Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa
File: 323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier: uvD4lfFD4OgQ4aWsymSF3GrvaKy8fwNEuDCZqoj86ZA=
Subject key identifier: 5F:63:37:8D:B3:99:F5:C0:F5:79:53:64:9C:E1:74:58:DA:2F:3F:DE
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 2265895695DC43325331D729770C496EC0BCED7C
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa
Signing time: Wed 01 Jan 2025 04:00:36 +0000
ROA not before: Wed 01 Jan 2025 03:55:36 +0000
ROA not after: Wed 31 Dec 2025 04:00:36 +0000
asID: 23679
IP address blocks: 2401:2900:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:65:89:56:95:dc:43:32:53:31:d7:29:77:0c:49:6e:c0:bc:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jan 1 03:55:36 2025 GMT
Not After : Dec 31 04:00:36 2025 GMT
Subject: CN=5F63378DB399F5C0F57953649CE17458DA2F3FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:51:d1:bf:75:29:5c:a4:4a:15:ae:76:df:
64:45:cb:11:32:0f:30:99:81:22:d0:85:bd:e6:05:
68:0d:b1:c6:e7:4d:ab:30:ef:6f:a4:e4:db:65:d1:
07:59:b6:fb:2c:85:39:af:54:14:38:7d:23:71:ec:
b5:99:7f:c6:8d:8f:eb:e7:26:e9:7d:7d:f5:2e:63:
2e:41:c1:99:f1:8a:28:7c:32:28:10:50:da:3e:1f:
d9:c1:08:e1:15:02:bd:8a:6a:07:83:12:1e:69:48:
c2:a1:17:dc:d7:02:5c:5f:07:8f:70:1a:55:4a:82:
cc:de:d5:b0:cd:dc:92:03:8f:22:6b:9e:d2:67:0d:
ee:73:69:fa:bd:0e:26:93:7f:71:73:33:10:4c:aa:
a8:de:56:26:6e:63:6d:38:d3:13:67:54:7c:a8:a2:
5d:57:be:6e:d6:4a:72:bf:11:cb:33:0c:08:3b:7f:
2f:56:43:4c:11:46:f5:a0:25:31:84:84:6f:af:94:
19:55:76:68:fc:d7:b9:c4:b3:16:88:a6:3f:b2:57:
16:20:ad:b2:52:eb:21:b4:f8:d4:ed:e6:8b:72:b7:
19:40:6c:7c:de:b9:de:9e:73:b4:57:4b:2f:17:74:
10:3a:ae:cd:3e:dd:16:39:0b:9a:b9:72:ce:9e:64:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:37:8D:B3:99:F5:C0:F5:79:53:64:9C:E1:74:58:DA:2F:3F:DE
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:8000::/48
Signature Algorithm: sha256WithRSAEncryption
1c:e7:7a:49:87:17:75:19:94:e9:f8:31:08:22:8c:38:07:b9:
54:d5:eb:94:05:a1:28:34:28:08:38:ca:cb:a8:9f:dc:dc:f3:
b3:7b:1f:f5:25:34:a5:38:ac:6b:a8:29:e2:45:3f:7e:6e:8e:
1f:d4:f6:b8:c1:32:d4:b7:76:34:d4:26:b7:72:9d:5a:e0:fb:
3a:ce:59:ee:fd:60:1a:94:ab:7b:a2:08:75:60:eb:1c:1f:fb:
fe:61:4e:6c:48:e2:d8:a4:0a:c8:0f:c4:76:51:1b:e7:6f:ca:
81:ab:d0:76:6c:dc:55:d0:fe:ed:bd:b5:2b:e8:55:b8:7e:a1:
27:cd:c4:cb:9d:f3:81:e7:ae:8b:93:5a:79:9c:56:26:ca:d3:
c8:c8:d2:eb:e7:99:85:a6:ef:7a:43:d8:f4:0c:49:ae:29:dc:
d5:48:6f:f6:cd:78:7f:ae:5a:02:bd:ef:cf:32:83:c1:ce:85:
d9:58:41:68:cf:51:67:c6:c8:15:52:de:ec:ac:5c:69:52:d3:
d1:26:86:33:36:1e:62:ae:5f:f7:1b:66:7e:45:73:f9:04:2b:
d1:4a:4f:ef:1d:c7:2b:86:12:87:95:a8:e8:4a:4e:3d:7c:8c:
67:21:e0:d0:f1:1d:0d:fb:b2:04:36:79:25:92:f6:e9:7d:a5:
1b:2d:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:30 2025 by rpki-client