Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
File: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (raw, json)
Hash identifier: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=
Subject key identifier: 16:AE:5F:43:AF:DB:D8:0E:1D:88:3F:AD:9F:72:BD:B0:34:08:D9:9F
Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial: 2C75B0468A89E37568F01A8B49AE3F42D69C4092
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
Signing time: Fri 07 Feb 2025 03:00:02 +0000
ROA not before: Fri 07 Feb 2025 02:55:02 +0000
ROA not after: Fri 06 Feb 2026 03:00:02 +0000
asID: 141078
IP address blocks: 2406:7ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:b0:46:8a:89:e3:75:68:f0:1a:8b:49:ae:3f:42:d6:9c:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Validity
Not Before: Feb 7 02:55:02 2025 GMT
Not After : Feb 6 03:00:02 2026 GMT
Subject: CN=16AE5F43AFDBD80E1D883FAD9F72BDB03408D99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:27:94:e2:15:90:20:77:1c:eb:af:6d:2e:
b3:e5:41:d3:11:7c:e5:9d:09:0d:ef:41:b6:a5:a0:
22:b0:13:5d:e0:15:98:1c:e9:68:92:39:c6:b3:4b:
98:95:39:14:0c:f5:72:e6:b2:86:ca:cd:d6:75:0a:
c4:bb:52:c3:13:8b:ca:6c:d0:17:29:7a:84:25:1f:
66:06:58:e1:23:3d:70:f5:c4:bc:f7:cf:83:91:86:
c9:f2:06:13:98:0f:03:69:45:8b:d5:8b:45:5a:5f:
2d:f2:48:62:36:e2:5e:c7:81:4c:8a:a0:9c:f0:53:
ef:f4:28:16:85:02:b0:41:e8:d8:f2:a6:9a:4d:2e:
1c:84:99:9a:ad:91:ff:59:ea:dd:72:b5:eb:0e:fa:
83:89:1c:53:60:4c:07:db:ba:36:a5:bc:c8:3c:9b:
23:2c:0f:04:86:92:7f:b6:4a:06:36:3e:14:61:b0:
fc:58:0a:b5:fb:28:cf:f1:b0:02:5b:56:ec:3e:28:
48:30:f0:5e:0d:49:02:fb:ee:dc:97:df:61:b3:4a:
25:56:ee:f9:bf:de:fd:8d:bf:1c:8b:76:e3:a7:d5:
86:ea:59:98:62:97:af:05:06:c4:6f:58:21:92:3b:
0e:e5:ac:8c:33:0f:30:81:40:04:dd:bf:ec:63:fc:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:5F:43:AF:DB:D8:0E:1D:88:3F:AD:9F:72:BD:B0:34:08:D9:9F
X509v3 Authority Key Identifier:
keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
90:92:c1:ea:91:71:fe:4d:20:bf:e1:e9:f6:cd:13:a9:c1:19:
bf:78:69:3c:49:78:f9:63:09:ec:1f:9f:ac:40:3c:3e:74:5f:
12:ea:da:1a:dc:e4:ec:c2:e5:16:76:c4:e1:d6:02:08:1d:06:
3d:de:39:90:57:a3:10:60:a5:90:66:d7:28:05:f2:04:aa:e1:
25:c4:b9:c0:fc:34:54:7d:0e:dd:f9:6b:cf:9a:92:a7:35:18:
28:09:e8:ea:18:8a:74:3c:e3:dd:bc:f6:9d:b8:d4:c9:49:b7:
cc:6a:af:c3:27:7d:1f:ca:f8:39:21:70:be:1d:7f:49:04:66:
cb:d5:ce:03:fd:67:dd:34:d7:20:c3:8f:5a:a3:ed:de:cc:56:
bc:0a:a0:0d:4f:ef:36:2b:d6:6d:b9:4c:01:74:19:db:f1:73:
87:dc:8f:d2:04:00:03:87:00:91:c7:d0:ed:19:3f:8f:a7:de:
24:03:e8:c1:95:01:9f:ea:d2:d3:4b:c2:75:9c:d9:05:42:67:
ef:db:aa:c3:21:fb:56:33:3d:28:09:28:83:4a:a4:fb:27:6b:
63:b8:f9:1d:86:7f:d6:a1:3f:99:38:c8:13:b6:ac:7a:aa:29:
90:60:72:fd:0e:87:2c:9b:da:09:fc:e6:d0:7d:c5:87:8c:e5:
0e:ff:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:47 2025 by rpki-client