Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa
File: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (raw, json)
Hash identifier: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=
Subject key identifier: 05:1E:5B:58:33:42:CB:43:7F:8C:99:80:A0:7B:4C:80:45:72:32:AD
Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
Certificate serial: 61CB250850B6EF6481A4A21FC0B90CE8E118C3C1
Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa
Signing time: Wed 04 Dec 2024 07:49:06 +0000
ROA not before: Wed 04 Dec 2024 07:44:06 +0000
ROA not after: Wed 03 Dec 2025 07:49:06 +0000
asID: 153149
IP address blocks: 2001:df4:9a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cb:25:08:50:b6:ef:64:81:a4:a2:1f:c0:b9:0c:e8:e1:18:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
Validity
Not Before: Dec 4 07:44:06 2024 GMT
Not After : Dec 3 07:49:06 2025 GMT
Subject: CN=051E5B583342CB437F8C9980A07B4C80457232AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:f6:5f:b5:e6:0c:d3:57:79:42:ad:a4:43:
01:10:0b:9e:4b:ad:29:e3:d5:85:1b:df:79:3b:30:
ca:76:5b:cd:0e:39:62:8a:0d:a1:42:c4:f4:55:7e:
ab:a8:30:69:c1:e9:47:8d:13:03:a4:29:7b:88:35:
be:13:e9:4c:87:fb:e6:d4:72:da:c9:b5:34:61:37:
40:3c:ec:c4:9b:dc:9e:e8:ec:3a:e5:ce:5f:03:48:
a5:6e:25:00:47:f2:19:4c:d5:e0:2a:97:c6:13:e4:
e2:e7:12:c6:98:0e:c6:c0:f1:10:97:c9:c4:ec:94:
d1:78:c1:be:4c:19:af:c1:bf:3a:38:fd:66:df:6d:
82:cb:31:95:06:23:69:47:8a:01:ad:57:6c:b5:3f:
40:3c:04:84:0c:cb:53:d8:21:22:39:d8:3a:3b:ac:
e9:72:11:d4:3e:00:9c:f1:ec:3e:b9:5d:78:9e:ed:
e1:9d:d5:7f:a4:1d:3c:de:e1:05:3a:19:43:60:78:
29:1d:45:e8:61:b5:fa:f5:b9:db:32:8f:16:da:04:
3b:ca:64:7d:b5:69:15:60:97:37:23:93:cc:e7:60:
02:17:d3:07:c3:64:b0:a0:af:11:bf:47:ac:7c:4e:
48:b2:c2:d8:71:73:16:5c:2f:26:03:17:65:c4:b0:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:5B:58:33:42:CB:43:7F:8C:99:80:A0:7B:4C:80:45:72:32:AD
X509v3 Authority Key Identifier:
keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:9a40::/48
Signature Algorithm: sha256WithRSAEncryption
d3:f8:a8:9a:9c:72:fb:c5:b1:99:1f:93:b2:7c:fa:11:01:6f:
e1:a2:86:d7:f8:57:29:ac:fe:ac:d1:8c:04:de:48:ec:39:65:
32:d7:ec:f9:a4:04:6b:0a:86:5a:a8:18:d8:ef:8e:f1:fb:24:
77:44:5d:63:44:8f:df:2b:ea:f5:b8:4f:d1:e6:ff:33:70:a5:
d8:8c:3c:f4:91:47:c8:6e:c4:c8:ff:7d:cc:2a:c1:af:82:db:
e2:a3:f0:ee:8b:84:52:4c:ac:4e:15:ff:22:4a:04:f4:36:0c:
0a:f7:6a:56:bf:33:2c:a5:b2:01:81:f5:10:38:a2:c7:c8:b3:
0e:c2:f6:2e:09:1c:8b:e0:91:cc:b6:72:64:d7:c6:a9:c0:24:
90:96:f4:4c:1c:c6:3d:f7:b9:1c:68:be:e6:81:b0:6c:a2:cb:
82:b2:6a:54:f4:29:8b:39:fe:3a:75:bb:72:83:52:db:df:f0:
ae:59:2e:d9:80:78:fc:79:21:ed:94:6b:bd:ea:24:fb:6d:3d:
4c:e4:e3:2c:f6:d3:f3:c0:6a:7e:eb:1e:7e:5d:7a:71:b4:78:
b9:ba:5b:ae:f2:9a:7f:08:ca:a8:3c:c4:02:40:b2:2f:dd:97:
32:3e:38:8a:61:8a:c0:57:e4:d3:20:7f:e6:9a:b9:0e:51:92:
ff:54:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:56:46 2025 by rpki-client