Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa
File: 323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier: RKKD3GBglVl68bznX80kytr3DPvnjyvkYNH5hf4K2xc=
Subject key identifier: 78:47:17:AF:7A:7B:C2:61:32:49:C9:E9:BF:2B:40:32:4F:16:26:6D
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 2022B4101B3A49DB39F33286F1E812D6BF94D8A8
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa
Signing time: Wed 01 Jan 2025 04:00:38 +0000
ROA not before: Wed 01 Jan 2025 03:55:38 +0000
ROA not after: Wed 31 Dec 2025 04:00:38 +0000
asID: 23679
IP address blocks: 2401:2900:8002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:22:b4:10:1b:3a:49:db:39:f3:32:86:f1:e8:12:d6:bf:94:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jan 1 03:55:38 2025 GMT
Not After : Dec 31 04:00:38 2025 GMT
Subject: CN=784717AF7A7BC2613249C9E9BF2B40324F16266D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0b:0d:55:7d:fb:28:4d:69:2f:5f:0b:aa:d9:
01:07:ca:a6:25:36:87:47:21:a6:1d:67:3a:6e:35:
1f:5c:fd:98:25:38:57:a9:54:4d:f1:95:ab:03:6b:
09:dc:57:fc:28:02:d8:0b:3b:6d:11:59:21:14:33:
fc:1b:49:35:ad:84:f0:3e:08:19:a5:43:32:a8:6f:
24:09:8f:04:73:12:3e:e7:dc:ab:bd:16:1a:60:7d:
e4:90:7c:0d:bc:aa:a4:17:ed:5b:a0:ab:fe:59:27:
2d:6a:37:96:e7:dd:0e:09:2e:a6:d6:c8:41:76:29:
84:77:f1:bf:9c:8a:8d:cf:77:44:45:3c:50:77:9f:
8e:6b:28:8f:73:3a:e1:5d:20:f3:5d:1d:e4:6d:b5:
e2:9c:d7:96:9e:fb:46:3c:1e:ef:79:1d:a1:de:6e:
53:64:80:9e:e9:bd:3d:6c:1b:8f:a1:95:52:40:57:
02:bb:4d:b5:bf:98:95:04:59:28:fc:69:19:1f:af:
6f:cc:32:b7:ee:74:b2:fe:cb:90:be:6b:6f:4a:0f:
ed:04:f1:9e:80:6a:06:cd:89:4c:14:c6:fc:d0:11:
f4:d8:52:48:19:6a:e4:b5:d3:0e:d1:35:22:cf:99:
4f:2e:0c:b3:74:46:d9:ff:8f:02:36:08:d5:d5:ec:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:17:AF:7A:7B:C2:61:32:49:C9:E9:BF:2B:40:32:4F:16:26:6D
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:8002::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ca:08:df:b1:ca:2a:01:de:d7:c7:cf:be:5a:23:5d:dd:c7:
b1:46:3b:3e:19:80:ca:2e:f4:68:1d:9a:9c:ff:10:21:4f:1a:
bf:8d:80:44:e7:f0:ed:9a:53:11:e7:0d:dd:84:9c:bf:36:83:
db:cd:20:61:5c:8b:c0:f8:64:4c:09:c1:ce:41:10:76:cf:34:
f9:5e:bf:e9:37:f9:6e:55:13:28:32:74:84:46:0f:4e:e0:43:
55:f3:89:2a:db:d7:de:3f:50:7c:a6:0c:e5:90:6a:ef:e2:b3:
0a:ad:9c:81:96:04:6a:45:2f:e0:3d:7a:a2:34:cf:08:20:40:
a1:53:80:e2:ac:ca:fd:c3:38:bf:7f:d6:9a:75:d8:8d:51:70:
36:3b:b8:bf:bb:87:d2:b9:73:d4:e5:45:bb:fa:b7:50:84:d2:
72:35:df:25:8a:5c:b4:4d:17:6c:01:ad:01:11:7a:17:f6:9e:
00:ea:82:29:ae:ce:6f:e0:05:52:f9:f1:2a:f5:b6:48:9b:e4:
e6:53:28:35:5a:d7:65:1f:cb:81:46:16:fe:d1:90:70:dc:1c:
3e:61:b8:14:f5:b4:86:c7:db:0c:40:df:4f:96:33:ef:10:dd:
c1:ee:d3:ac:85:da:46:d1:f8:16:e2:1b:46:6d:a6:25:8a:55:
f1:2b:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:29 2025 by rpki-client