Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: ZGUgYTk8QiqAbfih+QUUlVLr0b++PfvjTFFtUd4YvL0=
Subject key identifier: 64:DC:8E:ED:F6:6A:50:A5:9B:3C:24:C8:E9:CE:78:F1:1B:67:18:6A
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 41187975AFD34F9E7EEA3CF945F867DB86F0C3D5
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa
Signing time: Mon 01 Jul 2024 01:04:18 +0000
ROA not before: Mon 01 Jul 2024 00:59:18 +0000
ROA not after: Mon 30 Jun 2025 01:04:18 +0000
asID: 136088
IP address blocks: 2400:d940:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:18:79:75:af:d3:4f:9e:7e:ea:3c:f9:45:f8:67:db:86:f0:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Jul 1 00:59:18 2024 GMT
Not After : Jun 30 01:04:18 2025 GMT
Subject: CN=64DC8EEDF66A50A59B3C24C8E9CE78F11B67186A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:d2:38:12:e0:21:ac:98:cd:67:8b:84:bb:
69:b1:ca:36:69:d9:bf:ed:39:25:c4:5a:e2:d6:e0:
35:6a:0e:9a:fb:8b:41:58:a1:d8:5e:c3:12:e5:5d:
46:96:62:42:a1:62:be:f4:57:bd:9f:49:7e:ff:d0:
2a:a3:0b:fb:b4:75:63:d1:38:7a:a3:1a:d6:0e:08:
f5:ab:e0:81:19:6a:b9:8a:f4:87:bd:bc:ac:b1:d4:
49:9e:73:42:54:c0:90:6d:16:69:73:08:5c:0c:fe:
b2:ec:04:de:72:0d:3e:75:e9:a7:ce:31:02:d0:97:
98:8c:69:d6:33:30:1a:8e:da:fa:8c:62:5a:ae:a9:
16:ed:7f:08:18:05:a3:61:83:20:57:dd:85:1f:b4:
4b:35:47:8e:df:6a:9c:ec:29:18:f2:7b:ae:34:f4:
1c:e6:dd:97:fe:4e:fc:94:17:ae:c5:e8:22:24:61:
11:53:04:68:48:c2:b8:bb:ad:09:86:04:d8:49:0b:
15:df:cd:f3:c4:ef:07:fd:36:a6:62:01:2f:c6:40:
9d:84:7d:4c:52:2c:85:89:cb:53:62:7e:3f:bf:5b:
7f:ce:7a:4b:02:f6:1d:ba:22:55:1f:4b:6a:06:de:
90:75:8d:97:a0:05:b7:18:d9:25:43:33:d0:ec:c9:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:8E:ED:F6:6A:50:A5:9B:3C:24:C8:E9:CE:78:F1:1B:67:18:6A
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:40::/48
Signature Algorithm: sha256WithRSAEncryption
0f:61:79:03:91:4d:ea:9e:0a:cd:c9:dd:b6:af:3d:12:e7:f2:
31:42:18:f8:ce:f6:b6:97:67:6d:29:d0:fe:07:cb:d6:7b:62:
25:fa:d2:fe:1a:89:e4:b1:e8:4e:03:9a:3b:fc:00:1e:d7:ee:
dd:c0:d7:38:dc:e2:e0:08:0d:8c:a6:6f:e6:40:e1:6e:64:c4:
7e:cf:0f:84:a8:58:14:8d:f7:71:41:7a:7e:fc:00:2c:2e:3e:
73:f8:35:3b:7f:66:7c:13:31:e0:b4:0d:2d:5b:bb:56:97:ea:
30:3e:cc:06:74:64:a9:07:f8:45:6b:bf:50:88:fc:3a:24:91:
6a:1a:ff:a5:f6:e6:f7:bd:5e:8a:30:76:95:a9:30:10:e0:9d:
3d:a3:5f:30:ce:8a:7b:6a:90:d7:83:ef:b4:05:16:43:29:b7:
cf:6d:5a:0e:da:fa:1c:21:41:2c:22:37:57:16:0f:e2:01:18:
9c:68:9c:13:d9:42:07:ed:99:9f:85:b5:d1:0c:de:59:e2:dc:
b6:62:d5:d7:05:bd:60:d7:96:ad:b6:49:a5:74:80:8b:c4:5d:
f5:62:4c:21:df:ff:e7:87:50:52:10:02:14:3c:a5:55:44:ca:
52:1b:47:0d:26:b8:e3:c9:12:37:82:c1:c9:03:a3:cb:da:d9:
c4:3c:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:04:25 2025 by rpki-client