Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa
File: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (raw, json)
Hash identifier: HyMWadhCrBlbrvw7eV4dA67xhQ9znG8zfhfFTeZs2rs=
Subject key identifier: DA:06:17:5C:72:54:CC:C7:D9:9C:A2:AC:5F:F0:9C:C0:94:FA:16:84
Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial: 033797DE9AE0EF5C2FC6992A91A3799282EF9849
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa
Signing time: Tue 30 Jul 2024 04:00:02 +0000
ROA not before: Tue 30 Jul 2024 03:55:02 +0000
ROA not after: Tue 29 Jul 2025 04:00:02 +0000
asID: 141073
IP address blocks: 2406:7740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:37:97:de:9a:e0:ef:5c:2f:c6:99:2a:91:a3:79:92:82:ef:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
Validity
Not Before: Jul 30 03:55:02 2024 GMT
Not After : Jul 29 04:00:02 2025 GMT
Subject: CN=DA06175C7254CCC7D99CA2AC5FF09CC094FA1684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:12:f2:da:0a:77:f4:02:15:6a:31:05:76:
a4:33:23:13:db:d3:79:b5:b0:fb:b9:15:62:ae:04:
34:3c:0d:2b:51:ba:82:37:cc:84:f6:50:13:a1:c2:
04:25:6c:eb:c7:dd:ab:03:9e:d2:0d:d1:8d:19:38:
f0:23:14:dd:c9:69:e3:a9:c2:61:ed:57:06:6d:b6:
35:df:4e:20:72:45:61:25:8c:e1:cc:26:c7:fa:7e:
35:86:03:b8:7a:ad:52:3a:f2:86:c9:73:db:c0:3f:
84:15:de:b3:3e:3e:4c:4a:a0:1b:d7:b7:37:8e:34:
6a:53:ae:3f:68:06:ef:9f:60:55:28:59:c1:62:ce:
df:50:72:4e:64:22:5e:89:e3:50:9b:6f:04:ba:89:
76:1e:7f:13:b7:39:87:f8:7b:54:e8:df:56:89:21:
c4:f0:11:69:b7:b4:0d:28:b8:04:94:26:52:ab:41:
d4:66:f3:49:d5:a2:08:c1:db:63:14:1c:9d:9a:a0:
0e:be:fb:a9:cd:bb:b5:e6:73:f5:69:2f:4b:d9:db:
d5:f6:84:0b:1d:fa:95:4b:e0:e3:59:47:fb:34:82:
a8:6b:a6:36:17:b5:cd:81:53:ea:38:37:30:aa:de:
95:fb:2a:38:d1:cc:b5:72:ef:d4:03:1a:74:56:2c:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:17:5C:72:54:CC:C7:D9:9C:A2:AC:5F:F0:9C:C0:94:FA:16:84
X509v3 Authority Key Identifier:
keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7740::/32
Signature Algorithm: sha256WithRSAEncryption
60:45:de:37:72:f2:28:c2:91:1b:0b:c2:1e:06:21:f9:34:3a:
ac:bd:25:8d:a3:f6:99:f6:fd:b3:8b:1d:c0:6d:4c:0a:c4:4d:
81:03:03:68:58:3d:a8:8f:3e:0b:b5:1a:4b:43:0b:3f:ec:ed:
49:58:dc:c9:c6:9b:8b:7d:7d:62:4b:62:ca:03:26:16:fa:53:
18:ff:7d:0d:34:d1:f5:f7:0c:7d:10:19:eb:a2:95:80:74:fe:
0c:fe:51:06:ca:33:ec:cc:52:af:8d:73:66:bf:2e:9c:43:90:
4b:1f:d8:f2:13:9e:ff:d1:c3:a9:66:ef:a6:cc:48:35:96:4b:
a2:cb:d0:1a:be:ba:d9:42:d8:fe:10:8b:78:dc:0b:2d:ca:a8:
76:8b:e4:ea:98:7f:10:0d:13:9d:34:16:16:12:6e:5f:37:d0:
0d:76:f0:da:63:3d:4f:8d:30:fa:57:dc:26:13:5c:26:f9:6d:
37:eb:c3:c7:c0:de:5f:e5:2f:3b:04:62:e2:5d:2d:ad:63:b8:
f3:00:9d:2b:76:3e:6d:6c:c6:7d:41:21:9b:42:be:73:7b:d6:
5d:76:b3:39:ed:ba:35:7a:9e:0e:ea:4a:2a:f6:f6:9a:0e:89:
8e:1e:2c:50:09:3d:d5:43:f9:d9:69:40:51:33:fe:b4:94:b3:
1e:f3:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:31 2025 by rpki-client