Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa
File: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier: b4xLY6qypxZOfiBsZ9cRVZdCJbgH704o9Ls2GIBrq7I=
Subject key identifier: 96:5E:2B:7B:1F:A2:55:98:9B:C2:11:17:85:F4:C3:25:7B:60:3A:07
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 48A5EF78C6891530467A7E2A9532B0081D3F3C67
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa
Signing time: Thu 08 Aug 2024 19:06:16 +0000
ROA not before: Thu 08 Aug 2024 19:01:16 +0000
ROA not after: Thu 07 Aug 2025 19:06:16 +0000
asID: 147137
IP address blocks: 2400:46a0:14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a5:ef:78:c6:89:15:30:46:7a:7e:2a:95:32:b0:08:1d:3f:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 8 19:01:16 2024 GMT
Not After : Aug 7 19:06:16 2025 GMT
Subject: CN=965E2B7B1FA255989BC2111785F4C3257B603A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:6d:53:7d:54:ad:41:3b:cb:48:41:1f:83:
22:79:0a:f6:e3:79:7f:32:e7:56:db:8c:7f:31:89:
04:1a:f3:46:4c:ce:a1:5c:c1:ab:b6:ad:4b:69:20:
00:79:8c:0f:4c:93:3f:c6:06:f2:4a:c1:80:85:3d:
e9:2d:a9:03:9c:d8:d6:aa:fb:c1:4d:38:c8:cc:c7:
79:70:f4:ca:97:65:95:fd:af:77:47:6d:a8:5f:11:
ff:0e:b6:cf:66:65:84:5c:4d:f0:7d:61:89:fa:ab:
ba:0e:03:8c:f3:7c:25:f1:f7:4f:3b:82:f2:f4:da:
de:df:3c:bd:fd:32:a1:42:17:ee:aa:df:48:d5:27:
fa:1b:de:08:18:af:7c:f6:11:7d:d3:de:98:fb:d6:
26:35:f6:3c:7b:7e:64:ed:42:a1:15:a6:07:c6:71:
d7:57:d0:bb:52:6b:8a:66:ff:5f:da:4a:8e:1e:fe:
91:92:3c:7f:8f:e1:41:d7:eb:13:e8:7a:7f:03:82:
fe:bb:34:4a:16:41:ee:44:fa:eb:72:f0:84:99:74:
8c:00:ce:c1:76:24:f0:28:02:87:f6:bb:bc:16:90:
33:dd:b2:80:46:0d:f0:16:8e:00:eb:65:e7:c5:4d:
90:2b:32:32:bf:45:d8:4a:d3:cb:5f:5b:f9:78:4b:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:2B:7B:1F:A2:55:98:9B:C2:11:17:85:F4:C3:25:7B:60:3A:07
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46a0:14::/48
Signature Algorithm: sha256WithRSAEncryption
3f:3d:f6:f4:87:af:8d:24:c6:d4:d5:29:6a:f9:15:f3:77:bd:
87:b9:2b:75:f6:37:c3:37:da:1c:2b:fb:72:80:00:4d:ba:7e:
7b:bf:0d:fa:bc:d8:71:8f:54:2d:8a:00:a3:63:94:69:0f:97:
74:14:22:28:16:5f:73:00:dd:fb:c3:f6:1c:d6:97:52:2f:cd:
31:17:93:d9:f4:dd:2f:e5:e7:4a:5c:4f:c2:a3:3c:ad:f5:1f:
57:e8:03:4a:3e:4a:0b:72:40:8f:24:54:63:df:a1:50:44:6b:
e7:a6:2f:50:17:85:9d:e0:76:01:3f:de:8e:4d:d7:76:b0:a8:
ba:7f:19:90:67:3d:d0:ff:79:b3:c0:ef:88:e2:10:b8:db:b7:
89:a0:3d:be:cf:07:af:f4:e6:95:b6:4f:64:da:3d:48:d3:2c:
7f:5d:35:d8:e7:19:e9:b9:1a:86:01:cf:18:96:fe:d5:64:83:
69:54:f7:98:c6:bd:5b:0b:9b:17:8b:1d:55:77:c1:40:78:d6:
4c:4b:0f:49:b4:2c:68:cf:95:5b:2e:ba:3c:82:65:fb:bb:f2:
0d:bd:f4:e3:69:4e:4f:00:0a:b5:9c:77:ad:b1:05:68:1d:67:
de:7b:b8:aa:65:29:b0:d0:3b:15:a8:44:23:71:ff:77:ab:11:
01:3b:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:14 2025 by rpki-client