Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa
File: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=
Subject key identifier: 79:07:85:74:BE:C0:9D:83:D8:C7:E4:FE:7A:85:D7:DB:99:64:74:AA
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 21EE255606463B1C1DA5814B3FC76985E9EE9FBC
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa
Signing time: Tue 10 Dec 2024 05:57:59 +0000
ROA not before: Tue 10 Dec 2024 05:52:59 +0000
ROA not after: Tue 09 Dec 2025 05:57:59 +0000
asID: 153087
IP address blocks: 2404:97c0:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:25:56:06:46:3b:1c:1d:a5:81:4b:3f:c7:69:85:e9:ee:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 10 05:52:59 2024 GMT
Not After : Dec 9 05:57:59 2025 GMT
Subject: CN=79078574BEC09D83D8C7E4FE7A85D7DB996474AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:52:39:b2:9c:8b:90:d1:57:36:e3:7c:1d:
b6:c1:4a:e6:36:3c:8d:f4:16:86:f3:19:e5:cc:93:
f2:67:5e:41:dc:c5:9f:fb:0e:ea:cc:fc:dc:25:fe:
f2:83:fb:3e:16:19:39:89:54:80:64:ec:0c:ed:6a:
92:9e:f1:a0:8b:33:de:a1:e3:89:0b:46:b4:e4:a0:
cd:9a:7c:b6:8a:8f:1c:a7:7a:1e:a6:42:18:98:3e:
f7:c6:4b:6d:75:99:f6:41:79:f3:af:04:db:12:f1:
e0:ef:58:9e:11:94:8e:dc:1e:88:9a:9e:c9:01:8d:
e7:9e:a4:6f:09:04:8a:be:ec:57:81:ad:89:e9:33:
c7:6b:43:91:8f:d6:88:a5:b6:fb:fa:e2:4e:11:fb:
27:d5:fb:99:48:db:52:93:5d:9f:ad:d6:06:58:1d:
d7:09:15:9d:e6:89:6c:72:53:64:2d:10:cf:67:48:
25:55:8d:ab:62:7e:2a:e4:b0:41:9a:9f:fa:7a:18:
bd:d8:ca:26:10:18:10:1a:56:69:65:b9:4a:90:a4:
a4:01:b7:e3:cd:02:4c:4d:40:6f:ac:cf:17:a1:a8:
67:8d:b8:34:b0:cc:2f:76:7c:cf:28:15:d3:7e:a0:
fd:b9:62:03:0a:2a:c9:37:a6:90:c3:cc:8d:42:91:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:85:74:BE:C0:9D:83:D8:C7:E4:FE:7A:85:D7:DB:99:64:74:AA
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:31:c5:bd:fd:45:04:6d:ed:c4:10:ed:88:f3:34:f0:43:5a:
f1:5a:f3:50:59:d2:13:16:9c:c1:91:c8:63:71:dc:9a:ce:7a:
b3:de:27:ce:7f:b3:ff:32:4c:39:4f:d1:72:9e:bc:54:ca:93:
cf:05:83:2f:6f:da:d1:fb:4e:c7:f0:e6:02:5e:f0:f0:c3:6d:
83:e9:71:1d:ce:0b:9b:e4:4c:2a:ec:b5:b2:7d:c6:60:9c:f6:
ee:c6:51:f6:13:a9:68:4f:f4:42:f1:1e:88:16:f0:9f:f9:83:
7a:f6:9f:4b:16:67:18:af:a2:6c:90:81:32:16:35:c5:c7:e1:
32:12:7d:dd:ce:e7:fb:b8:19:62:fd:a4:dc:ef:af:3e:dd:81:
96:54:26:ff:7f:32:08:51:8f:2e:65:56:67:4e:05:00:ea:e0:
d2:b2:f1:45:0c:1a:17:43:61:d7:53:46:c5:f5:66:c9:66:7a:
89:24:55:4a:d0:87:bf:ef:6d:07:87:75:02:f3:5f:72:4b:ed:
65:5f:22:48:0f:7d:7f:8a:3d:49:02:fb:5c:46:5a:c0:96:c5:
12:56:dc:41:cf:61:20:5c:fc:e9:fa:17:43:83:45:2f:fc:6f:
89:b2:50:4a:4e:d8:f9:db:89:60:d8:58:0d:c6:1e:4e:66:c2:
1d:c9:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:54:14 2025 by rpki-client