Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa
File: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier: b5phOP/2RRxaXvlqDM+8BPCiSi5fs6R0SKsOK+zDGmc=
Subject key identifier: 20:0D:2C:F6:41:30:BD:53:86:28:B5:4F:6A:2F:6D:C3:5A:99:21:96
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 3B407AB01CF471A0FBDD16D5FCCFE2B26905DD77
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa
Signing time: Fri 09 Aug 2024 08:45:50 +0000
ROA not before: Fri 09 Aug 2024 08:40:50 +0000
ROA not after: Fri 08 Aug 2025 08:45:50 +0000
asID: 147137
IP address blocks: 2400:46a0:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:40:7a:b0:1c:f4:71:a0:fb:dd:16:d5:fc:cf:e2:b2:69:05:dd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 9 08:40:50 2024 GMT
Not After : Aug 8 08:45:50 2025 GMT
Subject: CN=200D2CF64130BD538628B54F6A2F6DC35A992196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:a8:d6:d7:1d:3b:34:e4:9a:ab:8a:c2:60:
4a:43:4a:a2:ce:2c:b7:83:5a:fe:ff:28:ed:27:33:
9c:b5:cc:02:2b:c7:8a:0f:d2:f4:30:e1:b1:76:81:
9c:73:08:64:4b:ae:a4:f6:8a:12:ae:51:e4:d1:22:
fd:e6:7a:01:5f:28:17:a0:64:5c:56:89:6f:36:f9:
b5:5e:d3:eb:a7:19:b3:a3:27:b1:33:19:39:fd:18:
03:97:07:24:2f:f8:f7:de:07:1a:e6:65:58:ad:87:
f9:96:91:e8:92:11:ae:da:39:34:a4:60:67:b8:12:
b9:a5:a2:70:1b:44:b5:04:d5:8b:23:3c:3e:41:08:
10:a3:fc:4f:71:b9:76:09:61:29:56:6f:75:9a:d2:
6f:94:e4:b4:0e:a1:7e:8a:0a:ed:af:6a:cd:f6:44:
31:9e:c6:f5:17:e1:39:44:0f:b2:10:4b:90:15:2d:
35:f4:79:df:34:20:90:7c:b4:d0:d3:6a:18:ad:ff:
8f:ca:b7:de:38:9e:b9:ad:3d:03:ed:55:ff:8d:fe:
01:25:b3:64:52:4d:41:f4:5d:12:30:f0:a8:84:98:
d4:5c:a1:af:9f:a2:b6:ae:c5:cd:e8:57:79:02:fc:
0e:3f:f1:8d:a1:84:5e:f8:df:27:3b:db:95:b7:45:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:2C:F6:41:30:BD:53:86:28:B5:4F:6A:2F:6D:C3:5A:99:21:96
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46a0:21::/48
Signature Algorithm: sha256WithRSAEncryption
0b:94:bc:5c:6d:fa:3c:32:bb:74:5d:15:e8:c3:eb:94:54:75:
28:02:79:66:55:0a:ce:fb:b2:33:fc:65:7d:2b:d9:08:0d:0f:
c7:00:a1:60:d3:8b:46:6a:dd:8e:39:22:7c:37:1b:b6:06:e5:
21:68:5e:6c:2b:cb:8b:af:57:7f:0a:43:0d:23:91:ab:00:4c:
a3:ea:c3:58:6e:29:f8:3e:41:c7:e3:ee:8c:83:12:1e:54:e2:
c7:97:a1:77:31:71:8d:93:64:64:fe:53:84:90:00:64:c0:fb:
cd:22:5b:2b:77:35:bb:e6:d1:f1:cd:11:9a:fe:1c:5b:d7:87:
01:b1:3e:3b:3a:ff:f7:63:2b:21:7c:45:64:b2:df:f3:80:ba:
6d:dd:c9:b4:95:b2:1c:66:5b:da:d4:6c:a9:bd:b7:f8:4a:24:
56:d8:27:55:ef:89:be:b3:b5:7e:ef:44:18:b1:ce:b8:32:ee:
84:81:1d:8d:8e:b7:70:6d:3b:90:da:d5:20:62:48:5b:31:2b:
cd:32:f4:b7:e3:e3:27:90:1d:97:99:9f:d4:86:a8:58:92:93:
15:51:05:4e:f1:1b:ba:2c:5d:0b:38:40:05:de:3b:d8:4a:dc:
49:71:6d:c5:51:46:bd:f4:12:90:84:4a:16:f9:1e:13:28:0a:
bd:f6:0c:cb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUO0B6sBz0caD73RbV/M/ismkF3XcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNDA4MDkwODQwNTBaFw0yNTA4MDgwODQ1NTBaMDMxMTAvBgNV
BAMTKDIwMEQyQ0Y2NDEzMEJENTM4NjI4QjU0RjZBMkY2REMzNUE5OTIxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0qjW1x07NOSaq4rCYEpDSqLO
LLeDWv7/KO0nM5y1zAIrx4oP0vQw4bF2gZxzCGRLrqT2ihKuUeTRIv3megFfKBeg
ZFxWiW82+bVe0+unGbOjJ7EzGTn9GAOXByQv+PfeBxrmZVith/mWkeiSEa7aOTSk
YGe4ErmlonAbRLUE1YsjPD5BCBCj/E9xuXYJYSlWb3Wa0m+U5LQOoX6KCu2vas32
RDGexvUX4TlED7IQS5AVLTX0ed80IJB8tNDTahit/4/Kt944nrmtPQPtVf+N/gEl
s2RSTUH0XRIw8KiEmNRcoa+forauxc3oV3kC/A4/8Y2hhF743yc725W3RYJLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIA0s9kEwvVOGKLVPai9tw1qZIZYwHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i
Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA
ITANBgkqhkiG9w0BAQsFAAOCAQEAC5S8XG36PDK7dF0V6MPrlFR1KAJ5ZlUKzvuy
M/xlfSvZCA0PxwChYNOLRmrdjjkifDcbtgblIWhebCvLi69XfwpDDSORqwBMo+rD
WG4p+D5Bx+PujIMSHlTix5ehdzFxjZNkZP5ThJAAZMD7zSJbK3c1u+bR8c0Rmv4c
W9eHAbE+Ozr/92MrIXxFZLLf84C6bd3JtJWyHGZb2tRsqb23+EokVtgnVe+JvrO1
fu9EGLHOuDLuhIEdjY63cG07kNrVIGJIWzErzTL0t+PjJ5Adl5mf1IaoWJKTFVEF
TvEbuixdCzhABd472ErcSXFtxVFGvfQSkIRKFvkeEygKvfYMyw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:13:05 2025 by rpki-client