Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa
File: 323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa (raw, json)
Hash identifier: YF4vliaOUO6rQ4XYsfNn+B+9HFmwA5+JRDbkq8f9K54=
Subject key identifier: 79:94:33:18:FD:3D:00:CF:FE:50:26:7E:75:19:14:06:D3:02:5F:50
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 56DE84E255C1CE72C3ABECD13A559DE22FCAA3FB
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa
Signing time: Wed 19 Feb 2025 09:00:02 +0000
ROA not before: Wed 19 Feb 2025 08:55:02 +0000
ROA not after: Wed 18 Feb 2026 09:00:02 +0000
asID: 23679
IP address blocks: 2401:2900:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:de:84:e2:55:c1:ce:72:c3:ab:ec:d1:3a:55:9d:e2:2f:ca:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Feb 19 08:55:02 2025 GMT
Not After : Feb 18 09:00:02 2026 GMT
Subject: CN=79943318FD3D00CFFE50267E75191406D3025F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:fb:6e:b8:01:17:bf:d8:57:31:e6:96:0d:
49:8d:53:2d:04:35:bb:d2:ac:00:1e:b9:0d:97:fc:
3d:4f:5d:9e:ac:82:1e:6e:60:c4:8c:04:28:33:dc:
90:e4:ce:32:37:cc:51:17:a6:d6:11:26:39:f0:64:
ae:7f:fe:54:96:20:dd:5e:4a:83:35:cd:e2:d7:12:
ac:6b:7c:cb:77:9a:18:41:e6:33:3f:93:d7:f0:4d:
8b:dd:d0:57:36:94:16:e3:dd:f1:ee:4e:51:17:6b:
23:10:11:06:2b:1e:bc:3d:75:9e:70:53:20:63:a3:
f0:53:9a:54:f5:44:38:bf:9c:94:ef:de:e5:fd:11:
35:bc:b7:4c:e1:92:34:85:75:76:b2:96:a3:b3:19:
2a:46:16:e3:93:69:1f:4a:9b:5a:90:aa:03:f6:02:
f6:e9:31:04:0f:b7:a1:09:60:cd:e8:97:b2:79:66:
55:53:d5:92:8e:6e:f7:f4:53:a1:62:2b:f4:39:ef:
18:c4:44:90:eb:e2:05:fa:56:1e:a3:05:96:fa:e7:
11:ae:11:de:bf:a5:6a:cb:58:4d:aa:ac:31:77:7b:
ae:3b:0d:db:f5:98:3b:29:7d:de:cb:75:f3:71:1a:
ef:f3:f7:66:a8:e2:82:35:49:60:df:40:71:47:0b:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:33:18:FD:3D:00:CF:FE:50:26:7E:75:19:14:06:D3:02:5F:50
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:100::/40
Signature Algorithm: sha256WithRSAEncryption
d9:4e:67:4d:7e:6b:37:be:3e:8c:55:7d:b8:91:4d:30:17:33:
08:2a:68:58:da:44:35:eb:78:7f:6d:a8:ef:35:d3:30:1b:d3:
b0:df:57:22:d1:43:c8:d7:96:ff:ba:fe:d1:ed:7d:42:7f:b8:
ae:65:03:00:d2:69:fd:47:52:69:b1:2b:d1:e8:a6:9e:e4:55:
a2:75:b8:d5:d8:ef:82:cf:2a:76:03:43:69:77:5f:24:d5:58:
fa:e0:14:76:a0:52:44:44:c7:cc:80:78:32:47:fa:22:3f:19:
64:30:b2:42:c7:f4:53:99:6d:22:1f:70:00:25:8f:07:9b:1e:
25:b8:35:1a:38:8a:ff:d0:b7:77:b0:d8:b1:1b:ba:13:1c:6d:
52:4b:61:d8:e5:26:c5:57:a0:d8:1a:8b:e2:d3:8a:16:a1:5b:
24:a6:4d:c6:c9:84:03:13:60:46:59:45:36:60:d9:a7:92:02:
1b:64:07:63:f6:30:7d:a4:32:f9:f5:1f:2e:d7:e9:b4:7a:f9:
b2:4d:aa:a9:01:5b:d9:e1:5f:5d:40:27:93:4e:7b:d8:c1:63:
34:a2:19:2d:9e:eb:4f:be:7e:68:ab:6d:e0:54:bd:1f:59:d4:
a9:df:ad:c7:ad:7e:b8:23:92:18:32:f4:a7:f4:13:9a:3c:70:
bb:92:b5:7c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUVt6E4lXBznLDq+zROlWd4i/Ko/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNTAyMTkwODU1MDJaFw0yNjAyMTgwOTAwMDJaMDMxMTAvBgNV
BAMTKDc5OTQzMzE4RkQzRDAwQ0ZGRTUwMjY3RTc1MTkxNDA2RDMwMjVGNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5PtuuAEXv9hXMeaWDUmNUy0E
NbvSrAAeuQ2X/D1PXZ6sgh5uYMSMBCgz3JDkzjI3zFEXptYRJjnwZK5//lSWIN1e
SoM1zeLXEqxrfMt3mhhB5jM/k9fwTYvd0Fc2lBbj3fHuTlEXayMQEQYrHrw9dZ5w
UyBjo/BTmlT1RDi/nJTv3uX9ETW8t0zhkjSFdXaylqOzGSpGFuOTaR9Km1qQqgP2
AvbpMQQPt6EJYM3ol7J5ZlVT1ZKObvf0U6FiK/Q57xjERJDr4gX6Vh6jBZb65xGu
Ed6/pWrLWE2qrDF3e647Ddv1mDspfd7LdfNxGu/z92ao4oI1SWDfQHFHC07nAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUeZQzGP09AM/+UCZ+dRkUBtMCX1AwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDMwM2Ez
YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQBKQAB
MA0GCSqGSIb3DQEBCwUAA4IBAQDZTmdNfms3vj6MVX24kU0wFzMIKmhY2kQ163h/
bajvNdMwG9Ow31ci0UPI15b/uv7R7X1Cf7iuZQMA0mn9R1JpsSvR6Kae5FWidbjV
2O+Czyp2A0Npd18k1Vj64BR2oFJERMfMgHgyR/oiPxlkMLJCx/RTmW0iH3AAJY8H
mx4luDUaOIr/0Ld3sNixG7oTHG1SS2HY5SbFV6DYGovi04oWoVskpk3GyYQDE2BG
WUU2YNmnkgIbZAdj9jB9pDL59R8u1+m0evmyTaqpAVvZ4V9dQCeTTnvYwWM0ohkt
nutPvn5oq23gVL0fWdSp363HrX64I5IYMvSn9BOaPHC7krV8
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:14 2025 by rpki-client