Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa
File: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (raw, json)
Hash identifier: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=
Subject key identifier: 3B:35:8E:1C:F3:0A:7F:DA:FB:8E:BC:B7:87:2E:00:3A:1F:76:61:D2
Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial: 2592027AC00FA48E05C2B59EED2AF0971C16B865
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa
Signing time: Wed 11 Dec 2024 14:58:03 +0000
ROA not before: Wed 11 Dec 2024 14:53:03 +0000
ROA not after: Wed 10 Dec 2025 14:58:03 +0000
asID: 38523
IP address blocks: 2401:2c40:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:92:02:7a:c0:0f:a4:8e:05:c2:b5:9e:ed:2a:f0:97:1c:16:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Validity
Not Before: Dec 11 14:53:03 2024 GMT
Not After : Dec 10 14:58:03 2025 GMT
Subject: CN=3B358E1CF30A7FDAFB8EBCB7872E003A1F7661D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:4c:29:0a:02:8f:31:30:26:c5:cb:b8:9f:
4b:7e:05:43:68:05:f8:75:ae:77:98:aa:a8:a8:c7:
24:61:51:a9:e2:08:c4:9a:24:4f:f1:e2:74:d3:72:
bf:93:78:74:62:99:c9:f9:b2:5f:61:3d:83:6a:52:
31:76:0c:27:cc:2d:4c:b5:f6:87:17:3f:3d:b2:ed:
20:75:3b:33:44:29:c7:a4:19:d6:48:c3:88:d3:4b:
30:88:13:f7:01:9b:83:af:c8:9e:77:bb:6d:8b:32:
8f:cc:11:8b:59:f5:7a:ef:e0:45:c8:88:97:a6:59:
96:9e:e2:96:55:3d:d9:56:ff:d8:ed:56:6f:3e:cf:
4b:c6:74:d2:4d:9c:0f:3e:d9:06:72:18:71:67:4c:
96:6a:ad:5c:07:b5:b1:a1:8b:0c:ad:77:90:c5:d8:
8c:53:de:21:4e:0c:b4:b1:17:20:57:f6:9f:21:da:
ec:70:b2:32:43:40:e5:14:d2:d0:be:75:ce:77:2d:
c4:e8:33:02:1f:77:2c:d5:04:a4:d9:74:3e:56:3c:
01:53:b7:10:ec:a9:a2:f8:00:5f:9c:e1:b6:65:8b:
4e:69:26:5f:02:2e:76:c8:fa:29:ef:9c:24:98:fd:
d7:5b:45:bb:6c:57:ac:9b:ca:e5:6d:61:46:dc:47:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:8E:1C:F3:0A:7F:DA:FB:8E:BC:B7:87:2E:00:3A:1F:76:61:D2
X509v3 Authority Key Identifier:
keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2c40:4::/48
Signature Algorithm: sha256WithRSAEncryption
24:ee:3e:01:20:c2:1e:bd:dc:fe:fd:d2:8d:28:17:ff:67:67:
9d:33:63:b2:de:53:ca:c0:c2:84:10:3d:9e:60:7f:bf:6c:21:
f2:fa:1e:e1:8f:c2:a4:29:b0:78:d7:84:cf:35:c7:f3:b5:a9:
2c:35:0b:27:f2:bb:75:46:16:3c:bb:f7:d0:83:ec:bb:7d:42:
03:f2:5b:25:67:ef:37:77:23:c0:1e:6a:ae:c0:38:8f:22:f8:
2f:88:db:18:74:25:85:09:6f:8c:e5:14:27:95:6c:7f:a6:bb:
5c:da:de:bb:9c:5e:0a:0c:23:e8:3a:f8:a8:0d:63:a4:ed:a1:
27:eb:b9:a1:14:10:48:a6:79:b0:4f:39:4f:ae:39:15:44:e2:
24:27:e6:59:ed:e1:e8:3d:6f:49:19:ba:ca:d0:7b:10:24:54:
f8:8b:7d:d9:6b:5c:f6:86:1b:b3:d7:d0:0c:f5:d1:92:39:5e:
55:99:49:78:18:43:cc:8b:52:43:7e:20:d6:c9:78:15:c8:0a:
80:2a:01:29:23:41:c8:29:88:0a:18:fb:55:9f:80:f2:b1:a2:
f5:1b:2f:e5:57:d7:8e:e0:d9:27:9c:39:7f:24:c1:a3:d9:dc:
4b:4a:d3:87:c5:37:4e:b0:c8:73:da:19:b0:50:6f:ea:62:46:
ac:39:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:44:49 2025 by rpki-client