Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: emLrOo7YntiFkmyszaLXTd9CIFgMOG9wqKxKSEVdh6g=
Subject key identifier: 95:53:CD:3B:F5:EE:28:5E:A7:BB:F6:BF:49:59:0F:81:3E:4D:8F:B7
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 4A9D98BC35AD820DD9A8C5CC1503BCC107D57EEE
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:25:04 +0000
ROA not before: Fri 06 Dec 2024 13:20:04 +0000
ROA not after: Fri 05 Dec 2025 13:25:04 +0000
asID: 137316
IP address blocks: 2402:7ac0:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9d:98:bc:35:ad:82:0d:d9:a8:c5:cc:15:03:bc:c1:07:d5:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:20:04 2024 GMT
Not After : Dec 5 13:25:04 2025 GMT
Subject: CN=9553CD3BF5EE285EA7BBF6BF49590F813E4D8FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:f6:c4:d4:16:1b:c8:9d:a6:1f:32:b6:44:
3f:04:f7:9e:e1:c4:b5:6d:80:9f:29:8e:76:e2:8a:
bc:86:31:72:cb:47:57:21:6b:4b:0a:bd:49:50:4f:
fc:7c:bf:16:2a:5b:23:43:52:18:bd:06:92:8b:8c:
fb:40:f2:e9:19:b5:b9:a9:a1:8b:22:1a:41:33:a3:
f5:72:98:ae:33:1e:a3:bf:15:5e:58:f1:2a:3a:6b:
0b:0c:01:fb:6c:54:09:92:c6:9c:43:1e:cf:6d:91:
bc:d0:0a:35:6d:01:be:cb:bc:92:fd:92:3e:61:08:
3e:b7:f4:99:e8:f7:5a:fe:ac:2e:08:43:51:75:53:
e1:7d:ba:b8:65:78:f0:e2:1a:55:63:99:66:52:cb:
dc:23:fc:17:4a:c9:3e:83:6b:12:b4:ea:db:8d:80:
c0:b2:77:78:5b:db:6e:9a:da:13:ef:17:1e:35:d8:
4f:49:ce:11:f2:2c:5c:d6:a0:45:11:b9:71:62:98:
cb:b1:d6:57:d4:a5:10:5c:ad:b6:ae:71:d5:35:b0:
7d:d1:db:93:a7:57:53:ac:44:68:c4:fb:a4:9c:7b:
78:e7:34:ce:08:dd:c5:2b:c0:4f:3a:36:18:3a:47:
45:de:1b:a9:73:0a:67:41:43:6a:e3:fc:40:13:21:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:CD:3B:F5:EE:28:5E:A7:BB:F6:BF:49:59:0F:81:3E:4D:8F:B7
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
a5:ae:9b:c7:a2:b5:18:04:20:b2:ca:7a:0e:76:12:72:f4:df:
62:05:9f:13:e5:5e:b4:63:91:45:13:9b:8e:ce:46:c7:7f:5b:
69:30:b0:4e:b7:79:f1:43:e4:81:f9:62:13:9d:65:1c:77:cd:
b1:2e:5c:df:ed:ea:5b:8d:df:99:3d:06:dd:a4:82:5d:5b:4f:
ac:9c:ad:9d:9b:df:62:52:d1:52:93:16:08:11:35:4a:f9:3f:
3f:8e:12:ef:dc:c5:3c:62:61:85:b1:1b:60:f7:17:7e:47:51:
0c:38:4b:e0:b3:d9:a1:e7:87:fd:9b:9b:a6:30:24:3e:1d:30:
12:28:13:9d:87:92:d0:39:8d:9f:5a:29:a4:3a:7a:bf:39:c9:
dd:e1:7f:56:73:bd:01:28:f6:1a:c2:6e:58:75:14:60:38:95:
91:3d:25:e3:5f:ab:be:53:c8:f9:53:fd:31:11:40:f2:26:7b:
c3:2e:bc:74:38:5c:7c:19:d6:57:e4:97:7d:3b:9f:00:5c:57:
14:58:40:2f:16:88:2c:86:75:b6:36:5d:07:30:37:56:8e:2e:
d0:56:53:46:71:7c:c5:0c:13:50:39:42:8f:db:ea:21:c7:57:
c5:90:e0:d9:91:c7:09:9b:71:c1:91:5c:08:28:e9:a8:54:5c:
1c:cb:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:28 2025 by rpki-client