Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa
File: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=
Subject key identifier: 34:7B:A6:97:53:F7:C0:01:E3:B8:3C:AE:B5:A2:75:05:77:6B:B1:FB
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 7E872356816DA1465409AE5317E5654E68D6267F
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa
Signing time: Tue 10 Dec 2024 05:54:58 +0000
ROA not before: Tue 10 Dec 2024 05:49:58 +0000
ROA not after: Tue 09 Dec 2025 05:54:58 +0000
asID: 153087
IP address blocks: 2404:97c0:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:87:23:56:81:6d:a1:46:54:09:ae:53:17:e5:65:4e:68:d6:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 10 05:49:58 2024 GMT
Not After : Dec 9 05:54:58 2025 GMT
Subject: CN=347BA69753F7C001E3B83CAEB5A27505776BB1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:0b:09:22:b1:21:c9:e5:9b:9a:d9:30:28:
85:20:9c:ae:d5:4d:e0:f5:5c:e6:b7:1f:fe:5b:fc:
e8:63:2c:97:71:82:16:44:4d:12:48:c6:0e:09:b2:
a0:04:89:05:89:c0:48:2a:2f:80:d5:f2:4c:d4:34:
ff:93:ac:63:dc:6c:bf:ac:6f:86:d8:0b:df:f0:23:
26:dc:b9:37:91:8a:e3:45:70:0e:44:89:3a:a5:4d:
29:66:33:af:2e:e3:f9:62:d0:eb:26:13:75:ee:36:
95:df:85:75:6c:37:f3:58:a9:58:fc:a8:37:56:f1:
ef:be:86:2f:8a:8f:da:c0:67:8a:dc:5d:32:ee:e2:
59:1e:a7:fc:ae:41:50:80:6b:91:f9:25:83:28:6f:
11:e1:a1:ad:9a:27:04:c5:e5:4a:ba:f6:c7:cc:98:
9f:4f:1a:90:f0:b9:60:11:67:d1:99:d6:0b:d7:ce:
82:48:2e:2f:18:6c:9d:a9:41:27:71:15:fc:37:6e:
1d:62:b9:90:04:48:d3:ae:cd:bd:82:0e:ed:7e:87:
b8:ac:62:9f:1b:a8:c4:e9:8d:fe:38:a7:08:02:36:
59:a7:21:d3:b1:2d:5f:c7:f5:04:d1:83:73:72:f7:
8f:01:38:b4:ab:8b:c2:b7:a2:7f:0d:d4:80:b1:5f:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:A6:97:53:F7:C0:01:E3:B8:3C:AE:B5:A2:75:05:77:6B:B1:FB
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
0b:27:f3:22:d2:ff:50:04:c5:68:9f:18:0a:32:56:bc:40:57:
3a:2b:9e:6b:7e:fe:5c:ed:86:b2:65:83:09:17:b0:5b:83:ca:
4c:f1:1d:05:10:8e:51:19:48:02:02:20:07:a0:f3:b4:56:14:
97:40:d0:98:1e:6d:91:a6:25:99:5a:d3:79:38:a5:61:60:46:
77:ed:3a:b2:7e:87:52:5b:ea:13:89:e9:cf:94:3e:72:16:6b:
a3:30:36:ae:aa:3f:68:50:4b:55:d6:c2:6f:48:11:46:9b:f0:
4e:e0:f0:88:69:70:37:08:79:d3:f9:fe:b6:5b:4e:03:e2:91:
49:b2:10:20:4f:1b:13:01:df:e9:71:34:bf:24:d2:4e:62:72:
5d:7c:10:ce:48:6d:52:0f:d8:48:8d:4a:55:ee:b0:26:03:fb:
46:37:ff:c9:24:4d:41:fa:e2:16:71:47:8a:63:8f:c8:1f:e2:
58:a0:3a:75:18:0e:12:2b:3d:74:4e:e3:ae:01:b2:e1:4c:5a:
60:08:71:63:7b:de:28:64:4f:6c:08:4d:78:e6:44:ce:1d:3d:
d6:c4:af:4f:8e:4c:b6:dc:dc:a7:45:6f:df:44:00:cd:5f:5b:
30:66:c5:d1:5e:c9:97:b6:a3:e5:13:39:a3:7f:91:c4:47:bb:
ae:a6:4f:67
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUfocjVoFtoUZUCa5TF+VlTmjWJn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNDEyMTAwNTQ5NThaFw0yNTEyMDkwNTU0NThaMDMxMTAvBgNV
BAMTKDM0N0JBNjk3NTNGN0MwMDFFM0I4M0NBRUI1QTI3NTA1Nzc2QkIxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YwsJIrEhyeWbmtkwKIUgnK7V
TeD1XOa3H/5b/OhjLJdxghZETRJIxg4JsqAEiQWJwEgqL4DV8kzUNP+TrGPcbL+s
b4bYC9/wIybcuTeRiuNFcA5EiTqlTSlmM68u4/li0OsmE3XuNpXfhXVsN/NYqVj8
qDdW8e++hi+Kj9rAZ4rcXTLu4lkep/yuQVCAa5H5JYMobxHhoa2aJwTF5Uq69sfM
mJ9PGpDwuWARZ9GZ1gvXzoJILi8YbJ2pQSdxFfw3bh1iuZAESNOuzb2CDu1+h7is
Yp8bqMTpjf44pwgCNlmnIdOxLV/H9QTRg3Ny948BOLSri8K3on8N1ICxXyLFAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUNHuml1P3wAHjuDyutaJ1BXdrsfswHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BJfAYDANBgkqhkiG9w0BAQsFAAOCAQEACyfzItL/UATFaJ8YCjJWvEBXOiuea37+
XO2GsmWDCRewW4PKTPEdBRCOURlIAgIgB6DztFYUl0DQmB5tkaYlmVrTeTilYWBG
d+06sn6HUlvqE4npz5Q+chZrozA2rqo/aFBLVdbCb0gRRpvwTuDwiGlwNwh50/n+
tltOA+KRSbIQIE8bEwHf6XE0vyTSTmJyXXwQzkhtUg/YSI1KVe6wJgP7Rjf/ySRN
QfriFnFHimOPyB/iWKA6dRgOEis9dE7jrgGy4UxaYAhxY3veKGRPbAhNeOZEzh09
1sSvT45Mttzcp0Vv30QAzV9bMGbF0V7Jl7aj5RM5o3+RxEe7rqZPZw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:42 2025 by rpki-client