Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa
File: 323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa (raw, json)
Hash identifier: 2VXkBERpiJiZLjiYjOttCzwgaX3QQinpVMluingheHs=
Subject key identifier: CF:87:A0:CA:4C:DF:BE:02:CF:E3:B4:22:BE:B7:03:3B:3D:B5:C8:40
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 025CC5DA202170637E707315753C177358BED8C4
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa
Signing time: Fri 28 Mar 2025 11:35:14 +0000
ROA not before: Fri 28 Mar 2025 11:30:14 +0000
ROA not after: Fri 27 Mar 2026 11:35:14 +0000
asID: 23679
IP address blocks: 2401:2900:106::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5c:c5:da:20:21:70:63:7e:70:73:15:75:3c:17:73:58:be:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Mar 28 11:30:14 2025 GMT
Not After : Mar 27 11:35:14 2026 GMT
Subject: CN=CF87A0CA4CDFBE02CFE3B422BEB7033B3DB5C840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:3f:9f:52:f3:da:46:65:79:2c:cc:86:3b:
e3:2e:50:aa:5b:1b:c0:75:f6:30:dd:e0:0b:60:88:
80:ad:5e:64:f3:32:94:dc:cf:14:93:be:20:3c:d7:
d9:d9:12:d1:08:55:e3:5d:41:7d:03:66:25:eb:8a:
ec:54:66:fa:1b:01:ca:e6:88:4b:7d:e0:fb:f8:c7:
b3:7a:cf:94:bb:40:49:e8:75:aa:dc:3a:6c:2a:31:
82:27:23:79:96:b7:7d:c0:73:f7:bf:24:b0:6a:bb:
18:68:22:b7:1b:3a:d7:b3:29:e7:c1:c1:01:a5:54:
b6:10:71:2e:43:f9:3c:c1:ee:41:9c:0f:c4:c2:b1:
f1:1b:7b:5e:4b:d8:01:75:bc:8e:ce:1f:49:ea:fc:
98:67:a1:94:c5:22:f5:8f:a7:2e:e3:d5:cf:9d:ff:
bf:0e:e0:28:5f:b0:11:f0:c9:a3:8e:b7:59:1f:81:
33:ef:66:b4:5a:96:c8:9f:1d:b9:f2:87:ec:d0:bf:
ba:ec:87:7f:01:19:21:f9:29:66:0c:84:d1:29:c6:
d0:5d:f6:1b:42:af:4e:e8:a5:e0:76:e8:9b:5b:ad:
66:f2:7e:f2:d5:44:f2:3b:e0:36:7b:9d:5d:a0:ef:
46:ea:c5:3d:99:e5:dc:43:6b:40:d5:84:d2:87:a9:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:A0:CA:4C:DF:BE:02:CF:E3:B4:22:BE:B7:03:3B:3D:B5:C8:40
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:106::/47
Signature Algorithm: sha256WithRSAEncryption
61:4f:e2:44:04:e7:79:33:a4:1a:53:55:e9:27:0a:fb:5a:b1:
89:72:12:14:e4:b9:78:28:ec:15:30:d3:25:21:58:c7:a3:10:
e4:5d:1b:31:c7:33:62:ec:4c:ab:03:69:9f:6a:b6:a2:07:83:
f3:75:ef:4b:76:70:5c:86:94:5c:97:cb:aa:7c:46:17:51:31:
bb:10:f0:f9:c8:26:00:b8:d7:04:53:57:80:bd:43:3c:1c:bf:
f3:70:b6:b4:7b:53:33:4d:8b:07:81:88:b9:86:e0:30:1f:fc:
d7:74:31:6a:ce:f1:70:0e:43:97:c5:ac:ce:a0:e1:43:1a:fb:
51:16:49:d2:13:2e:e3:39:54:f3:44:e5:3a:38:25:35:74:d0:
31:1b:73:15:e7:13:5f:ce:8e:81:58:c0:55:e4:ef:5f:64:4d:
9a:7e:4d:f4:69:0f:86:9f:0a:b9:3b:68:a7:cd:39:7c:e7:16:
2e:d8:f6:4c:78:01:b8:90:8e:db:74:0c:2f:1d:1f:8d:87:90:
3e:e9:1d:31:4b:9a:22:3c:06:68:df:76:dc:a0:5b:45:92:1b:
34:24:f3:e1:55:ea:a8:72:6a:67:4c:8d:2b:41:65:53:89:e4:
50:0b:74:88:89:fb:6e:a2:54:26:f5:a4:ec:82:83:0d:9f:61:
ec:8e:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:57 2025 by rpki-client