Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
File: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (raw, json)
Hash identifier: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=
Subject key identifier: 83:F6:77:4A:0C:76:D2:58:94:38:17:65:25:F6:C4:CF:78:9E:A0:EE
Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial: 4EB95966B97399E4F4853D62D60AE9530B5FFA34
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
Signing time: Sun 29 Dec 2024 15:00:00 +0000
ROA not before: Sun 29 Dec 2024 14:55:00 +0000
ROA not after: Sun 28 Dec 2025 15:00:00 +0000
asID: 131749
IP address blocks: 2402:be80:d9ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b9:59:66:b9:73:99:e4:f4:85:3d:62:d6:0a:e9:53:0b:5f:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Validity
Not Before: Dec 29 14:55:00 2024 GMT
Not After : Dec 28 15:00:00 2025 GMT
Subject: CN=83F6774A0C76D2589438176525F6C4CF789EA0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:8d:67:18:17:1d:b2:01:40:75:39:f6:e3:
14:10:86:14:62:0f:78:4e:eb:54:5d:9d:27:86:9b:
7c:5d:12:ee:ac:24:7b:2b:95:28:4a:0c:05:fb:71:
5a:fa:cd:4b:d9:04:5d:33:74:8c:a2:35:1d:89:88:
e1:2d:ea:ab:11:8f:e2:53:b4:10:22:ce:f3:a4:f7:
f6:70:44:b3:0f:4c:4e:bf:e9:14:13:4c:2d:95:3b:
10:a8:2e:14:e3:0c:1f:20:ae:f4:82:44:24:bc:36:
96:f1:0c:c1:22:19:c3:a4:da:a9:4e:e9:45:f6:2f:
c9:f5:7d:d5:a9:c3:59:f9:56:b5:a2:cb:7a:2a:69:
5b:ac:02:86:65:74:4d:70:81:b1:a3:59:84:4d:71:
83:f6:d3:c1:7d:c2:47:5e:11:8d:45:ea:9b:53:a7:
64:a2:1e:e6:bf:4c:30:db:2d:a2:09:98:62:46:5f:
4f:0b:be:49:a9:8a:9a:57:09:8c:86:c4:d8:2f:2a:
e6:ea:3d:b0:54:84:61:29:9d:d6:b9:d0:81:71:20:
79:f6:5a:06:3d:4a:39:95:dd:7e:3a:46:4c:09:4c:
1f:43:80:31:51:a6:4a:2c:09:91:6d:50:7c:3e:f2:
f9:3b:70:75:ea:62:d7:36:f7:e8:35:b4:30:c0:1c:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F6:77:4A:0C:76:D2:58:94:38:17:65:25:F6:C4:CF:78:9E:A0:EE
X509v3 Authority Key Identifier:
keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80:d9ab::/48
Signature Algorithm: sha256WithRSAEncryption
72:fc:5e:6f:b9:50:31:9a:14:6f:06:47:c6:ba:ec:1f:7b:4f:
23:02:0b:d3:88:4c:c3:c3:87:cd:6b:ee:c9:86:f2:14:8c:46:
8c:bf:7b:32:26:ca:d5:e6:b5:c7:38:a7:d6:f0:35:d9:25:de:
92:f1:d5:15:15:2e:56:31:ee:c4:68:94:e6:41:57:15:98:52:
b0:cd:15:8a:0a:e2:e7:5f:d3:0c:ae:ed:bb:7a:b6:40:8a:f0:
7c:ae:9d:59:f1:36:f3:2d:56:d2:4d:85:f4:de:ff:81:13:8a:
77:cd:4d:c8:f7:90:c0:a3:9c:62:7d:a9:d1:20:19:9f:4f:bc:
5d:44:22:a2:ce:28:99:74:a4:83:1c:f1:8e:41:60:88:c2:61:
e4:b2:12:57:c0:c1:85:55:2b:cc:01:e6:04:fb:f3:de:b3:cf:
6d:a7:08:24:ce:18:9e:7e:a3:cf:df:92:f7:8f:6e:d3:78:ea:
d1:3a:1a:01:7e:94:0e:fc:80:e2:4c:15:a9:cb:ed:e4:0a:3e:
b9:07:08:fb:6b:7d:a3:ab:a7:42:1a:fa:12:cb:70:9f:e8:5e:
4d:c2:05:17:1a:e1:d8:9c:b2:43:e5:98:c3:57:d9:5c:5b:07:
59:7c:b8:81:27:55:23:71:bb:94:59:d2:70:2d:68:73:30:57:
1b:62:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:25 2025 by rpki-client