Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa
File: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (raw, json)
Hash identifier: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=
Subject key identifier: 98:67:6B:AD:3A:69:95:87:40:B2:D2:A9:9E:3C:F3:5F:92:F1:60:B2
Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400
Certificate serial: 4D3DD1A582FF593388B6E5505C5CE89741AC7FB3
Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa
Signing time: Thu 13 Feb 2025 16:01:50 +0000
ROA not before: Thu 13 Feb 2025 15:56:50 +0000
ROA not after: Thu 12 Feb 2026 16:01:50 +0000
asID: 58820
IP address blocks: 2407:7240::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3d:d1:a5:82:ff:59:33:88:b6:e5:50:5c:5c:e8:97:41:ac:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400
Validity
Not Before: Feb 13 15:56:50 2025 GMT
Not After : Feb 12 16:01:50 2026 GMT
Subject: CN=98676BAD3A69958740B2D2A99E3CF35F92F160B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:b1:fd:7d:e2:20:6f:90:aa:49:44:6a:3a:
ec:f4:26:91:28:eb:89:63:3d:af:72:91:85:17:e2:
de:12:2b:3b:53:17:26:db:dd:72:db:d2:30:b6:1c:
33:65:ff:8f:44:b3:cd:89:ca:c2:27:2b:4f:d6:b8:
84:0a:f8:54:64:f7:a0:74:c4:97:af:63:eb:bd:ab:
1d:fd:6f:e2:41:d5:f5:81:da:a8:72:0d:d4:e5:1d:
1f:5f:7f:09:f3:89:61:46:0b:43:88:be:f6:0f:5b:
cc:65:cb:bb:51:03:ca:ef:40:22:2b:e9:72:72:09:
0d:e0:98:f3:68:03:12:04:12:1d:53:6e:d2:19:63:
0b:93:59:a4:af:c7:02:06:06:17:dc:1c:0a:66:e6:
81:e6:50:f9:b9:9e:a4:e2:4e:30:41:58:00:37:1d:
b7:de:09:6b:1a:f6:d7:65:fa:90:18:73:86:94:36:
8c:f6:04:8b:91:83:d0:25:29:bf:37:5e:22:8e:16:
9a:12:12:01:42:19:05:c8:85:56:1d:4f:3a:4f:c7:
d3:0f:a8:91:05:12:f8:3d:ef:91:dc:2b:e9:c9:ed:
5a:28:40:a8:34:e2:2c:7b:89:76:9c:3a:21:a2:8b:
e7:f9:be:3b:e8:bf:62:2c:7a:d6:1d:9e:87:e1:50:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:6B:AD:3A:69:95:87:40:B2:D2:A9:9E:3C:F3:5F:92:F1:60:B2
X509v3 Authority Key Identifier:
keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:7240::/32
Signature Algorithm: sha256WithRSAEncryption
37:2b:a2:5a:32:47:b9:47:c3:ce:5d:7e:c4:4f:b5:9b:0c:33:
87:8c:c6:a0:ad:c1:c2:ad:e5:a3:1f:6a:50:0d:48:c1:0c:f8:
c6:7a:8b:bc:bc:df:93:6a:37:a7:11:e7:75:e3:43:d2:23:f2:
1f:d2:39:30:f0:99:c5:df:64:ac:2d:8a:df:c4:c3:f4:02:92:
8b:61:72:8b:63:b0:51:94:93:6b:ae:da:67:83:70:a5:9c:a1:
11:e8:db:6c:8e:18:f3:1f:d2:de:52:b7:0f:a3:ff:5e:ac:77:
a4:82:d2:7c:cd:e8:d7:2f:d6:3a:dc:51:ed:08:66:4e:b9:cd:
d3:a3:7b:84:06:8d:64:47:eb:8e:b7:0d:23:60:05:69:b5:1b:
89:57:5d:05:1c:20:cb:3e:4f:99:f0:e4:b8:0e:3d:2e:fd:91:
22:e8:af:ff:d0:e9:34:01:5d:a2:92:83:3a:6a:6c:5c:f8:21:
15:dc:ee:e6:d1:37:94:d6:81:e5:a1:89:6b:c5:1a:cb:e8:eb:
a4:54:2a:fe:6d:99:c5:4f:fa:40:ab:bc:0c:a3:ee:c3:f7:38:
a4:24:5d:1c:9a:6b:e1:2a:bd:a8:83:4c:3a:82:65:9b:f1:df:
ea:82:6b:af:1a:42:c1:e0:91:c7:59:12:87:af:49:49:53:e6:
13:a6:04:4f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUTT3RpYL/WTOItuVQXFzol0Gsf7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE
Q0RCQjQwMDAeFw0yNTAyMTMxNTU2NTBaFw0yNjAyMTIxNjAxNTBaMDMxMTAvBgNV
BAMTKDk4Njc2QkFEM0E2OTk1ODc0MEIyRDJBOTlFM0NGMzVGOTJGMTYwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/bH9feIgb5CqSURqOuz0JpEo
64ljPa9ykYUX4t4SKztTFybb3XLb0jC2HDNl/49Es82JysInK0/WuIQK+FRk96B0
xJevY+u9qx39b+JB1fWB2qhyDdTlHR9ffwnziWFGC0OIvvYPW8xly7tRA8rvQCIr
6XJyCQ3gmPNoAxIEEh1TbtIZYwuTWaSvxwIGBhfcHApm5oHmUPm5nqTiTjBBWAA3
HbfeCWsa9tdl+pAYc4aUNoz2BIuRg9AlKb83XiKOFpoSEgFCGQXIhVYdTzpPx9MP
qJEFEvg975HcK+nJ7VooQKg04ix7iXacOiGii+f5vjvov2IsetYdnofhULGXAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUmGdrrTpplYdAstKpnjzzX5LxYLIwHwYDVR0j
BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG
MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC
QjQwMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05
ODRmLTM0ZTQxOWZjOWM0OS8wLzMyMzQzMDM3M2EzNzMyMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3JAMA0GCSqGSIb3
DQEBCwUAA4IBAQA3K6JaMke5R8POXX7ET7WbDDOHjMagrcHCreWjH2pQDUjBDPjG
eou8vN+TajenEed140PSI/If0jkw8JnF32SsLYrfxMP0ApKLYXKLY7BRlJNrrtpn
g3ClnKER6NtsjhjzH9LeUrcPo/9erHekgtJ8zejXL9Y63FHtCGZOuc3To3uEBo1k
R+uOtw0jYAVptRuJV10FHCDLPk+Z8OS4Dj0u/ZEi6K//0Ok0AV2ikoM6amxc+CEV
3O7m0TeU1oHloYlrxRrL6OukVCr+bZnFT/pAq7wMo+7D9zikJF0cmmvhKr2og0w6
gmWb8d/qgmuvGkLB4JHHWRKHr0lJU+YTpgRP
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:12 2025 by rpki-client