Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: lumVBGk+aw/9tORzynY/aiVJHvV2Bg6D5FpFWGyG99o=
Subject key identifier: DC:3A:E2:B5:9D:F3:B4:19:F7:C6:A9:EF:F7:62:D0:D4:4D:EC:39:06
Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial: 117429DD7BEB01473D3A1A33898885FDE3CCD49F
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa
Signing time: Tue 31 Dec 2024 05:00:00 +0000
ROA not before: Tue 31 Dec 2024 04:55:00 +0000
ROA not after: Tue 30 Dec 2025 05:00:00 +0000
asID: 139949
IP address blocks: 2405:aac0:221::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:74:29:dd:7b:eb:01:47:3d:3a:1a:33:89:88:85:fd:e3:cc:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Validity
Not Before: Dec 31 04:55:00 2024 GMT
Not After : Dec 30 05:00:00 2025 GMT
Subject: CN=DC3AE2B59DF3B419F7C6A9EFF762D0D44DEC3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:cb:53:06:59:81:9f:18:44:df:0e:3a:35:
4c:93:ab:6f:9b:9a:56:53:36:20:67:de:1b:6b:17:
f6:96:2b:a5:20:e1:9e:0d:18:5d:01:c9:60:b7:77:
e4:ac:84:5d:b8:71:41:5b:60:42:be:a0:bf:4e:96:
80:29:a1:d0:ec:ab:51:5d:d2:01:9e:0a:fc:39:c4:
a3:ec:1b:51:7c:23:10:96:b8:f2:3d:d9:e9:83:ca:
63:51:cf:c8:c3:c0:f7:6f:83:55:f9:31:9c:c8:e5:
2d:56:22:5b:e2:22:ab:de:57:76:38:29:bc:70:31:
9a:16:82:a1:95:de:0b:f6:f4:fb:52:32:bc:3a:1b:
22:66:03:36:07:9a:1b:a6:90:1c:79:26:cc:4b:c2:
3a:76:2f:0b:49:62:59:9e:32:1c:1f:3a:82:09:5c:
80:47:02:c1:ac:6c:32:64:55:e0:e5:86:7a:fb:d4:
aa:a7:40:4a:d4:5c:ef:84:61:93:1d:2b:c9:00:8f:
d4:1f:ce:ed:dc:29:6e:39:57:13:c3:bf:67:1b:26:
9c:3c:94:41:f0:74:77:92:06:2b:a9:17:dc:f0:64:
eb:56:94:c4:80:a1:d6:af:be:e0:28:86:a7:20:e6:
88:f9:51:da:06:9d:cb:9c:94:d4:27:9c:c6:e1:3a:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:E2:B5:9D:F3:B4:19:F7:C6:A9:EF:F7:62:D0:D4:4D:EC:39:06
X509v3 Authority Key Identifier:
keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:221::/48
Signature Algorithm: sha256WithRSAEncryption
55:48:e1:c2:b1:13:6e:fc:41:ff:46:5d:43:11:79:b6:1c:25:
a3:af:fb:2d:2a:7f:e9:84:fb:a9:2d:1b:30:20:de:48:67:62:
50:16:43:d0:a0:24:3f:cb:a3:88:ea:d0:b0:a2:ce:cf:08:b4:
aa:95:f0:1d:dc:ee:5b:58:07:2a:7e:de:8f:8a:23:b0:a8:92:
f2:e9:8c:39:85:cd:48:96:52:ae:49:5e:ef:b0:da:22:d9:39:
e8:02:ae:38:67:ed:0d:be:d6:d4:1f:5f:05:59:bd:f1:42:dc:
4e:a1:5f:7f:53:54:9f:e9:16:b9:61:a6:a8:29:66:bc:4d:ba:
54:91:07:91:42:fd:2c:35:13:39:11:16:87:37:76:e9:b4:09:
d1:58:b0:64:e0:c2:6e:00:a9:d0:93:d0:94:e7:18:ea:d3:6d:
74:f5:cc:e1:e7:5d:e3:26:72:8d:33:93:9c:06:69:d9:40:48:
77:f5:52:62:7a:79:c9:f7:5f:52:f9:44:fd:4a:20:e3:78:ad:
56:0b:75:50:63:bb:44:1b:ae:a8:0f:8d:d3:43:6d:b2:81:7e:
5d:53:e4:92:57:11:4a:38:43:b6:c5:9a:19:42:b1:f8:87:3a:
09:80:fc:db:10:b8:c5:c7:ba:02:60:b7:8d:e6:d7:44:34:84:
75:83:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:02 2025 by rpki-client