QowaqI7c523EujqA3vDPkFFVLEQm7YiNX871hskyDoAy/5969nuE
UNsDx9GT4SbZ2VKjJ2NUAvB1UvvxsY/nXU0kZQNvfX7ZukvrN2r4+ffwKEn+g0ql
Ld+4XeH8ThBfm4j65sCypUN6Q7SlX0UzUq90E/lV+OnvUbCI1V7yF98=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:54:09 2025 by rpki-client