Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa
File: 323430313a323930303a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier: 9f0d3eSd8uNakpiFcMoe/N08tvOj9C81eYdhGT2CgiY=
Subject key identifier: 28:AC:8F:1A:4A:CD:76:A1:C8:BE:12:ED:71:C9:36:09:E7:1C:B0:76
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 11BF052C4A6CAE4E0FCC77DA65E6EB91C897CADE
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa
Signing time: Wed 01 Jan 2025 04:00:38 +0000
ROA not before: Wed 01 Jan 2025 03:55:38 +0000
ROA not after: Wed 31 Dec 2025 04:00:38 +0000
asID: 23679
IP address blocks: 2401:2900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bf:05:2c:4a:6c:ae:4e:0f:cc:77:da:65:e6:eb:91:c8:97:ca:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jan 1 03:55:38 2025 GMT
Not After : Dec 31 04:00:38 2025 GMT
Subject: CN=28AC8F1A4ACD76A1C8BE12ED71C93609E71CB076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:ae:ce:b3:37:a6:b9:11:ef:ff:bd:b5:d8:
61:a1:fd:68:b9:be:5d:b1:4b:c8:d5:c4:a7:14:91:
0d:7e:30:e9:49:53:e5:af:e5:2d:fb:51:89:15:a0:
63:ca:ac:29:99:09:e3:fe:d0:86:f1:71:47:ef:0c:
c4:8e:6d:11:f1:4d:08:73:70:23:56:b5:18:86:b8:
7f:59:35:c9:69:52:ac:da:6b:9b:48:1c:5d:7f:e1:
4a:13:3f:6b:2e:bc:ca:85:6f:0b:4d:69:46:95:6d:
c7:9a:f4:10:c8:cb:b5:e2:02:b6:62:be:ab:12:de:
63:8b:ae:cf:6a:e6:c9:5e:1c:9a:cf:b7:ed:9b:bd:
d8:57:5c:2d:7e:24:f5:97:15:83:e2:8c:c3:aa:70:
50:29:ee:7d:2d:82:d6:28:c4:cb:0e:d3:19:74:69:
1f:f9:86:cc:6f:d7:9b:aa:a4:13:d5:9e:98:00:ae:
f9:54:89:a8:cc:e1:ad:dd:1f:81:94:09:34:52:d4:
bf:a3:5f:95:dc:1c:57:15:c5:01:ea:43:92:8a:5b:
5d:82:cb:7a:53:48:be:d3:b9:f0:eb:b1:14:39:94:
62:52:27:26:2c:17:1e:45:92:13:e9:96:74:53:26:
8f:d7:54:00:a0:96:57:ea:b3:72:61:b2:36:2e:64:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:8F:1A:4A:CD:76:A1:C8:BE:12:ED:71:C9:36:09:E7:1C:B0:76
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900::/48
Signature Algorithm: sha256WithRSAEncryption
57:3d:fb:20:03:ee:17:4c:e8:89:9b:53:ca:c6:68:74:6d:82:
6c:95:04:32:6f:7a:f0:17:ea:81:f6:fb:6b:4d:81:e6:ef:dd:
da:29:c2:97:3c:43:75:9f:9f:a1:0b:b6:a7:37:03:c7:b1:67:
2e:9c:8d:aa:cf:98:6b:28:b2:c0:92:04:44:da:f4:4a:8d:23:
20:f4:f5:ad:16:5e:0c:9c:52:19:5b:d2:3a:46:c7:92:e4:5d:
7b:59:f9:94:a4:b0:1c:59:e6:cf:6b:6b:bf:d8:81:1f:e8:29:
b9:cb:dc:4f:66:75:56:51:7e:a3:8c:2f:14:e3:eb:36:05:91:
d7:c5:3d:b4:93:b7:25:37:a6:aa:3d:e9:d1:8e:b0:b6:98:19:
4b:bf:71:b8:a8:0c:f6:6f:eb:56:7e:d8:78:d4:1e:7b:38:a7:
b5:23:d6:1b:85:c8:ea:f0:f2:d7:f2:07:b3:91:7a:5e:39:b0:
98:2a:22:1c:87:bb:39:eb:87:de:89:20:b2:44:80:68:e4:11:
2a:76:ec:e1:4f:ee:ea:2a:8d:e3:18:36:58:39:6b:06:cd:8b:
38:79:a0:b0:c8:0b:92:9e:aa:0f:0f:31:99:cd:8f:9d:98:60:
9c:e2:f9:cc:c8:8d:76:68:d0:6d:b7:9c:a0:90:91:26:fe:26:
fa:0b:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:36 2025 by rpki-client