Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa
File: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (raw, json)
Hash identifier: DJfrVwcLfwrZt5y5DTZ1JwrluCne37VgiVb+YiXDdDw=
Subject key identifier: 2B:4A:25:CA:60:88:0C:F5:03:6C:12:0F:33:32:89:59:64:45:91:FE
Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Certificate serial: 03D0BBE2FD0EC92E4910815BC3A5206146A37B9C
Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa
Signing time: Mon 01 Jul 2024 01:04:02 +0000
ROA not before: Mon 01 Jul 2024 00:59:02 +0000
ROA not after: Mon 30 Jun 2025 01:04:02 +0000
asID: 131706
IP address blocks: 2402:e300::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d0:bb:e2:fd:0e:c9:2e:49:10:81:5b:c3:a5:20:61:46:a3:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Validity
Not Before: Jul 1 00:59:02 2024 GMT
Not After : Jun 30 01:04:02 2025 GMT
Subject: CN=2B4A25CA60880CF5036C120F33328959644591FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:9c:5b:aa:02:39:7d:a1:3f:71:fe:1f:fd:
9b:e5:0a:2a:2a:d0:3a:d5:67:ec:6a:d1:ac:37:e7:
6f:43:c3:d9:dc:a8:60:be:d3:b8:8b:47:e3:ed:38:
04:26:61:bf:0a:a5:44:04:d1:a7:db:fa:28:f1:ac:
c8:36:34:e5:8f:04:e8:36:c2:21:f6:49:9c:fb:c6:
ed:27:0a:9b:10:94:c9:f9:5a:b9:1e:81:cf:fe:f2:
09:88:b2:14:f4:7a:57:5b:39:a6:d9:4a:3e:85:01:
c9:7b:c5:8a:1d:c3:c3:7b:a7:13:a9:40:45:1d:75:
23:8a:44:e5:a6:54:f9:41:9a:5b:3a:46:19:48:8f:
f9:64:04:43:f2:47:e9:a4:43:8f:ec:04:41:b9:5f:
d0:19:0d:d4:62:81:c7:5f:6e:a3:ff:dc:2d:08:6c:
06:48:db:e4:ec:79:ee:f8:43:73:1f:2e:8c:e5:a0:
da:1f:22:37:d2:0d:23:e9:fc:7d:2b:2a:c5:93:50:
5d:f4:c1:cc:69:1b:73:f0:49:86:53:7e:e1:e5:b4:
88:55:b6:03:4d:dd:59:49:2c:f1:31:7e:c5:04:23:
7d:ed:da:08:bf:a0:23:d5:a9:96:cc:55:dd:80:94:
f2:80:65:27:ff:60:1d:9f:f7:9e:40:08:a0:86:48:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:25:CA:60:88:0C:F5:03:6C:12:0F:33:32:89:59:64:45:91:FE
X509v3 Authority Key Identifier:
keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e300::/32
Signature Algorithm: sha256WithRSAEncryption
93:d0:96:0b:65:fe:8d:87:63:fd:df:ea:f5:76:47:25:3f:b7:
16:da:ba:a8:41:5f:6a:1d:08:c4:b4:e5:60:87:d9:71:a8:8e:
d4:e0:08:4b:8c:4f:16:6d:c9:eb:d6:a4:89:c8:1d:c6:8b:31:
56:83:44:24:f8:ae:f7:c2:78:58:5f:8d:fd:ea:53:1a:ba:a5:
32:53:9b:8b:d5:16:7b:55:98:05:38:6f:03:e1:64:b7:d3:e1:
a9:e0:bc:dd:b1:46:ed:e6:fe:19:9d:d2:cc:ac:d0:7d:31:0c:
47:8c:5c:7f:cc:0c:e4:8c:13:47:86:07:e6:f0:4d:c4:28:7e:
a7:c8:cf:54:04:81:28:b8:90:93:01:9e:41:58:02:66:4e:2e:
af:35:b4:3b:1e:d1:34:27:74:38:da:b5:b9:98:25:b2:4d:06:
ac:0b:f7:34:8e:a3:a8:f7:7c:f0:82:4d:ee:e8:a3:a4:60:76:
f6:8e:15:5c:39:fd:27:0b:18:3c:5f:32:a2:e1:5c:96:bf:9d:
fb:53:2e:23:d7:52:20:e6:67:2d:ef:27:c1:4d:86:69:37:ca:
36:47:07:e1:fb:14:5b:4b:1f:a8:63:84:39:c7:a5:15:bb:5b:
9a:41:c6:60:68:8d:36:2a:03:59:5a:f3:23:fe:23:7a:ab:d3:
7b:c0:e1:9a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUA9C74v0OyS5JEIFbw6UgYUaje5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1
NjNERkU3MjAeFw0yNDA3MDEwMDU5MDJaFw0yNTA2MzAwMTA0MDJaMDMxMTAvBgNV
BAMTKDJCNEEyNUNBNjA4ODBDRjUwMzZDMTIwRjMzMzI4OTU5NjQ0NTkxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVf5xbqgI5faE/cf4f/ZvlCioq
0DrVZ+xq0aw3529Dw9ncqGC+07iLR+PtOAQmYb8KpUQE0afb+ijxrMg2NOWPBOg2
wiH2SZz7xu0nCpsQlMn5Wrkegc/+8gmIshT0eldbOabZSj6FAcl7xYodw8N7pxOp
QEUddSOKROWmVPlBmls6RhlIj/lkBEPyR+mkQ4/sBEG5X9AZDdRigcdfbqP/3C0I
bAZI2+Tsee74Q3MfLozloNofIjfSDSPp/H0rKsWTUF30wcxpG3PwSYZTfuHltIhV
tgNN3VlJLPExfsUEI33t2gi/oCPVqZbMVd2AlPKAZSf/YB2f955ACKCGSLHHAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUK0olymCIDPUDbBIPMzKJWWRFkf4wHwYDVR0j
BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx
QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE
RkU3Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyN2E2ZjM0LTFiNmUtNGU5Mi1i
MmQyLTBiOTMwMWE2NjZhNS8wLzMyMzQzMDMyM2E2NTMzMzAzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzMTM3MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQC4wAwDQYJKoZI
hvcNAQELBQADggEBAJPQlgtl/o2HY/3f6vV2RyU/txbauqhBX2odCMS05WCH2XGo
jtTgCEuMTxZtyevWpInIHcaLMVaDRCT4rvfCeFhfjf3qUxq6pTJTm4vVFntVmAU4
bwPhZLfT4angvN2xRu3m/hmd0sys0H0xDEeMXH/MDOSME0eGB+bwTcQofqfIz1QE
gSi4kJMBnkFYAmZOLq81tDse0TQndDjatbmYJbJNBqwL9zSOo6j3fPCCTe7oo6Rg
dvaOFVw5/ScLGDxfMqLhXJa/nftTLiPXUiDmZy3vJ8FNhmk3yjZHB+H7FFtLH6hj
hDnHpRW7W5pBxmBojTYqA1la8yP+I3qr03vA4Zo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:38 2025 by rpki-client