Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: tYm39vR74C22wLT3YbYJDBw5MLsBRwjPO0h7UG3frN4=
Subject key identifier: DA:4F:CE:4E:85:1B:12:08:E3:85:7C:AF:3C:4E:DD:4B:8E:21:B3:A8
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 2C259D3A12A96135CE382525C57B8FF1D7706558
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:23:24 +0000
ROA not before: Fri 06 Dec 2024 13:18:24 +0000
ROA not after: Fri 05 Dec 2025 13:23:24 +0000
asID: 137316
IP address blocks: 2402:7ac0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:25:9d:3a:12:a9:61:35:ce:38:25:25:c5:7b:8f:f1:d7:70:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:18:24 2024 GMT
Not After : Dec 5 13:23:24 2025 GMT
Subject: CN=DA4FCE4E851B1208E3857CAF3C4EDD4B8E21B3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:e1:04:de:dc:95:e9:27:ac:86:ae:68:9a:
86:23:75:48:e2:e7:d6:6c:8b:2e:0c:b1:ce:cb:25:
9e:fd:7e:3a:03:c0:2a:71:bd:e5:c6:ea:a7:16:2f:
94:29:06:cc:e6:d2:21:48:67:bc:08:d5:7d:5c:b4:
2e:68:c7:48:07:33:17:27:80:94:9b:af:9e:da:79:
47:f7:98:4c:7b:4c:97:20:24:c6:9b:e3:38:36:8e:
1f:7c:ec:cc:c6:1c:ec:52:92:24:d7:b1:60:1c:b9:
0c:f4:e1:92:d9:c9:ec:26:7c:87:c1:24:d1:1e:6c:
81:33:d1:32:4c:a8:10:8f:ae:57:79:8d:74:28:e9:
44:3d:68:89:36:df:b2:32:d1:a9:d5:52:05:31:3b:
88:1a:a0:0b:30:27:da:0c:39:3e:9e:da:96:e0:fe:
88:73:58:ec:f4:39:2e:d5:f5:80:64:c6:85:0a:20:
cf:0e:0a:ce:5e:20:72:94:bb:29:02:0d:c5:7a:17:
f3:0f:f8:a4:0a:a5:06:ff:dd:18:ba:9a:f7:fd:a9:
fd:66:92:a8:db:b8:ca:21:5a:ba:c3:7c:4d:e1:ef:
e0:22:ab:85:1b:2c:73:ae:80:f9:7b:74:06:30:b3:
1b:33:28:04:df:78:6b:81:b5:9a:5f:71:19:fa:e4:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:CE:4E:85:1B:12:08:E3:85:7C:AF:3C:4E:DD:4B:8E:21:B3:A8
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:be:13:ed:ee:c7:a9:9b:e0:98:24:cf:b2:9e:ac:d6:3c:c1:
c4:f5:ca:65:53:18:7e:04:b5:56:8c:10:7d:4e:bc:4e:97:21:
74:48:db:a4:b3:21:8b:a6:f3:0d:98:a3:bb:f8:99:49:bf:ff:
67:56:ac:22:c6:dd:39:2b:23:7b:ba:8c:9f:05:c8:3b:ba:43:
e0:5a:9d:1c:fe:a7:36:f4:c9:4b:5f:bf:e3:bd:59:0c:31:83:
db:4e:07:e6:5d:5c:e2:30:7c:e8:41:6d:45:4e:5b:e5:65:6f:
e5:fe:b4:aa:c2:af:5c:e1:33:a9:a0:56:dc:06:6c:32:8c:62:
a3:8b:78:3d:46:3e:82:d5:53:a7:82:7f:e6:1c:72:0d:46:d0:
9f:9e:4a:ef:07:94:1e:a1:8f:4c:06:8b:d7:25:4e:8e:6e:73:
cf:5c:d0:f9:9c:0b:ca:f5:68:40:c7:68:e5:28:4f:57:93:78:
f4:0d:fc:ca:a2:d8:eb:8b:8c:59:74:c4:c8:49:13:dc:03:23:
01:c5:52:55:f3:1d:04:be:7c:09:70:6d:f2:a1:c9:b3:8b:7e:
5a:ca:66:14:53:9c:6b:14:a4:1b:ac:6d:d5:e3:56:cf:8c:25:
4e:67:3c:56:c1:49:bf:02:1a:67:56:04:e8:e5:3d:ac:ab:8d:
a0:6a:b3:32
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIULCWdOhKpYTXOOCUlxXuP8ddwZVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB
NUEwNjY2RDAeFw0yNDEyMDYxMzE4MjRaFw0yNTEyMDUxMzIzMjRaMDMxMTAvBgNV
BAMTKERBNEZDRTRFODUxQjEyMDhFMzg1N0NBRjNDNEVERDRCOEUyMUIzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiOEE3tyV6Seshq5omoYjdUji
59Zsiy4Msc7LJZ79fjoDwCpxveXG6qcWL5QpBszm0iFIZ7wI1X1ctC5ox0gHMxcn
gJSbr57aeUf3mEx7TJcgJMab4zg2jh987MzGHOxSkiTXsWAcuQz04ZLZyewmfIfB
JNEebIEz0TJMqBCPrld5jXQo6UQ9aIk237Iy0anVUgUxO4gaoAswJ9oMOT6e2pbg
/ohzWOz0OS7V9YBkxoUKIM8OCs5eIHKUuykCDcV6F/MP+KQKpQb/3Ri6mvf9qf1m
kqjbuMohWrrDfE3h7+Aiq4UbLHOugPl7dAYwsxszKATfeGuBtZpfcRn65OQxAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU2k/OToUbEgjjhXyvPE7dS44hs6gwHwYDVR0j
BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3
MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw
NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzEzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAEDANBgkqhkiG9w0BAQsFAAOCAQEAbL4T7e7HqZvgmCTPsp6s1jzBxPXKZVMY
fgS1VowQfU68TpchdEjbpLMhi6bzDZiju/iZSb//Z1asIsbdOSsje7qMnwXIO7pD
4FqdHP6nNvTJS1+/471ZDDGD204H5l1c4jB86EFtRU5b5WVv5f60qsKvXOEzqaBW
3AZsMoxio4t4PUY+gtVTp4J/5hxyDUbQn55K7weUHqGPTAaL1yVOjm5zz1zQ+ZwL
yvVoQMdo5ShPV5N49A38yqLY64uMWXTEyEkT3AMjAcVSVfMdBL58CXBt8qHJs4t+
WspmFFOcaxSkG6xt1eNWz4wlTmc8VsFJvwIaZ1YE6OU9rKuNoGqzMg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:19 2025 by rpki-client