Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa
File: 323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa (raw, json)
Hash identifier: 2ACMC8KyDRSrDbWzL0/H6At76VJCDRjfQgBtBjPOTO8=
Subject key identifier: 5A:8D:2B:E5:F9:45:75:F8:68:78:68:67:F2:67:29:E4:E1:3F:0C:72
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 131F02698A44D8D73DED1B09FF4E712152688C48
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa
Signing time: Sun 20 Oct 2024 13:00:00 +0000
ROA not before: Sun 20 Oct 2024 12:55:00 +0000
ROA not after: Sun 19 Oct 2025 13:00:00 +0000
asID: 17727
IP address blocks: 2404:c000:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1f:02:69:8a:44:d8:d7:3d:ed:1b:09:ff:4e:71:21:52:68:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Oct 20 12:55:00 2024 GMT
Not After : Oct 19 13:00:00 2025 GMT
Subject: CN=5A8D2BE5F94575F868786867F26729E4E13F0C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:5b:0d:4f:2a:ce:61:17:6a:4d:7d:62:cb:
68:c7:4a:2c:b2:66:23:b6:22:2d:4c:09:b0:37:dd:
e7:93:94:b7:b6:8a:f5:8f:d5:81:db:32:41:a0:86:
09:f6:26:38:64:29:a6:d0:13:e0:27:fe:de:2b:c9:
c4:b1:77:a0:64:78:dd:c9:63:27:10:d4:3f:14:b0:
05:8c:ef:0c:0a:72:82:85:d0:83:0e:40:b3:0b:71:
d4:17:c8:43:2a:5e:45:b1:e7:75:19:93:5a:11:c3:
e4:8f:e7:24:f7:c1:70:b4:c0:59:32:28:16:ff:20:
6a:de:4d:67:1a:6d:c8:60:83:a2:81:5f:ce:55:c1:
0b:92:02:85:ff:1e:77:d6:d3:59:e9:cc:8e:a0:96:
f0:54:03:2c:31:63:f0:7d:17:ea:39:7f:b0:32:70:
13:a4:cb:2e:d4:a4:a2:c8:fc:aa:4d:4c:60:bd:d9:
09:46:d2:58:c7:9a:e2:16:0c:24:78:b6:99:67:25:
0c:c4:3d:68:64:e5:4b:2a:5b:db:9d:0a:87:c1:3f:
08:a3:d7:74:9d:ce:74:82:f4:15:a6:89:d5:4c:c0:
ba:c2:48:36:a3:e6:91:9b:b6:8a:bb:02:53:d7:e6:
56:36:b4:46:2b:47:a1:e7:7e:19:2e:76:de:34:c5:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:2B:E5:F9:45:75:F8:68:78:68:67:F2:67:29:E4:E1:3F:0C:72
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:c000:c000::/48
Signature Algorithm: sha256WithRSAEncryption
a8:74:48:e7:0f:94:c9:ac:ec:00:60:5b:dc:c4:c3:71:03:8c:
4a:5d:55:e7:3b:dd:53:a7:f3:77:7d:f8:b3:d2:78:21:57:71:
54:69:f4:40:ac:2d:eb:b8:33:51:a9:d4:e5:65:0f:06:23:b3:
09:19:f4:74:a2:a7:1d:86:cb:c6:1b:77:35:ff:f2:88:09:48:
34:18:b5:9a:1c:9a:1f:ff:e5:bf:f9:a8:57:4c:cf:7e:78:e2:
fa:59:2a:cf:fc:91:60:3a:b9:c8:c2:99:47:2c:1c:2c:e7:1c:
7a:06:e1:3d:df:fb:e7:0c:8f:71:ac:47:47:e0:90:72:33:03:
51:98:2e:c4:ac:e4:8c:18:62:0b:1d:58:aa:be:de:31:a0:55:
47:f7:5a:51:2d:47:d2:8c:65:63:ca:e4:8a:e5:7c:d0:11:5d:
04:6b:28:c2:4f:36:ab:b6:1a:5c:89:62:1e:f1:69:18:e4:89:
4a:b3:26:23:b5:96:6c:c0:b6:19:43:8e:c9:81:87:fd:dd:3e:
03:79:cb:da:cd:01:9a:23:39:c9:91:30:c6:a3:bd:28:04:e5:
41:a2:d2:fd:af:2e:33:1b:9f:44:dc:c5:f6:24:df:71:fc:a4:
30:e3:77:6e:8b:d2:6e:04:67:62:7c:d9:20:6c:9d:37:51:25:
8e:f2:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:36 2025 by rpki-client