Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: k+HsR1uiLBOa7CIQIrUQvV+cLvKbEqGMj29+mQii9+c=
Subject key identifier: 9F:B2:6A:1D:21:BD:76:8C:5B:9F:21:FD:5E:7B:CF:71:BC:F9:42:D1
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 421FCD04493931B714693770A0B2DEBF43B30328
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:24:43 +0000
ROA not before: Fri 06 Dec 2024 13:19:43 +0000
ROA not after: Fri 05 Dec 2025 13:24:43 +0000
asID: 137316
IP address blocks: 2402:7ac0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1f:cd:04:49:39:31:b7:14:69:37:70:a0:b2:de:bf:43:b3:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:19:43 2024 GMT
Not After : Dec 5 13:24:43 2025 GMT
Subject: CN=9FB26A1D21BD768C5B9F21FD5E7BCF71BCF942D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:8f:2c:38:7f:c2:d7:67:40:1c:14:ae:75:
c9:d0:56:54:0e:85:f5:14:6c:ed:eb:5d:fa:9d:1f:
bc:be:48:9c:94:bb:c9:18:5d:e2:0f:71:3f:81:1e:
61:9e:78:b3:b3:e8:e0:9e:be:f7:7d:aa:57:13:bb:
ef:b0:cc:28:94:50:04:ff:3e:30:8c:69:98:a8:5d:
a9:f3:d2:68:f3:23:86:b7:54:9c:a8:41:cf:7f:ed:
9c:83:83:25:d7:72:1a:d6:dc:8e:6c:a0:98:52:c9:
dc:b6:92:25:36:54:fa:30:b4:8f:2d:8c:ff:68:93:
a3:58:72:c9:a4:04:f9:15:90:31:53:ab:f1:93:f3:
dc:da:16:df:09:9b:6c:71:34:6a:46:86:b5:93:0c:
63:3a:f6:97:cb:24:ee:3d:4c:c5:2b:e3:6a:eb:5e:
a0:4d:47:d3:b3:79:49:fe:ac:04:20:d8:93:b4:21:
0f:c5:a1:78:c3:05:83:15:5d:ea:52:cf:9a:0e:95:
9e:d0:e8:fb:6f:b5:53:03:93:3b:fa:e0:cc:17:ae:
2a:a2:c3:51:ca:8e:8c:5f:59:8e:03:c9:ad:09:65:
a4:e1:da:98:f4:db:e2:17:1d:7b:ae:5c:3b:53:eb:
de:fc:94:6d:78:24:16:ea:76:17:71:cf:1c:0e:f8:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:6A:1D:21:BD:76:8C:5B:9F:21:FD:5E:7B:CF:71:BC:F9:42:D1
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
08:4e:da:7c:1e:c2:1c:78:83:ed:56:16:81:93:26:25:76:2e:
d2:76:59:ba:ca:fb:e6:bd:27:d9:ac:7a:7a:d6:7e:b5:da:b0:
a4:97:54:32:97:c7:97:ed:db:6a:00:47:8f:73:7d:42:b2:03:
4e:08:d9:ae:bb:62:77:b0:36:59:42:54:f6:7f:9f:2f:b7:00:
fc:40:3d:1d:92:9e:90:0c:ef:90:18:fa:ad:c0:ba:5e:71:4e:
bc:76:ae:82:ac:8d:14:01:60:b4:dd:f9:de:4e:1e:1a:53:a6:
ac:71:eb:e9:44:f1:aa:6d:0f:31:88:be:3d:71:1a:44:aa:ca:
30:87:1f:aa:cd:10:0c:c5:05:fc:2c:19:87:a2:f8:07:03:9e:
6c:15:00:58:f0:ca:83:8d:66:ef:9a:97:13:21:16:2c:ce:7e:
1e:bd:5c:39:91:e1:4a:d6:9c:f1:08:98:56:c9:1d:2e:73:37:
11:20:46:97:90:e0:61:7e:28:4d:9d:ba:70:98:69:7b:3b:88:
53:1e:8f:e9:8a:87:f8:ab:d0:4b:2c:9e:bf:ef:3a:bc:e4:1f:
5c:d3:ab:64:9e:97:a0:73:a9:fc:ad:12:e8:0b:18:4f:0c:01:
41:58:86:60:86:a0:c2:2a:8b:d8:7d:28:22:e0:92:7f:9f:82:
6b:98:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:07 2025 by rpki-client