Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: uDgEr3kGrmOXto0GMqIkQCfmSvzHu7i8p/z3mc2Qz5w=
Subject key identifier: 58:29:91:7B:1F:0D:89:DE:37:CC:FE:55:0B:C6:53:88:C7:4E:FF:66
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 57F4E09D3F2321C8ADA9873F6E1C0E731AAF84BF
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:28:24 +0000
ROA not before: Fri 06 Dec 2024 13:23:24 +0000
ROA not after: Fri 05 Dec 2025 13:28:24 +0000
asID: 137316
IP address blocks: 2402:7ac0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f4:e0:9d:3f:23:21:c8:ad:a9:87:3f:6e:1c:0e:73:1a:af:84:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:23:24 2024 GMT
Not After : Dec 5 13:28:24 2025 GMT
Subject: CN=5829917B1F0D89DE37CCFE550BC65388C74EFF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:8d:80:d7:f2:a1:c5:f1:d3:34:b7:b9:15:
c5:68:8b:e3:05:8b:8d:92:24:81:6e:9c:a7:7f:49:
55:7f:29:9b:be:01:a1:da:09:81:20:a1:14:10:10:
56:49:80:b5:f9:80:94:a6:18:21:e4:27:5e:95:39:
a8:17:9f:c5:f3:e5:0d:6e:37:c0:df:94:28:bc:bb:
3d:9a:be:28:fb:69:19:4b:b9:be:94:26:89:d1:8a:
b8:c3:ba:d1:59:3f:0c:92:d1:88:ad:b8:42:98:d3:
c1:2a:4c:81:95:2d:cf:f8:9d:6b:0d:e5:d0:4f:b7:
78:9e:8b:d0:ba:16:8a:bd:82:fd:c0:4a:0e:fa:59:
13:72:b2:62:5c:c6:a2:8b:04:0b:1a:c4:ba:3b:46:
da:14:88:a8:0c:44:6e:95:09:2f:7c:05:16:66:1a:
30:c0:8c:b9:be:0b:35:98:c3:08:74:43:b8:d4:5f:
1e:ea:14:4e:c6:62:53:81:32:62:d4:dc:7d:d3:87:
ae:79:ae:e8:3d:f9:3d:03:9d:dd:3b:87:30:e4:80:
2a:a4:44:ad:92:e4:1d:01:39:7c:65:5d:8b:aa:91:
19:03:70:64:48:9b:28:cb:ac:be:87:2c:90:7d:9e:
c7:17:40:4a:2d:4f:5b:ca:93:63:48:19:ab:4b:14:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:91:7B:1F:0D:89:DE:37:CC:FE:55:0B:C6:53:88:C7:4E:FF:66
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
92:90:07:9e:88:ab:2f:f1:0f:14:97:ec:bc:df:1e:1c:b5:05:
bc:3b:4e:7c:af:f8:ca:98:0b:00:64:9a:df:9d:e6:d5:19:b9:
2d:15:7f:b8:76:03:68:b4:3f:e7:ec:60:2c:c3:2a:1f:b2:42:
3f:56:70:69:47:7b:59:64:65:40:bd:1b:02:6e:34:c8:da:19:
1a:6b:c0:3e:c1:52:47:6d:fd:79:a9:84:71:e1:54:38:27:25:
4c:f4:e2:96:de:4a:c8:75:6a:04:5f:84:62:76:01:c9:f0:f1:
75:68:a9:93:0b:2c:38:e9:b4:9a:96:05:f5:8d:09:b8:5f:ab:
be:1b:1f:85:2c:e6:fa:7d:42:20:3c:06:82:93:dc:ed:b8:95:
d9:cf:28:2c:38:32:3e:20:30:f0:3c:da:84:19:34:f4:60:84:
f6:58:71:d4:82:3e:95:9a:84:04:67:55:61:76:99:da:2b:09:
0e:6d:96:f2:1c:1d:65:00:95:fa:d1:f4:8a:ee:1e:71:0a:a5:
71:be:a2:d5:09:b3:dc:60:4b:e6:2e:9b:8f:b0:50:8d:8e:fd:
05:7f:e7:97:a3:de:de:f4:7d:a3:8e:b4:0f:3e:55:bc:79:a2:
f3:27:ce:df:82:f2:98:76:ea:8d:4d:dd:5e:4f:38:45:79:24:
ee:a7:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:40 2025 by rpki-client