Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132333a3a2f34382d3438203d3e20313338383636.roa
File: 323430343a666563303a3132333a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier: JM88uVpcmDT22R7k2M2NrOBG9Wj7tT75M3yxhap8YUA=
Subject key identifier: B9:48:1B:67:00:AB:52:C3:80:99:01:96:34:7A:A9:14:2E:96:8E:B0
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 2A23D07F97FB340810665C2AF18C5E9FAE046E2D
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132333a3a2f34382d3438203d3e20313338383636.roa
Signing time: Sun 05 Feb 2023 18:04:22 +0000
ROA not before: Sun 05 Feb 2023 17:59:22 +0000
ROA not after: Sun 04 Feb 2024 18:04:22 +0000
asID: 138866
IP address blocks: 2404:fec0:123::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:23:d0:7f:97:fb:34:08:10:66:5c:2a:f1:8c:5e:9f:ae:04:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Feb 5 17:59:22 2023 GMT
Not After : Feb 4 18:04:22 2024 GMT
Subject: CN=B9481B6700AB52C380990196347AA9142E968EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:f1:bd:41:e3:6f:d5:41:99:60:46:05:d7:
26:84:1b:38:51:e5:6c:54:51:89:68:fa:0c:a7:fa:
35:70:b0:43:87:17:0d:bc:75:3e:d5:93:6b:c5:b1:
35:40:45:08:b4:1b:ed:0b:bf:45:7f:6c:2b:f6:3e:
10:e7:1c:74:3e:76:98:e0:48:26:c0:33:b5:14:ef:
1d:20:36:35:04:d8:5c:93:38:9b:a9:6c:93:81:7c:
89:fb:15:06:e6:df:54:5e:67:28:08:85:8d:ac:ee:
08:bb:08:c7:b3:2c:d7:7b:7c:e6:9a:7c:f3:dd:3f:
95:ce:28:ba:88:02:f5:3c:17:9e:b8:2f:16:02:9e:
69:ba:8a:e7:ec:30:08:75:fc:f8:0d:b7:ca:d5:2e:
f8:d2:67:45:ab:13:f0:c6:ef:07:5d:81:44:b1:59:
08:3f:1b:cb:08:fa:c7:30:4a:ca:df:e3:96:75:2e:
ac:63:30:c7:46:ee:6b:2f:19:20:24:b4:5a:d6:26:
b6:eb:1b:b1:4d:0b:83:27:34:de:41:9c:31:82:61:
8a:fa:72:9c:ee:0a:40:42:db:5d:06:41:8b:e6:b4:
08:a6:79:71:86:be:7a:f7:d3:0d:66:8f:d9:83:ea:
8e:ea:d7:a1:81:cb:40:4a:4d:1d:be:1a:0c:2b:67:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:1B:67:00:AB:52:C3:80:99:01:96:34:7A:A9:14:2E:96:8E:B0
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132333a3a2f34382d3438203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fec0:123::/48
Signature Algorithm: sha256WithRSAEncryption
36:f4:5b:6d:cb:67:25:8d:15:25:14:07:31:9e:ec:83:49:c2:
a2:8b:0f:40:93:54:13:0c:0c:b4:76:01:8b:94:5c:4c:40:b5:
32:62:55:2b:d7:04:d1:7c:77:5a:23:33:13:7f:2f:60:90:08:
86:15:28:f3:da:1b:29:0b:f3:78:4a:65:53:29:d0:89:c5:d3:
96:26:28:d8:5a:9a:fa:1a:ad:de:5c:77:8f:4d:62:58:ed:a4:
3d:cb:8a:3e:0f:c2:df:76:57:cb:76:49:ef:1a:69:a6:2e:79:
a9:92:d7:ca:a8:5a:bb:43:fe:ce:8f:90:c3:aa:21:bd:7d:74:
d1:fa:8d:92:f4:c9:a5:b6:39:89:b0:54:4a:b9:3c:3d:e2:d3:
50:bd:44:47:8e:ce:df:9c:bc:59:fc:8f:9e:7f:95:ba:f7:4a:
10:19:bb:39:a6:f4:d3:22:73:49:ea:93:91:87:1f:cb:cc:90:
eb:88:08:82:7d:a8:b2:55:36:6d:00:3a:53:81:42:e9:95:90:
51:56:bf:98:35:c2:36:a5:63:6e:87:e7:55:11:00:91:7e:79:
fe:b0:9d:88:36:98:9b:89:37:d6:13:94:e7:62:7b:e9:b1:f4:
82:05:ce:06:5f:04:63:d5:89:71:bb:76:62:f2:34:3b:b4:6b:
c6:ab:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:32 2025 by rpki-client