Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa
File: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (raw, json)
Hash identifier: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=
Subject key identifier: 29:E4:17:5F:2D:ED:E2:F9:65:F6:FE:F7:F2:08:83:29:E6:FE:C5:DB
Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Certificate serial: 2B647BC792DC699E74CE00327C568F0C3F84BC77
Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa
Signing time: Fri 21 Mar 2025 23:00:00 +0000
ROA not before: Fri 21 Mar 2025 22:55:00 +0000
ROA not after: Fri 20 Mar 2026 23:00:00 +0000
asID: 150980
IP address blocks: 2001:df2:74c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:64:7b:c7:92:dc:69:9e:74:ce:00:32:7c:56:8f:0c:3f:84:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Validity
Not Before: Mar 21 22:55:00 2025 GMT
Not After : Mar 20 23:00:00 2026 GMT
Subject: CN=29E4175F2DEDE2F965F6FEF7F2088329E6FEC5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:29:e2:ca:4b:bc:a0:38:16:38:d3:d2:75:
d6:d6:e4:d9:2e:ed:f6:17:1d:56:52:47:58:2f:2a:
6d:79:6c:d9:2f:9b:7f:b3:bd:2b:f0:1b:d1:73:40:
dd:97:4f:4b:b5:e0:41:c6:09:2e:a7:43:0e:ef:94:
dc:84:f9:c4:7f:45:81:e2:83:2b:50:02:dd:f2:26:
c6:47:31:53:18:37:7e:76:17:7a:56:81:fc:b2:23:
11:92:78:5c:50:dc:e3:8e:78:55:8d:1a:ed:78:0b:
ba:68:e2:76:fb:43:4a:df:36:bd:24:59:e8:0c:ce:
0c:41:ef:72:10:e9:66:4a:e0:ae:a7:8b:72:a6:4b:
30:0d:29:3b:f1:00:14:c8:42:a8:bd:94:88:d2:cf:
7c:d8:d5:e3:6c:03:9f:0e:8e:18:01:4a:72:05:2b:
b9:23:12:c6:32:49:3c:c6:b6:c2:7c:62:f1:41:2c:
39:99:d5:9c:97:87:79:71:63:dd:61:52:3e:9f:7e:
cc:7d:6d:6d:6a:ba:25:f1:14:33:8a:88:69:78:03:
56:a2:bd:d6:3d:c2:1c:09:f1:d0:ec:d4:70:2e:28:
c2:9a:e1:45:2e:c3:12:07:fa:7c:25:6c:13:df:7e:
a8:7b:8b:4e:a9:10:cb:2e:7a:f2:2a:fe:f8:05:89:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E4:17:5F:2D:ED:E2:F9:65:F6:FE:F7:F2:08:83:29:E6:FE:C5:DB
X509v3 Authority Key Identifier:
keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
85:d8:a8:a2:4f:4c:4f:cf:cf:1c:58:28:e8:d0:4c:e9:44:4d:
47:46:7c:8a:60:9a:d9:db:e5:b8:6e:0b:0a:3e:5c:67:f0:e0:
d6:af:84:df:b6:e8:47:de:e0:cf:5e:9c:fd:42:67:5a:06:97:
cb:03:fa:48:bb:44:f2:5a:d4:e7:23:9c:86:1c:8f:8d:da:98:
7a:99:43:46:c7:e1:8e:5f:9e:1b:26:d7:bc:82:67:36:27:e5:
e0:9f:7a:8b:d1:60:31:90:b5:be:6c:0b:ca:16:fd:64:92:61:
6f:79:fa:27:c6:da:f3:6b:0d:55:70:74:81:fc:2d:fc:c7:e2:
38:83:4c:c1:2f:3c:6e:82:d0:fd:05:03:4f:4d:aa:8e:8b:54:
40:5b:89:7d:50:3c:6d:0b:ef:82:88:43:0f:9c:0d:46:16:d7:
6f:cc:03:b4:e5:2c:ba:20:75:e7:39:70:ed:bf:73:43:aa:0d:
b3:5a:86:d6:63:ac:22:36:d0:4b:4d:aa:de:2b:42:66:bc:82:
b4:30:12:d2:a2:11:3f:fe:9e:d6:68:e1:56:ee:93:66:e1:7d:
79:aa:46:07:3f:4a:e7:bf:66:b7:92:6a:57:38:fa:e9:99:bd:
81:01:2e:83:64:c1:84:ab:c6:07:2e:00:b0:ee:93:e8:29:c8:
30:a1:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:39 2025 by rpki-client