Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa
File: 323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa (raw, json)
Hash identifier: doOqHpl6HiPUsJkxq2lFFkJDLXTgvD+fz1seRfCKy6o=
Subject key identifier: 60:A1:AE:E7:A4:6F:93:5A:FE:C9:49:45:D0:14:B7:EC:7C:4E:AE:FE
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 70C383BDA9529D175E8FDE32720463171BB1A6DA
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa
Signing time: Fri 10 Jan 2025 08:21:22 +0000
ROA not before: Fri 10 Jan 2025 08:16:22 +0000
ROA not after: Fri 09 Jan 2026 08:21:22 +0000
asID: 23679
IP address blocks: 2401:2900:104::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c3:83:bd:a9:52:9d:17:5e:8f:de:32:72:04:63:17:1b:b1:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jan 10 08:16:22 2025 GMT
Not After : Jan 9 08:21:22 2026 GMT
Subject: CN=60A1AEE7A46F935AFEC94945D014B7EC7C4EAEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:20:d5:99:4c:49:82:a1:1f:e4:81:ff:97:
0d:6c:d1:36:53:a9:11:5a:37:9c:ef:3b:d2:30:3b:
b6:57:c1:85:51:a1:2d:a3:69:06:91:96:0b:4b:71:
68:f8:a5:6a:0d:3b:5a:d9:e0:f6:7a:7a:ec:01:34:
cf:74:7d:2f:ba:e0:89:a5:8e:40:54:dc:f5:72:7b:
e0:97:f3:24:d2:f5:80:0d:98:7b:6c:4b:cf:7d:31:
6f:24:c3:8f:e0:10:7f:ce:85:bb:fa:ed:a9:aa:9c:
19:1a:e8:f7:82:22:b5:49:e1:ad:48:1b:50:11:0c:
d9:ce:ed:ac:85:77:00:3c:87:5d:bd:d9:e4:06:f5:
49:09:ca:e2:59:c8:fd:b2:c6:f0:e3:84:4f:99:4e:
b5:c2:5f:e3:55:86:6f:b9:44:cc:eb:19:03:11:c3:
f1:96:e6:43:52:54:af:81:fc:60:aa:92:96:83:0f:
0f:64:82:80:62:ee:88:3e:f5:d2:de:d0:17:e3:73:
60:17:a2:9d:e9:31:2e:25:18:c1:4c:ec:ca:99:e1:
f6:cc:5a:2d:f1:fa:c4:53:a0:26:40:28:e9:69:f7:
5e:73:80:5c:2b:e4:70:fb:2c:38:ed:99:b7:e0:53:
00:c3:52:02:c9:ff:6d:a1:89:42:df:03:f3:bd:b2:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:AE:E7:A4:6F:93:5A:FE:C9:49:45:D0:14:B7:EC:7C:4E:AE:FE
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:104::/47
Signature Algorithm: sha256WithRSAEncryption
c7:87:69:d2:d4:54:30:09:10:26:f1:78:4e:f4:88:9a:b0:80:
17:b5:a8:b6:c3:45:14:c8:49:86:0b:cd:7e:9e:52:50:6f:30:
5f:70:30:6a:7b:fb:48:b1:89:e2:2e:93:3a:45:85:4e:4d:c0:
1b:5d:5a:bf:75:12:4e:80:f6:10:c7:13:88:d9:50:0a:ab:c1:
81:a3:ac:e3:e4:8e:97:51:69:f2:93:23:3e:4d:dc:00:02:92:
94:b0:91:d3:d9:32:e8:59:e6:3c:a2:5d:31:d8:46:f0:c9:75:
23:2d:ec:49:23:c5:0f:26:12:9e:4e:20:86:52:d0:e5:c0:03:
aa:1d:bb:73:be:2c:82:cd:e7:9a:47:9a:f4:02:37:38:f1:1b:
29:85:98:36:7f:64:b3:0e:0f:fc:be:c3:52:2a:b5:10:d0:ab:
c7:6b:b9:40:ee:19:da:2d:19:43:c3:5c:a8:09:8c:db:e3:de:
42:c7:b5:5e:76:04:2b:0f:bc:86:1b:88:f1:47:f8:b8:75:c0:
2b:30:9e:b7:6d:01:9f:6c:c9:c9:c8:73:f2:20:77:91:88:80:
9c:12:f6:d0:22:93:ac:37:37:0d:3e:20:34:23:56:ba:12:14:
c5:c3:b1:45:17:49:4c:80:7b:1a:31:a0:bf:1e:fa:69:b6:cb:
86:b2:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:26 2025 by rpki-client