Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa
File: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (raw, json)
Hash identifier: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=
Subject key identifier: 3D:F3:32:33:F3:2E:AB:3D:68:98:C1:0F:7A:25:12:2A:6A:3A:C8:BD
Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Certificate serial: 26B4DC6CED56594DFD808ABCAA67B8F159CD9BE9
Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa
Signing time: Sat 02 Nov 2024 11:00:00 +0000
ROA not before: Sat 02 Nov 2024 10:55:00 +0000
ROA not after: Sat 01 Nov 2025 11:00:00 +0000
asID: 24536
IP address blocks: 2404:4200::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b4:dc:6c:ed:56:59:4d:fd:80:8a:bc:aa:67:b8:f1:59:cd:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Validity
Not Before: Nov 2 10:55:00 2024 GMT
Not After : Nov 1 11:00:00 2025 GMT
Subject: CN=3DF33233F32EAB3D6898C10F7A25122A6A3AC8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:55:d5:11:6a:ea:c0:4f:7a:69:a2:1d:7b:
03:39:79:6c:4c:20:3f:bc:61:d1:4b:48:a7:8f:62:
0a:09:91:f6:b0:13:d5:32:89:f6:f7:6c:e8:9f:61:
52:1d:1d:3c:de:1f:dc:f7:fb:d2:ea:22:58:7e:11:
91:a7:4e:55:83:23:ce:35:b5:8e:86:df:07:87:d9:
fe:7a:90:8b:18:1f:bb:0c:ff:e0:3f:6e:05:dd:f6:
11:fc:a2:74:3a:d1:2a:90:d9:64:db:bb:e0:64:e6:
f6:16:cf:5f:95:5a:18:6a:d0:a8:ec:38:ef:a2:2e:
5a:f8:f2:f6:7d:89:68:35:ec:e4:e8:8d:2b:a3:8a:
74:32:62:48:48:87:25:61:22:2a:c3:b4:a9:f5:42:
3e:b8:52:1b:13:bc:33:46:dc:2c:25:c9:da:a5:48:
7d:42:7c:4a:9a:6f:91:60:3f:03:c4:a8:b0:2b:5f:
fe:fa:49:1d:da:62:35:c9:9c:ea:07:46:82:61:86:
e5:41:fb:5e:dc:25:a8:4b:b1:1f:cb:3a:31:98:df:
18:7c:14:ca:13:c5:8a:ed:e1:2b:8a:46:2d:d5:0a:
0d:29:3b:0b:09:49:e9:d5:ea:4e:30:a1:2b:f7:04:
ca:3a:d6:26:4b:0e:8f:1a:84:12:5d:35:9f:9b:53:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:32:33:F3:2E:AB:3D:68:98:C1:0F:7A:25:12:2A:6A:3A:C8:BD
X509v3 Authority Key Identifier:
keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/323430343a343230303a3a2f33322d3438203d3e203234353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:4200::/32
Signature Algorithm: sha256WithRSAEncryption
5e:f9:63:7e:eb:22:99:c1:54:3a:be:0b:01:71:3a:00:30:c3:
18:fd:9f:53:6d:b0:d5:b0:11:c4:e3:09:20:5d:cb:ab:c4:57:
e4:63:92:2d:00:4e:88:06:f8:87:87:0d:ff:5e:5d:7c:99:55:
ee:98:57:b0:44:0b:8f:55:e4:1a:30:54:fe:73:42:dd:2b:96:
dc:58:fd:6a:2f:85:09:49:13:35:3c:3c:bd:bf:17:33:f9:4e:
81:17:24:4b:67:93:5c:5d:26:af:3d:3a:d4:53:50:9f:7c:32:
7d:b6:91:29:3c:95:be:dc:26:94:32:07:68:0c:d1:7d:5c:42:
2e:e0:ce:2a:7e:2e:c4:8c:a5:4e:f2:af:a9:70:ac:6a:b4:2e:
73:4f:d5:59:8d:31:12:b2:17:c9:6f:5c:a4:a7:64:82:0a:d3:
95:c9:85:9a:f3:79:65:02:a9:7e:f9:3a:d9:79:34:83:c3:5f:
a1:89:50:61:9a:25:87:af:3c:ad:2d:ce:ee:06:d6:0f:e0:69:
7e:d6:96:46:a0:1b:01:b5:ce:a9:81:8e:85:26:94:e3:3c:15:
99:04:8e:00:c1:d5:81:f6:fc:60:c4:dc:c3:dd:29:6f:4c:4a:
6b:91:bf:42:90:40:5b:78:ae:b4:a0:e8:ca:aa:33:2d:dd:d0:
4b:49:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:47 2025 by rpki-client