Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa
File: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (raw, json)
Hash identifier: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=
Subject key identifier: 2A:94:40:2F:48:5E:8F:B8:4C:A7:80:9D:15:78:DB:2F:02:5D:5A:F9
Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial: 767AD9E161FDB171C969C19AA7EC763D02B2982F
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa
Signing time: Tue 14 Jan 2025 03:00:02 +0000
ROA not before: Tue 14 Jan 2025 02:55:02 +0000
ROA not after: Tue 13 Jan 2026 03:00:02 +0000
asID: 133827
IP address blocks: 2404:a640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7a:d9:e1:61:fd:b1:71:c9:69:c1:9a:a7:ec:76:3d:02:b2:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Validity
Not Before: Jan 14 02:55:02 2025 GMT
Not After : Jan 13 03:00:02 2026 GMT
Subject: CN=2A94402F485E8FB84CA7809D1578DB2F025D5AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:ef:23:71:2b:fa:c4:95:3c:91:31:08:eb:
06:f1:d9:90:04:92:c5:48:fa:8a:32:6f:b8:0e:a0:
b9:2a:d3:33:cd:1e:c9:24:4c:77:6d:2b:76:b6:24:
c1:ba:eb:65:f6:88:90:96:ea:0c:cf:77:97:04:42:
31:06:d5:e8:e3:47:1f:70:8e:e7:0f:5b:41:f9:a9:
3a:ba:d8:e0:fa:5c:73:fe:39:d9:37:e7:86:93:d5:
1d:83:aa:9a:ea:2a:28:3b:64:1e:70:be:fe:27:26:
c2:c9:67:43:22:e7:19:f8:c8:33:28:fc:f6:e7:96:
c7:90:27:b0:d2:05:ed:23:1e:9c:c3:46:2b:de:51:
8a:3b:a9:ac:46:59:48:d6:51:52:19:fd:ad:82:3a:
b4:48:00:a6:8f:8e:a3:c2:55:19:35:09:4b:2e:b8:
ff:a2:02:03:fd:e7:ff:24:0d:39:e6:65:22:5c:8c:
66:dd:68:a2:4b:1d:53:a3:c7:23:f7:67:23:4b:d3:
4f:0f:ed:19:fb:90:73:cd:0c:7d:76:10:6b:40:72:
10:19:e6:5a:2b:2c:e4:e1:a5:91:9f:86:53:e4:95:
01:c6:f4:dd:b7:69:9b:27:69:da:1a:75:6b:b0:2f:
35:8e:77:ec:c4:ed:1b:16:09:78:ce:6c:4f:f5:98:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:40:2F:48:5E:8F:B8:4C:A7:80:9D:15:78:DB:2F:02:5D:5A:F9
X509v3 Authority Key Identifier:
keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:a640::/32
Signature Algorithm: sha256WithRSAEncryption
99:66:f8:8f:4c:f1:11:6f:df:3c:80:cf:1d:54:70:be:4e:9f:
de:b3:65:98:f6:b0:50:40:11:f0:fa:e4:87:8d:30:35:5a:b7:
1a:80:a8:88:73:eb:63:8a:84:18:35:95:91:df:cf:a0:6b:89:
7e:c9:07:59:8a:01:dc:2b:c8:e3:57:3c:aa:db:42:ce:a0:01:
76:1d:ae:2b:6e:4a:75:47:a9:86:97:26:81:ba:de:8f:bf:d1:
4a:89:a4:68:6f:72:02:e6:4f:21:1e:28:ec:44:16:68:ad:6a:
17:c5:54:06:21:fc:fc:41:20:f7:87:96:63:42:b7:be:64:19:
7a:fa:2f:0a:91:1c:50:ed:21:91:f6:0f:36:7b:bb:d0:75:f6:
9b:bd:6e:ae:01:0f:99:c0:c0:74:b6:01:7f:4f:cf:53:a9:dd:
59:6b:7e:c9:39:59:8c:0c:72:be:98:2b:d9:6c:f9:00:0f:1e:
37:6e:f6:b8:c6:99:99:71:48:f0:5c:26:66:1e:01:23:54:8c:
e2:c6:1b:a6:34:e9:69:39:de:db:dd:1a:1f:12:3b:c9:0e:80:
5f:fc:91:f1:9e:2a:9f:6a:35:fc:3a:bb:8b:17:b1:76:69:d1:
ec:27:6a:84:fd:5a:ef:ea:7c:1a:7d:f9:24:75:f0:14:e4:5c:
ed:25:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:07 2025 by rpki-client