Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: q2h2zMkU7WdSEYLb1Ip6rMuX1sbD7Q64NQMqkyBiVeU=
Subject key identifier: DF:0F:68:B1:01:EA:62:19:6D:E8:98:68:E7:05:96:02:B7:6B:87:9C
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 7284B0FC2FFE6840845EA4C8B57048655490326E
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:25:16 +0000
ROA not before: Fri 06 Dec 2024 13:20:16 +0000
ROA not after: Fri 05 Dec 2025 13:25:16 +0000
asID: 137316
IP address blocks: 2402:7ac0:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:84:b0:fc:2f:fe:68:40:84:5e:a4:c8:b5:70:48:65:54:90:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:20:16 2024 GMT
Not After : Dec 5 13:25:16 2025 GMT
Subject: CN=DF0F68B101EA62196DE89868E7059602B76B879C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:45:31:7b:3d:e4:19:f8:a2:b1:92:97:d7:
2e:4b:97:0a:16:9f:c0:33:db:52:0b:cc:55:9a:ed:
c2:d6:05:cb:a6:78:c9:04:db:0d:16:c0:26:c4:a0:
42:e0:eb:b5:7f:bd:d2:e8:ba:a0:29:3d:a0:74:f9:
86:77:dc:10:e6:38:d2:ff:46:bf:83:5d:6e:4b:9b:
92:a7:3e:3a:28:27:b3:76:e4:2e:d9:60:e3:cb:ea:
83:64:57:36:b3:b7:cd:9a:ae:ca:6f:39:1b:cc:80:
a7:2e:67:12:6e:4f:92:63:20:12:dd:8c:28:38:d9:
e3:9c:a9:73:7d:21:8c:10:da:ad:eb:ce:1d:7f:2b:
3e:d0:03:99:87:9c:40:9c:03:5b:c2:0b:79:d4:22:
1f:b8:b6:58:34:37:57:10:cd:87:aa:5f:4c:7f:35:
99:99:56:48:af:9e:72:43:49:00:e3:61:4a:17:6e:
06:de:94:4e:e1:a8:74:ed:22:de:31:c4:e9:ee:2e:
b8:2d:36:d6:67:0e:96:68:5d:f8:1d:ea:58:ce:36:
5a:d4:e9:45:d2:6d:54:e8:4f:1a:02:4f:d4:9d:9c:
52:ca:6c:e8:97:65:6a:26:76:d5:6a:40:04:9e:e4:
d1:75:9b:83:1d:bb:cf:6c:f6:e6:7c:22:50:db:7f:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:68:B1:01:EA:62:19:6D:E8:98:68:E7:05:96:02:B7:6B:87:9C
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
6f:b6:78:39:95:79:83:4d:47:33:71:6c:30:3e:19:bc:8b:a9:
6e:77:ea:d3:cf:8b:bb:08:44:3a:12:f6:6b:43:2c:79:5e:fd:
fe:dc:ef:a7:be:b2:eb:12:68:b1:dc:14:6e:6e:6e:3a:ba:93:
b8:31:a0:50:e9:cd:f4:0d:bf:d3:53:a0:c5:ee:ef:5a:7f:85:
9c:af:e7:d8:35:1b:10:18:3e:4c:74:1e:08:63:53:bd:56:6a:
85:a6:3e:c9:c0:e0:b4:2c:6d:77:0d:a3:22:a9:9c:91:32:f6:
ce:dd:9b:ba:11:55:74:f6:ae:9d:e7:7e:b4:b8:93:bc:db:9f:
e9:62:96:99:6e:29:97:d8:d1:9d:ec:cd:47:e6:8e:25:6a:63:
57:2e:0e:b2:16:57:7d:c5:ba:9a:de:3d:0c:8c:2d:b9:93:16:
49:16:24:d5:6a:bc:50:f5:6f:9d:7d:c6:d8:93:bb:8c:ec:a5:
68:7b:e2:53:24:0d:18:29:fa:b6:03:09:8a:27:59:9f:9a:57:
5e:d1:5c:64:0d:e7:b4:4d:1d:6d:62:7d:ee:18:6d:bc:fb:1a:
76:7d:ac:89:29:5d:56:82:f5:8e:e1:55:a7:32:fe:7b:44:2a:
9e:ed:be:90:c4:64:0a:45:a5:51:6a:3a:a2:f0:48:82:a7:f8:
70:b0:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:49 2025 by rpki-client