Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: WFd+xuIHy/wkgLOHia1FObSOnZ/KV0GWg+B0e2pCXJs=
Subject key identifier: C1:DD:18:F0:FC:6D:4A:3D:86:2D:6F:9C:1C:06:4F:45:16:EE:35:70
Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial: 1C3E158578F266A339DC26F594CF2CEC9639CE8F
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa
Signing time: Fri 29 Nov 2024 05:00:01 +0000
ROA not before: Fri 29 Nov 2024 04:55:01 +0000
ROA not after: Fri 28 Nov 2025 05:00:01 +0000
asID: 58552
IP address blocks: 2404:fd00:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3e:15:85:78:f2:66:a3:39:dc:26:f5:94:cf:2c:ec:96:39:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Validity
Not Before: Nov 29 04:55:01 2024 GMT
Not After : Nov 28 05:00:01 2025 GMT
Subject: CN=C1DD18F0FC6D4A3D862D6F9C1C064F4516EE3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:97:66:6f:05:a5:f7:de:e3:b7:fb:ba:96:
55:2f:e7:47:f1:6a:63:90:d0:2f:37:cb:d5:4a:8b:
71:69:0a:0a:2f:eb:af:1a:39:f8:63:09:fa:cf:63:
ba:50:64:e6:1e:fd:7a:b9:9a:be:cd:57:f6:74:f7:
f3:61:fc:dd:4c:5d:b2:74:d4:68:d2:ba:2d:9b:99:
c1:25:2b:94:ce:7f:f4:9c:3f:bd:75:79:d8:56:4a:
51:af:a4:a9:3c:56:5d:3a:be:92:b4:0a:09:b9:44:
0b:48:9d:0d:ef:1c:78:80:a0:35:e5:f9:d7:26:b1:
e3:d7:9c:57:c8:f2:8a:0b:de:47:d8:c6:b3:bd:8c:
70:4a:77:46:e5:f1:87:8a:a5:17:be:35:d7:9c:f1:
d5:f6:bf:e5:e3:5d:bf:a5:2d:d3:cf:f1:75:cd:a4:
4f:a3:04:af:e1:81:cd:af:50:20:cf:2b:30:62:2f:
68:37:d2:cf:c7:48:b8:b1:0b:b3:19:47:53:c3:46:
84:b5:a6:9b:07:4a:a7:ee:f6:4d:41:37:f7:21:0e:
73:df:42:9c:ec:2b:e3:a5:97:db:ba:fa:98:50:bf:
0f:29:b4:ce:7a:20:87:3f:4d:2a:08:cf:86:f3:75:
b2:98:90:f3:54:a2:0b:d1:1e:5b:b3:40:db:c3:9e:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:18:F0:FC:6D:4A:3D:86:2D:6F:9C:1C:06:4F:45:16:EE:35:70
X509v3 Authority Key Identifier:
keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:11::/48
Signature Algorithm: sha256WithRSAEncryption
1b:48:35:93:4a:13:4c:3b:f2:9c:81:a5:91:b9:3f:f1:aa:c4:
84:b6:fe:79:c7:00:b0:a1:b7:6c:01:ea:70:d1:b0:9b:58:5d:
d1:9a:05:6f:0b:f1:f0:ea:c0:dd:41:88:1c:5d:50:48:a4:1a:
4f:fc:74:a7:5c:d7:9d:73:24:6f:ba:8b:20:58:81:37:4f:2a:
28:61:7c:1c:ae:3f:5b:0a:c8:e5:7d:12:1e:c4:d5:c7:50:cc:
8b:bb:59:8a:95:b4:e3:7c:b6:ed:f1:26:a5:aa:53:b5:d0:5e:
78:59:1b:77:50:15:3a:1b:e4:0c:3a:5c:ce:0c:4e:3a:8b:33:
d4:5e:8c:10:5c:a2:84:16:07:58:14:c2:64:2f:6a:3d:e7:8e:
a6:f2:40:6e:1d:02:73:b7:d7:e5:12:e3:1d:aa:4b:bd:4f:16:
a4:a0:55:74:07:e3:6e:d5:65:43:83:74:ed:ed:2c:e0:64:53:
c5:87:71:93:1c:ac:bd:aa:0e:ab:1d:00:31:19:51:de:ff:77:
e2:64:5b:5a:25:34:a7:63:c7:f3:72:bd:a6:33:3e:5c:2b:80:
b3:79:16:62:42:23:e3:07:3a:9a:1f:5d:0e:9a:b4:b3:af:ee:
5b:40:a3:5f:8b:7d:eb:a3:f2:c5:ec:fc:65:d6:c9:63:7e:a6:
38:d3:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:45 2025 by rpki-client