Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
File: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (raw, json)
Hash identifier: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=
Subject key identifier: 95:54:67:98:38:BE:14:BD:74:E8:A4:BE:31:8A:DD:88:22:F5:BD:84
Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial: 6534853598F0618DEBBFF1DC721BD8ACEB5873B7
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
Signing time: Tue 12 Nov 2024 03:02:53 +0000
ROA not before: Tue 12 Nov 2024 02:57:53 +0000
ROA not after: Tue 11 Nov 2025 03:02:53 +0000
asID: 136071
IP address blocks: 2001:df0:2900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:34:85:35:98:f0:61:8d:eb:bf:f1:dc:72:1b:d8:ac:eb:58:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Validity
Not Before: Nov 12 02:57:53 2024 GMT
Not After : Nov 11 03:02:53 2025 GMT
Subject: CN=9554679838BE14BD74E8A4BE318ADD8822F5BD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:81:03:e2:27:c4:6f:25:a1:42:5f:c7:39:
01:a3:2c:f3:37:3e:82:10:ff:26:ff:3a:16:28:60:
4f:3f:5d:34:f9:ee:e7:77:70:ef:5b:bd:d5:ca:0d:
16:9a:6d:21:ac:56:d8:fe:80:ac:ff:57:ed:27:0a:
48:9c:be:7a:bc:18:92:95:c5:9f:ec:11:63:41:c2:
f3:36:e6:4f:f5:d0:2c:e9:2f:09:98:0f:6e:1e:fd:
82:16:7d:0b:6e:7c:11:10:1c:da:ac:03:dc:90:70:
e2:dd:8a:51:79:68:0c:36:71:01:73:7e:00:ad:45:
36:5c:76:80:65:7d:d8:02:12:2a:84:12:b3:b3:b4:
f2:5f:3e:7e:33:96:31:8c:37:32:b2:29:43:b6:b4:
6f:38:89:6a:f2:a5:24:a1:72:e9:c9:3e:a2:56:84:
b0:86:85:8c:8e:fe:fb:fe:a9:92:f0:d2:8e:dd:4a:
77:4d:1e:a9:af:fa:13:24:f1:53:68:e2:26:91:b7:
4e:02:d9:67:b8:a4:23:fc:8a:ea:b4:8a:f6:b9:0e:
62:5e:be:e9:5c:8e:d4:31:ad:51:83:c1:10:fe:50:
bf:d6:e4:cc:7f:b5:a4:5e:04:3e:38:6c:16:9f:56:
5b:9b:55:93:82:84:d5:0d:21:6d:b5:54:bf:f2:6b:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:67:98:38:BE:14:BD:74:E8:A4:BE:31:8A:DD:88:22:F5:BD:84
X509v3 Authority Key Identifier:
keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:2900::/48
Signature Algorithm: sha256WithRSAEncryption
e3:84:d1:4b:9d:c5:44:7d:12:f4:ac:be:73:dd:1d:84:0d:fe:
1c:38:50:b2:9a:1b:95:d5:6d:c8:ed:05:8a:73:f2:b3:19:47:
18:12:cf:92:b3:ed:d0:7c:3a:ab:fc:97:72:6a:39:0b:ec:08:
83:9d:08:5a:05:c2:2b:6e:87:f7:5f:20:1d:07:64:ee:14:df:
50:6d:ea:79:69:78:bd:98:c4:ca:29:17:f1:14:99:6a:fd:aa:
42:7a:3f:70:1f:ac:6e:43:7c:54:85:c9:e2:90:e4:dd:3e:e1:
aa:9e:54:3f:5a:ca:ff:63:13:b3:eb:53:26:89:ec:43:35:8e:
28:5c:b2:07:c4:61:9a:99:8e:c2:27:17:8b:ab:bb:50:ae:3d:
26:e2:6e:1d:69:95:74:4b:da:7c:c1:44:23:ae:b6:30:7c:ba:
36:9b:2c:f8:4e:a0:18:b0:fa:93:9b:9a:cf:a8:9c:eb:62:7f:
20:29:5e:85:59:c6:20:03:0f:ce:ce:50:e8:5b:d9:53:4a:00:
d0:df:e4:02:06:13:55:f1:84:7d:0f:dd:3a:56:05:1a:10:86:
03:37:73:81:46:e0:23:1b:72:34:3f:3f:cb:dc:19:67:04:0e:
30:25:55:cb:1c:28:1c:ae:cf:8e:c6:54:51:b2:02:21:d8:67:
6d:37:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:04 2025 by rpki-client