Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa
File: 323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa (raw, json)
Hash identifier: JvYV0DAk4CgQkFBbe6hTyS8jIUvbiyG4liuTZ3xwrSk=
Subject key identifier: 39:5C:E3:16:D7:31:2B:3E:C7:C6:70:F1:CE:D8:16:68:D7:F3:2D:CA
Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial: 0329163F17956CDEA720C2E9FB69A70F05B7DCAC
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa
Signing time: Wed 10 Jul 2024 01:00:01 +0000
ROA not before: Wed 10 Jul 2024 00:55:01 +0000
ROA not after: Wed 09 Jul 2025 01:00:01 +0000
asID: 38524
IP address blocks: 2401:de80:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:29:16:3f:17:95:6c:de:a7:20:c2:e9:fb:69:a7:0f:05:b7:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Validity
Not Before: Jul 10 00:55:01 2024 GMT
Not After : Jul 9 01:00:01 2025 GMT
Subject: CN=395CE316D7312B3EC7C670F1CED81668D7F32DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:30:f1:41:53:b9:16:e1:d8:74:2d:72:3c:
53:70:a0:0e:cb:93:f6:09:64:15:68:ff:e7:84:97:
64:e2:93:8d:df:94:9a:ba:3c:cc:a3:55:71:8d:51:
b8:25:28:02:0b:82:e3:f1:cc:77:4d:96:0c:ea:2f:
83:ac:0e:44:8b:16:7a:5f:cf:e3:30:07:ce:36:31:
19:fa:b6:75:56:f2:b2:a4:55:57:6d:43:c1:c6:74:
03:4d:e8:92:b1:5d:dc:6a:d0:00:91:59:24:74:45:
8f:00:3d:73:9e:04:49:bf:50:18:52:86:8a:31:99:
e5:d7:23:84:19:c3:50:d9:4a:28:05:9c:bf:c5:d7:
74:a2:76:bd:0f:6c:4b:ae:dc:80:c6:00:05:38:26:
a9:be:d4:62:af:be:e1:5f:0c:41:e9:28:8b:7b:5d:
17:b9:0b:af:60:40:e1:f1:33:18:29:72:c2:f1:a0:
90:65:75:d7:b9:0c:c3:8f:47:33:1f:9a:81:e5:80:
dd:38:d0:cb:e1:c1:33:32:66:6d:17:75:54:54:a5:
65:4c:4f:51:cc:66:34:b2:a3:1e:4d:d7:12:01:56:
c6:64:2b:04:50:4d:fa:18:a3:3e:49:82:c5:df:88:
65:8c:a6:96:38:92:23:49:8c:6f:25:98:88:29:e0:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:E3:16:D7:31:2B:3E:C7:C6:70:F1:CE:D8:16:68:D7:F3:2D:CA
X509v3 Authority Key Identifier:
keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:de80:b::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f5:24:f5:47:6a:07:95:be:1d:22:71:1a:a7:93:38:e9:97:
5a:02:0a:7e:00:c7:1a:3a:71:12:d8:fb:34:be:b0:2f:4f:e9:
c9:74:2c:27:df:48:d6:53:85:bd:68:c9:32:68:44:fc:cc:d4:
64:94:bf:6a:50:33:cb:07:a4:6f:92:e0:b8:28:4f:e2:36:fa:
58:d1:1d:fc:05:b5:c4:3e:9a:93:71:8e:93:c8:eb:0b:c2:ca:
aa:cf:10:2a:bf:5c:66:b2:a7:93:bd:87:b7:37:9f:55:16:86:
3a:07:f2:c9:43:eb:4c:cb:ac:57:bc:23:8e:a1:f6:b3:c0:95:
f9:73:43:f6:f0:1a:75:88:4a:d7:5c:65:28:c3:d3:96:13:47:
a9:8a:42:30:c5:fb:cb:98:52:f9:23:07:a5:c3:ef:ed:39:cf:
9e:85:c3:8a:fa:d4:ca:5d:35:a9:84:38:e8:75:2c:6c:8a:22:
c1:a7:11:c1:4a:b8:4b:60:64:76:f5:f2:5f:53:b9:bc:6a:f0:
ab:9e:46:41:39:7b:ed:e0:ec:fb:89:23:9d:c3:4b:40:ae:f9:
18:61:46:4e:f1:b6:02:73:59:08:8b:96:30:57:57:31:03:7b:
a5:49:70:fa:02:e6:f3:c1:93:80:9a:e4:dd:03:8a:72:02:5b:
f3:27:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:14:49 2025 by rpki-client