Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa
File: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (raw, json)
Hash identifier: j7YamreoNvDtpRRCa1576yblhtpzYGNi0GVQwvs+/uU=
Subject key identifier: 1A:BC:4F:25:32:71:B8:C1:DB:FE:43:BE:ED:5C:86:4A:2F:DF:2E:E6
Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
Certificate serial: 4B23438B1300F6242ED6A457C268E167866587ED
Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa
Signing time: Mon 01 Jul 2024 01:04:29 +0000
ROA not before: Mon 01 Jul 2024 00:59:29 +0000
ROA not after: Mon 30 Jun 2025 01:04:29 +0000
asID: 58376
IP address blocks: 2403:e600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:23:43:8b:13:00:f6:24:2e:d6:a4:57:c2:68:e1:67:86:65:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
Validity
Not Before: Jul 1 00:59:29 2024 GMT
Not After : Jun 30 01:04:29 2025 GMT
Subject: CN=1ABC4F253271B8C1DBFE43BEED5C864A2FDF2EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:e4:1e:7d:82:d0:29:f2:cf:36:1c:92:16:
f3:a3:09:e9:10:b6:48:60:b9:9c:11:e4:6a:40:62:
9c:2b:2e:63:3e:91:21:49:11:6e:24:8c:28:22:a8:
cb:38:1e:a6:d2:b7:b9:96:02:16:39:b8:52:48:c3:
32:32:68:aa:c5:27:66:a6:d2:a9:9f:91:ff:0a:e9:
72:64:bd:e4:2b:12:0f:16:0c:89:08:62:fe:f6:d0:
fb:61:63:2d:b2:59:e8:a8:98:ba:bd:42:a6:5d:01:
f3:9c:a7:78:b1:6d:bf:af:d5:df:87:ab:ee:9e:1c:
0c:86:18:c5:bc:db:05:4a:b2:a8:9b:4c:56:9a:e3:
cb:81:d7:7d:3b:0c:0c:49:e1:85:89:4e:8e:db:87:
21:c2:82:bf:c1:ac:5a:11:ac:8b:cf:d6:9a:5a:87:
b1:7b:e7:85:99:b0:cd:c7:83:2c:6e:cf:af:ae:70:
fc:d2:e7:9b:d1:14:20:9a:68:bb:91:e2:99:38:b7:
7c:47:27:f9:71:55:6f:bd:3d:7c:73:5a:a1:8d:c3:
18:08:c1:8b:10:6d:d4:54:63:07:21:b8:e4:1a:c8:
00:23:a9:ef:bb:4c:79:e5:d9:8b:74:b6:59:8e:f5:
81:6e:b5:bf:4c:1f:1e:39:17:57:79:8f:7e:3a:df:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:4F:25:32:71:B8:C1:DB:FE:43:BE:ED:5C:86:4A:2F:DF:2E:E6
X509v3 Authority Key Identifier:
keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e600::/32
Signature Algorithm: sha256WithRSAEncryption
70:70:88:3a:fd:04:3a:4f:81:6c:dc:e6:9d:14:00:4f:7a:c8:
81:3a:d0:c8:21:e6:1e:8c:11:d8:f0:e7:ff:f0:c5:66:64:09:
58:69:dc:84:fd:12:67:fb:4b:ec:5c:cb:c4:ec:57:6d:76:36:
1b:73:8b:c2:0a:15:97:af:6b:ab:1f:ca:80:fa:c7:6e:61:cf:
08:1b:49:30:6e:a2:d7:99:52:53:cb:1a:5a:15:36:b3:25:95:
d1:f0:86:8c:b0:20:cf:24:16:24:bb:72:61:87:5d:8a:a5:75:
df:52:ed:cc:e0:be:1e:b8:74:0f:50:f4:3d:7c:50:96:31:94:
38:cf:24:e7:ca:55:d2:88:c6:cc:14:de:b9:34:14:43:a7:22:
71:7c:0a:68:f3:1a:34:12:1c:cb:12:ff:7f:62:6d:d1:c9:6c:
f1:d0:e6:97:27:52:52:57:53:7d:ec:df:5f:e1:fe:dd:92:1c:
29:9b:11:dc:10:85:12:2a:29:a5:9d:96:a2:08:e0:7c:15:60:
5a:ba:5e:d8:1a:75:b6:80:c8:44:85:10:15:1c:67:85:4d:4b:
0d:e8:2b:f3:51:a1:14:bf:f0:7d:6b:da:4c:a0:51:34:df:d6:
8a:ea:4a:94:7c:b0:c2:47:94:5f:f1:3c:58:d2:ee:26:3d:dc:
71:d7:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:40 2025 by rpki-client