Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa
File: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (raw, json)
Hash identifier: MsU4cnUd8hPfz721LDwHCV8jAAANvPwAWJVVyud6fK8=
Subject key identifier: D0:43:59:9D:58:6D:41:68:4F:7D:A8:FB:E3:B4:10:30:27:92:F4:96
Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254
Certificate serial: 7614086C2E6E5726A049E5CB2333BCADDCEB9EFF
Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa
Signing time: Tue 10 Sep 2024 08:01:08 +0000
ROA not before: Tue 10 Sep 2024 07:56:08 +0000
ROA not after: Tue 09 Sep 2025 08:01:08 +0000
asID: 139995
IP address blocks: 2001:df2:e580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:14:08:6c:2e:6e:57:26:a0:49:e5:cb:23:33:bc:ad:dc:eb:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254
Validity
Not Before: Sep 10 07:56:08 2024 GMT
Not After : Sep 9 08:01:08 2025 GMT
Subject: CN=D043599D586D41684F7DA8FBE3B410302792F496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:48:ba:f9:c7:41:47:f9:af:83:8e:29:21:
e2:c0:27:bf:cb:de:fb:24:c0:40:6f:97:79:62:dc:
0c:8f:39:9b:92:2f:7b:6a:6f:e9:23:59:83:28:87:
c7:b2:cb:93:55:12:33:78:a5:61:8a:03:ff:1e:41:
9f:67:4c:f1:41:e8:ea:0b:74:08:fb:75:98:d0:a9:
b8:5d:47:4b:6e:f7:6d:fd:7c:82:0d:14:c2:d4:b3:
28:3b:b2:20:eb:8d:63:80:72:ab:2e:9e:a7:37:cd:
f6:de:26:d8:e3:0d:00:fb:9d:a2:f6:b0:5b:cf:3a:
11:91:15:75:ae:4a:2b:6a:cd:fc:86:99:0b:9a:c6:
4c:07:c3:26:fe:7c:0e:16:e9:6e:55:aa:1f:32:64:
f5:44:f7:bb:a4:35:35:67:fc:07:8e:52:cd:d9:6b:
1d:ad:57:af:02:ae:02:b1:3f:dd:77:4c:e9:1a:32:
40:b2:6e:bf:26:78:50:cb:1d:9b:ae:32:45:0f:4a:
0a:ad:11:ac:22:46:d2:c4:1a:d0:85:27:01:bd:3e:
22:b5:bc:cd:a0:67:20:84:9d:b7:d9:49:de:93:4d:
a2:ca:9a:43:8e:f9:e7:d6:94:2b:b6:1e:86:02:c7:
37:6d:af:11:3e:96:a1:9a:84:1d:9d:cf:15:ab:25:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:59:9D:58:6D:41:68:4F:7D:A8:FB:E3:B4:10:30:27:92:F4:96
X509v3 Authority Key Identifier:
keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:e580::/48
Signature Algorithm: sha256WithRSAEncryption
a1:db:09:fb:0b:19:5a:ec:75:4e:d2:07:f9:ee:59:11:4b:27:
4a:72:5f:45:d4:33:25:52:b6:ba:24:6c:51:10:84:af:f1:c6:
24:68:b5:63:12:64:33:87:91:c2:31:f5:41:ad:21:41:3a:00:
07:f3:a9:95:dd:33:65:dd:87:21:6c:75:b2:83:45:08:0b:ad:
d5:ae:50:4f:d8:30:84:0a:1e:c5:30:a9:fa:f7:59:55:5b:30:
19:f3:fd:f6:45:8d:68:86:a8:52:4a:4e:38:ef:94:90:1b:30:
c0:7e:90:45:b7:43:1f:93:77:3f:21:85:65:d7:97:92:69:b6:
08:4d:a5:0a:1c:57:55:44:9a:39:c7:a7:c4:b5:c9:57:be:a6:
ac:2e:f3:54:13:68:cf:5d:19:60:aa:10:d4:f5:de:9a:d6:90:
49:af:c8:92:0f:ae:c9:81:1b:31:42:56:5e:47:c9:c5:00:88:
f0:76:37:58:d8:4d:14:62:9b:8b:d0:cb:f0:17:85:75:bd:01:
2e:2b:94:62:cb:cc:bc:2b:ee:c2:3f:9b:39:a4:71:16:ef:a1:
21:d1:2a:f8:3a:de:f2:14:a0:10:bb:8f:43:36:ef:62:96:c2:
af:82:07:58:26:4d:91:0e:1d:f1:fb:e9:b3:52:05:51:84:78:
0a:fe:bd:58
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdhQIbC5uVyagSeXLIzO8rdzrnv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND
RTBCNjI1NDAeFw0yNDA5MTAwNzU2MDhaFw0yNTA5MDkwODAxMDhaMDMxMTAvBgNV
BAMTKEQwNDM1OTlENTg2RDQxNjg0RjdEQThGQkUzQjQxMDMwMjc5MkY0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvUi6+cdBR/mvg44pIeLAJ7/L
3vskwEBvl3li3AyPOZuSL3tqb+kjWYMoh8eyy5NVEjN4pWGKA/8eQZ9nTPFB6OoL
dAj7dZjQqbhdR0tu9239fIINFMLUsyg7siDrjWOAcqsunqc3zfbeJtjjDQD7naL2
sFvPOhGRFXWuSitqzfyGmQuaxkwHwyb+fA4W6W5Vqh8yZPVE97ukNTVn/AeOUs3Z
ax2tV68CrgKxP913TOkaMkCybr8meFDLHZuuMkUPSgqtEawiRtLEGtCFJwG9PiK1
vM2gZyCEnbfZSd6TTaLKmkOO+efWlCu2HoYCxzdtrxE+lqGahB2dzxWrJUjnAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0ENZnVhtQWhPfaj747QQMCeS9JYwHwYDVR0j
BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG
RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC
NjI1NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwYjU5MGU4LTRmODktNDc4NS1h
ZTc5LTJiZmZmYTJjNTJjOS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzUzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8uWAMA0GCSqGSIb3DQEBCwUAA4IBAQCh2wn7Cxla7HVO0gf57lkRSydKcl9F1DMl
Ura6JGxREISv8cYkaLVjEmQzh5HCMfVBrSFBOgAH86mV3TNl3YchbHWyg0UIC63V
rlBP2DCECh7FMKn691lVWzAZ8/32RY1ohqhSSk4475SQGzDAfpBFt0Mfk3c/IYVl
15eSabYITaUKHFdVRJo5x6fEtclXvqasLvNUE2jPXRlgqhDU9d6a1pBJr8iSD67J
gRsxQlZeR8nFAIjwdjdY2E0UYpuL0MvwF4V1vQEuK5Riy8y8K+7CP5s5pHEW76Eh
0Sr4Ot7yFKAQu49DNu9ilsKvggdYJk2RDh3x++mzUgVRhHgK/r1Y
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:51:55 2025 by rpki-client