Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: nB2o10zDZA9DHkgQUcU3pmQgTavrsveE0KEpLSxCRaE=
Subject key identifier: 2B:14:82:1A:5D:9F:42:3B:1F:D1:07:22:3E:DE:6C:FD:D4:44:70:B9
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 2F3CFEEA22810C5A623BFB67A8F6AA4DAE0268DC
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:25:43 +0000
ROA not before: Fri 06 Dec 2024 13:20:43 +0000
ROA not after: Fri 05 Dec 2025 13:25:43 +0000
asID: 137316
IP address blocks: 2402:7ac0:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3c:fe:ea:22:81:0c:5a:62:3b:fb:67:a8:f6:aa:4d:ae:02:68:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:20:43 2024 GMT
Not After : Dec 5 13:25:43 2025 GMT
Subject: CN=2B14821A5D9F423B1FD107223EDE6CFDD44470B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:53:f6:f2:5d:80:58:b7:7e:f9:8d:02:a4:
af:d1:4a:f6:15:01:60:a5:8e:35:da:77:ae:a5:c8:
54:b9:0e:e3:99:9d:ad:9e:22:2a:9c:ce:24:b7:0e:
a2:2b:f0:7a:01:59:02:9e:54:72:f7:8a:3d:64:1e:
ea:c2:63:38:72:72:c7:a6:9e:86:d3:50:c6:02:a5:
f8:0c:c4:a0:b0:86:4b:54:13:4c:80:b7:4f:fe:8f:
fb:d8:fc:8b:89:32:8c:d0:bf:a5:e2:cf:00:5f:6e:
1b:22:3f:b8:58:f2:92:44:c5:96:ff:6f:95:b5:e9:
62:de:6b:7f:82:bb:3e:5b:9d:67:2b:2d:0b:26:bf:
a9:ff:3d:2f:2e:1b:f4:6f:11:8c:fb:98:31:2a:7c:
35:61:97:bb:b5:44:0e:52:f8:86:9d:b0:19:5c:64:
4d:fa:b8:28:d5:59:21:4b:dd:5a:77:5e:d4:63:02:
0a:c0:e8:bc:cf:7f:10:c4:5a:af:0a:db:bc:62:6d:
53:f3:63:e9:0d:d9:00:74:44:6c:58:67:b2:34:6d:
e9:3a:0c:e0:6e:4a:c7:9a:bd:22:f0:7d:68:4e:6d:
54:78:ed:e7:7f:91:46:99:60:96:18:f8:59:a8:56:
4c:5b:74:af:78:6f:3f:9c:69:a7:95:34:3b:df:a5:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:82:1A:5D:9F:42:3B:1F:D1:07:22:3E:DE:6C:FD:D4:44:70:B9
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
b8:85:21:fb:4e:4e:e5:0b:ad:18:6e:c9:1c:0c:5e:1d:2b:62:
29:bb:84:7a:4d:2c:a4:8c:f0:dd:7e:f7:77:fa:e8:ba:b7:07:
be:cf:45:a7:62:cb:46:65:f0:3b:bd:08:5e:36:10:65:59:54:
05:5d:20:eb:24:ca:ef:4c:60:68:f9:b1:64:03:ee:29:b0:fd:
3e:72:e6:9e:4f:84:6b:09:e1:72:e8:b9:ee:01:2f:fd:93:ed:
75:03:a3:f2:1c:24:96:f6:6f:cd:5b:a4:8f:f5:8c:46:5c:fe:
1e:7f:c0:96:eb:6b:24:ec:b6:22:f0:28:48:f2:da:d3:36:d6:
9e:28:2b:83:aa:f3:3f:e3:07:b0:7b:93:8e:fe:cb:77:66:d3:
ae:25:63:0a:d7:47:e9:03:5d:31:1a:53:fa:bf:0c:bc:88:19:
b6:8f:43:30:76:95:5a:4a:0c:59:e3:bc:bd:23:62:4f:d4:f0:
fa:c6:0f:e0:89:68:04:87:40:62:08:6f:31:12:3c:b9:97:2d:
94:bb:c6:74:88:05:61:6b:fd:ac:8b:41:9a:b8:78:51:c1:c6:
60:f3:28:23:70:b1:82:a2:a5:ca:7b:ea:f3:b4:eb:c2:92:27:
63:5c:bd:00:63:48:bb:68:f0:a2:8c:00:3f:96:1a:93:22:d9:
4e:a2:99:82
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIULzz+6iKBDFpiO/tnqPaqTa4CaNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB
NUEwNjY2RDAeFw0yNDEyMDYxMzIwNDNaFw0yNTEyMDUxMzI1NDNaMDMxMTAvBgNV
BAMTKDJCMTQ4MjFBNUQ5RjQyM0IxRkQxMDcyMjNFREU2Q0ZERDQ0NDcwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmFP28l2AWLd++Y0CpK/RSvYV
AWCljjXad66lyFS5DuOZna2eIiqcziS3DqIr8HoBWQKeVHL3ij1kHurCYzhycsem
nobTUMYCpfgMxKCwhktUE0yAt0/+j/vY/IuJMozQv6XizwBfbhsiP7hY8pJExZb/
b5W16WLea3+Cuz5bnWcrLQsmv6n/PS8uG/RvEYz7mDEqfDVhl7u1RA5S+IadsBlc
ZE36uCjVWSFL3Vp3XtRjAgrA6LzPfxDEWq8K27xibVPzY+kN2QB0RGxYZ7I0bek6
DOBuSseavSLwfWhObVR47ed/kUaZYJYY+FmoVkxbdK94bz+caaeVNDvfpaS5AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUKxSCGl2fQjsf0QciPt5s/dREcLkwHwYDVR0j
BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3
MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw
NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzczMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAcDANBgkqhkiG9w0BAQsFAAOCAQEAuIUh+05O5QutGG7JHAxeHStiKbuEek0s
pIzw3X73d/rourcHvs9Fp2LLRmXwO70IXjYQZVlUBV0g6yTK70xgaPmxZAPuKbD9
PnLmnk+Eawnhcui57gEv/ZPtdQOj8hwklvZvzVukj/WMRlz+Hn/AlutrJOy2IvAo
SPLa0zbWnigrg6rzP+MHsHuTjv7Ld2bTriVjCtdH6QNdMRpT+r8MvIgZto9DMHaV
WkoMWeO8vSNiT9Tw+sYP4IloBIdAYghvMRI8uZctlLvGdIgFYWv9rItBmrh4UcHG
YPMoI3CxgqKlynvq87TrwpInY1y9AGNIu2jwoowAP5YakyLZTqKZgg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:55 2025 by rpki-client