Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa
File: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (raw, json)
Hash identifier: 9xS15/XMHdAFDuGNQRe1F50n/1BDB1GC2kKELzQ0FX0=
Subject key identifier: AC:21:13:2D:A8:63:7F:0D:1B:3A:5F:D7:B8:E0:86:EF:AC:1A:82:F6
Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial: 4C930918E39AA87C771679B32B25F8EF54CFDC95
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa
Signing time: Fri 23 Aug 2024 04:02:19 +0000
ROA not before: Fri 23 Aug 2024 03:57:19 +0000
ROA not after: Fri 22 Aug 2025 04:02:19 +0000
asID: 45731
IP address blocks: 2001:df0:bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:93:09:18:e3:9a:a8:7c:77:16:79:b3:2b:25:f8:ef:54:cf:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Validity
Not Before: Aug 23 03:57:19 2024 GMT
Not After : Aug 22 04:02:19 2025 GMT
Subject: CN=AC21132DA8637F0D1B3A5FD7B8E086EFAC1A82F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:8b:5f:3b:94:c2:04:9a:da:65:5e:13:43:
d2:ba:8b:9b:6c:d6:7c:95:78:e1:aa:74:7f:ea:1b:
10:7b:5e:f7:15:4d:0b:66:c3:50:7c:76:dc:dd:92:
19:53:25:0c:bb:97:96:c4:04:c6:e8:ad:09:20:ba:
9c:32:62:60:4e:ad:20:27:cc:5f:af:84:15:8c:c2:
7d:e4:cd:92:30:7e:72:c6:c5:a4:93:0d:66:7d:e8:
25:1b:3b:c4:5e:ec:af:75:e2:56:1c:59:61:1d:fb:
15:46:a4:85:9c:63:e1:2e:cb:7c:f1:54:55:9a:69:
73:0d:0e:93:91:3d:dd:f7:a2:4c:d0:39:04:b7:79:
8b:5b:6b:ff:6b:f6:c3:16:8b:54:ad:fd:13:b0:5d:
ad:e6:3c:cd:ce:40:8e:1f:50:d8:6d:6e:0f:0b:2b:
b8:78:17:17:61:ce:4e:97:25:39:d2:b1:29:44:53:
cb:7f:5a:bd:ab:b4:e9:6c:c7:3f:25:dd:f1:16:78:
43:27:c4:ad:18:ab:21:59:06:37:0a:40:7e:d1:06:
32:3a:c8:9c:3b:84:68:f0:65:75:f6:c6:68:30:c8:
88:fe:2e:b1:84:05:11:b4:d7:17:05:0e:18:09:4a:
93:52:46:e9:d8:14:a0:11:f0:ef:01:51:eb:25:8c:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:13:2D:A8:63:7F:0D:1B:3A:5F:D7:B8:E0:86:EF:AC:1A:82:F6
X509v3 Authority Key Identifier:
keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:bc::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a8:45:6b:ea:d3:4a:49:40:bc:e8:a2:0a:83:34:17:91:38:
87:ef:7d:b5:20:8c:3b:2b:bd:e5:04:7d:53:f1:dd:0b:b7:9e:
73:53:f6:24:30:10:46:99:00:1c:98:e4:ef:64:5f:c1:eb:ea:
fc:ee:a2:9b:00:66:5e:83:1f:9a:d9:da:36:62:96:6b:dd:7b:
f7:ff:59:01:b1:a0:e6:9a:b7:f4:7f:56:bf:04:75:62:3a:a4:
58:d5:35:c4:49:8d:23:59:64:9a:0d:8b:39:54:e2:84:0f:41:
98:b0:35:cb:9d:32:b3:72:81:70:ea:95:ab:5e:23:a1:c0:e0:
77:23:b8:b9:82:98:20:6a:4d:a4:55:10:7b:06:6c:de:6e:68:
91:db:5a:69:70:20:0c:8b:d9:f8:85:61:3d:23:35:d1:d7:26:
38:f0:50:d8:07:5e:f1:33:a2:a0:f8:7c:00:7e:a0:42:af:e4:
0f:ff:67:14:55:b8:09:f2:8e:6d:f8:1e:84:53:00:44:10:fa:
4c:7e:2c:f5:ad:66:2d:2b:7a:ed:4d:95:3c:82:6e:12:37:bf:
bc:aa:11:40:c1:13:0f:4c:bc:2b:b7:14:d4:93:29:8c:41:35:
03:3b:f0:54:ca:f9:a8:15:68:ce:ad:5a:e5:d7:f9:ce:f3:98:
5f:8b:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:52 2025 by rpki-client