Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
File: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=
Subject key identifier: E9:4E:DC:AD:33:E1:B2:25:A4:0D:27:98:BF:36:8B:8D:11:E5:27:6D
Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial: 58B7F1C6D818162C9D2766FEA7FC3FC1525716B1
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
Signing time: Mon 16 Dec 2024 10:01:15 +0000
ROA not before: Mon 16 Dec 2024 09:56:15 +0000
ROA not after: Mon 15 Dec 2025 10:01:15 +0000
asID: 50104
IP address blocks: 2001:df1:1c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b7:f1:c6:d8:18:16:2c:9d:27:66:fe:a7:fc:3f:c1:52:57:16:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Validity
Not Before: Dec 16 09:56:15 2024 GMT
Not After : Dec 15 10:01:15 2025 GMT
Subject: CN=E94EDCAD33E1B225A40D2798BF368B8D11E5276D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:e0:dc:d5:58:ef:1f:e8:15:db:e5:c3:aa:
9d:02:06:65:3f:87:77:37:6a:74:d1:cd:53:a3:64:
89:33:a6:3a:1a:0a:05:68:67:c2:f1:8e:00:2f:ca:
4b:ba:5d:07:72:8d:7d:65:fd:f8:cd:6f:56:83:e3:
de:24:16:c9:4f:2a:ba:ea:4d:be:ee:a0:47:b3:6f:
ad:7c:74:69:a3:ae:9a:4f:7e:45:40:c1:8b:a3:8f:
d5:5c:f0:75:cb:00:cc:dd:56:a7:4a:31:7c:51:93:
a3:ad:1e:a8:d2:90:66:ee:03:77:4c:0d:62:e5:42:
75:31:fc:96:96:55:58:17:b4:87:a7:1d:9b:91:cc:
cb:78:be:c5:66:e2:d4:27:7d:73:65:6d:d8:0c:ad:
0f:77:19:5c:45:2c:32:d1:4e:64:08:3e:2d:bb:52:
20:a0:d7:ab:cf:b2:a9:a7:09:3c:8b:97:a8:d6:2f:
7c:d2:95:cd:21:66:3d:8d:bb:71:25:b5:88:b7:b2:
9b:3c:bd:d5:60:53:25:2e:31:db:66:83:9b:ac:c9:
ba:ff:d5:2f:af:b7:ec:3c:36:48:d0:f4:db:3c:ff:
50:a2:26:65:f3:03:cc:bb:af:58:30:cf:35:0f:cc:
9f:53:fa:44:d3:97:66:19:91:d8:ba:79:fd:55:0a:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:DC:AD:33:E1:B2:25:A4:0D:27:98:BF:36:8B:8D:11:E5:27:6D
X509v3 Authority Key Identifier:
keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
77:5e:e0:23:f8:62:39:b2:ee:91:ea:e7:4e:2a:01:1e:f9:75:
15:bf:ce:8e:de:f8:14:6c:bd:c8:94:21:58:c5:40:10:c1:4c:
fd:ba:52:d3:6b:fc:fa:2f:4b:f5:e4:ca:3e:01:15:22:a4:eb:
83:57:35:60:8f:0a:d5:87:aa:45:19:0e:95:12:ee:81:df:45:
2d:91:ef:20:22:18:3e:72:de:84:0f:0c:6e:36:4b:08:d7:7c:
22:39:9f:fd:d0:b7:7a:8b:dd:84:32:6b:20:b1:5e:7d:77:0e:
21:44:7d:b8:43:f5:f3:45:f3:e8:57:13:53:66:99:48:5e:6f:
ee:e5:1f:ca:28:24:0c:55:a0:7d:fc:9c:06:70:75:07:33:63:
a3:74:9a:f9:8f:bf:2d:39:02:89:f3:d8:a4:4b:b7:b2:4c:fa:
7b:fd:4c:eb:67:b8:94:c9:f9:fe:02:fa:0e:25:e1:3b:19:dd:
df:a9:c6:02:82:7b:7f:79:93:ee:38:1e:0d:39:96:ef:65:52:
36:6a:76:49:61:90:e9:da:5a:4e:32:79:ea:7a:3d:0a:ff:79:
ea:45:c6:24:5b:00:26:08:94:21:f2:85:61:c1:83:43:14:09:
c3:68:8c:3c:d3:16:d3:4f:2a:97:b8:1e:2d:63:f7:3d:cb:0f:
48:a8:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:35:15 2025 by rpki-client