Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa
File: 323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa (raw, json)
Hash identifier: W9SJUJEemEwYJ1tuWl1ea88eQ7I1iiK1TG51Nefub9s=
Subject key identifier: 41:C8:C2:4E:15:59:B8:F9:04:AD:60:19:2B:E8:BF:38:BA:8D:F5:A5
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 7E5CE068F468BF9BCB051E98AC27C54D15616A0A
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa
Signing time: Fri 10 Jan 2025 08:19:42 +0000
ROA not before: Fri 10 Jan 2025 08:14:42 +0000
ROA not after: Fri 09 Jan 2026 08:19:42 +0000
asID: 23679
IP address blocks: 2401:2900:102::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5c:e0:68:f4:68:bf:9b:cb:05:1e:98:ac:27:c5:4d:15:61:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jan 10 08:14:42 2025 GMT
Not After : Jan 9 08:19:42 2026 GMT
Subject: CN=41C8C24E1559B8F904AD60192BE8BF38BA8DF5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:e6:44:1a:b7:36:0b:54:66:58:02:66:51:
71:4d:c2:f4:78:ce:26:ed:b4:59:38:20:e1:d9:04:
27:87:9e:4d:87:14:83:47:c4:01:79:af:c5:75:12:
3c:1c:59:54:04:a1:b6:e5:a9:d5:b9:bd:87:a9:30:
19:f7:41:91:56:95:eb:fe:ee:6c:19:8b:37:7c:45:
90:61:7c:b2:f3:02:1e:0b:2d:58:2e:07:94:8f:23:
84:26:1e:0c:b2:1e:4d:ff:5d:d2:0a:3f:28:ae:bc:
b3:69:f5:1b:f7:ca:5a:73:44:bd:31:ab:87:94:ab:
8e:1e:12:1d:c5:50:32:90:f0:4b:55:6e:96:cc:64:
ae:62:0d:8f:55:6d:12:77:04:71:ab:5c:85:4b:94:
6f:2e:e3:ce:27:b4:1e:4e:98:25:ed:e5:66:9c:90:
96:38:99:cb:66:a6:a4:84:cb:bf:7a:17:7e:e7:6e:
5b:5f:a3:24:8a:e1:55:8c:ca:bb:26:7d:4a:50:69:
fb:48:7a:3b:01:f0:80:7d:d2:0c:eb:d5:89:9f:9c:
6e:33:ad:5e:5e:76:d8:68:dd:26:38:b2:be:cf:87:
a4:3d:14:c9:09:ce:7e:a2:ee:95:9a:6b:f0:3d:ea:
d4:f5:a3:36:d9:26:37:a4:19:c6:bd:4e:e4:1c:64:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:C2:4E:15:59:B8:F9:04:AD:60:19:2B:E8:BF:38:BA:8D:F5:A5
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:102::/47
Signature Algorithm: sha256WithRSAEncryption
21:bf:96:f7:af:82:bd:b1:57:8e:98:e8:23:9f:30:e8:1e:40:
df:3b:24:74:6c:a6:79:1a:a7:54:57:c2:9c:91:fc:d1:20:98:
6d:64:78:1c:a9:42:79:6f:a1:1c:f6:f4:46:7c:6e:e9:83:fc:
90:32:23:71:a5:17:84:82:6b:b0:2f:df:55:62:fa:94:2d:a1:
96:a8:d2:55:71:fa:61:82:1d:af:79:50:ac:ee:ae:ba:3b:e7:
42:b3:9c:97:d5:52:aa:f1:4d:d4:15:0e:b2:07:ff:d4:36:9d:
ad:75:d4:ad:89:d6:0c:4e:a4:5f:96:fd:2b:01:b2:7b:c1:4b:
38:12:11:45:7b:df:6b:b3:fe:71:80:17:44:04:d2:85:d6:65:
5f:e6:1c:b3:f5:2c:e1:a3:91:bb:2b:5b:34:c3:31:8a:f8:42:
12:1f:0b:f9:96:0f:2e:40:b7:64:2d:93:68:20:ed:1c:f5:0c:
ad:47:43:b2:59:b5:f1:3b:b2:5e:6a:f5:a8:41:4b:ae:87:80:
47:46:51:74:97:cd:72:a1:fe:c1:ab:ac:0f:6e:eb:ef:12:e1:
9a:b9:6b:a7:2c:2b:66:3f:57:58:dd:64:e0:c6:af:1e:24:a2:
5b:93:27:d7:c3:a7:97:b2:0b:5d:c3:75:95:a1:d6:5f:87:ec:
22:49:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:44 2025 by rpki-client