Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa
File: 323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (raw, json)
Hash identifier: g4Z5mSXxZcAi6nEDWqx+tEiutVvYZd7jK334oE8F11A=
Subject key identifier: 8D:C5:04:C8:1B:17:94:6F:80:16:CC:80:B4:52:C3:F5:05:DD:FE:2D
Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial: 781EAA6A2B14DFB816CA260E3C1807A6FC96E3D0
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa
Signing time: Wed 10 Jul 2024 01:00:01 +0000
ROA not before: Wed 10 Jul 2024 00:55:01 +0000
ROA not after: Wed 09 Jul 2025 01:00:01 +0000
asID: 38524
IP address blocks: 2401:de80:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1e:aa:6a:2b:14:df:b8:16:ca:26:0e:3c:18:07:a6:fc:96:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Validity
Not Before: Jul 10 00:55:01 2024 GMT
Not After : Jul 9 01:00:01 2025 GMT
Subject: CN=8DC504C81B17946F8016CC80B452C3F505DDFE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:44:c1:c2:d1:ec:99:4a:bc:dc:ba:df:4d:
b1:14:96:1f:c5:2d:ad:5b:a6:c9:45:b0:27:ab:96:
e8:8a:4b:b1:6b:e4:f1:e0:32:46:8f:af:6d:9c:a0:
43:dc:9d:d0:74:6e:fe:de:b4:24:1d:bb:1a:1f:2e:
81:e4:a1:c0:ae:96:a5:b9:b7:32:04:26:9e:b7:ef:
85:3a:1d:ea:63:59:33:b8:fa:9f:2b:f7:1d:14:53:
cf:4f:ae:29:e3:ae:aa:7b:a8:fe:de:4d:37:f4:df:
b5:09:52:91:71:9c:0f:4f:b4:dc:ac:1c:d0:7d:74:
27:c1:99:a8:13:b2:a1:27:6a:21:83:3e:0f:93:8e:
78:54:f3:59:d4:d3:70:ca:ce:b1:76:02:7c:a7:55:
d6:f6:75:cc:20:2f:a6:10:ff:d1:b9:7c:6b:0e:bb:
6c:0f:6c:47:26:88:6d:43:b5:91:e5:ef:b5:ae:3f:
f6:96:6e:ce:33:92:6a:48:44:d9:73:63:e6:79:0f:
de:42:c3:c5:02:83:6c:06:a3:62:b7:71:cf:9f:ef:
51:2f:49:33:aa:d0:2a:11:0a:b2:3a:33:d2:db:fc:
2a:1a:82:66:32:ab:fe:11:b4:d2:71:fd:44:65:fc:
ca:99:97:d0:cc:48:b6:c6:ea:47:62:e2:7f:91:14:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:04:C8:1B:17:94:6F:80:16:CC:80:B4:52:C3:F5:05:DD:FE:2D
X509v3 Authority Key Identifier:
keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:de80:c::/48
Signature Algorithm: sha256WithRSAEncryption
ac:7c:92:37:0a:c0:de:36:39:02:60:38:f5:6b:ff:2c:86:f9:
2a:b8:78:de:30:63:0a:05:23:a2:a3:81:30:b0:bb:95:84:c4:
7f:4c:b6:9b:e2:38:03:be:f1:03:e2:bc:1d:1b:84:77:41:ff:
b0:62:53:ee:a3:d3:db:68:07:26:e8:0b:d0:2a:16:b9:8b:21:
d7:bc:bb:ab:15:5c:6f:91:90:22:1d:ab:c3:ee:cc:74:d1:37:
11:81:ca:0e:cd:cf:d2:be:f3:c0:4d:97:c9:5d:bd:3a:0e:35:
25:5e:8e:4a:5a:d9:41:3b:27:cf:6f:0c:05:c9:55:44:f0:6b:
a3:86:b3:3a:c1:a5:36:bd:d6:84:67:c9:75:ec:8c:17:95:3e:
7a:e3:7a:66:dc:5d:35:ad:0a:71:bf:9a:7f:08:ed:07:bc:e1:
06:b8:eb:2b:88:e3:8e:a2:4e:29:86:a0:d8:12:f1:10:87:91:
2c:49:08:3d:54:b1:d1:44:af:f1:0c:61:99:fc:46:24:59:fb:
d0:9e:d7:72:ad:6b:0c:e4:e1:da:30:f5:2f:ec:86:98:d5:76:
90:7d:32:5b:76:71:d2:2b:47:27:0c:0b:3b:3d:10:ad:f2:b2:
04:98:8a:1b:53:8c:38:91:0c:8d:90:00:c1:18:76:7f:4b:a9:
eb:44:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:39 2025 by rpki-client