Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa
File: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (raw, json)
Hash identifier: sSXWhrWvqzQ+vxHJjhskTpislSGynAyGOv8jxoTDXpU=
Subject key identifier: F5:81:A8:A6:AB:4E:1E:D0:40:BB:4F:81:27:18:A4:A8:DD:09:F3:13
Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568
Certificate serial: 0B153D6FD4DCF355D04A53EC67AA49D4CA0D7510
Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa
Signing time: Wed 16 Oct 2024 03:00:01 +0000
ROA not before: Wed 16 Oct 2024 02:55:01 +0000
ROA not after: Wed 15 Oct 2025 03:00:01 +0000
asID: 137297
IP address blocks: 2001:df3:d700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:15:3d:6f:d4:dc:f3:55:d0:4a:53:ec:67:aa:49:d4:ca:0d:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30C39359651C33B59AC32BC46831980108960568
Validity
Not Before: Oct 16 02:55:01 2024 GMT
Not After : Oct 15 03:00:01 2025 GMT
Subject: CN=F581A8A6AB4E1ED040BB4F812718A4A8DD09F313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:ea:d7:fd:7a:65:34:df:71:1e:f6:60:5e:
13:ce:07:31:95:11:7d:d7:7c:6f:e1:b0:c0:38:8b:
78:6b:41:b9:fb:ba:95:d4:22:fc:17:b9:95:aa:c6:
45:97:d5:f5:e6:56:6c:bc:fd:a0:0c:5e:16:07:6f:
bc:91:1e:6a:74:f8:39:fb:70:ee:c4:3d:6e:80:c9:
97:28:2b:4a:f3:3a:d7:9b:b3:3b:d9:4b:c8:65:b3:
76:85:40:e1:41:1b:71:b0:a8:dc:fd:b7:10:e1:9a:
f3:6d:e3:40:62:09:16:78:a2:60:6e:86:29:1e:4b:
62:be:b6:f4:96:a5:ac:17:36:6c:89:49:8d:4e:da:
b1:b5:4e:9b:19:60:2c:00:c7:35:4d:5a:a0:74:17:
4d:1a:66:c7:1d:df:74:b1:6b:d8:8a:07:b2:ee:09:
3f:6c:bc:01:ab:d7:f1:eb:e3:fd:33:39:ce:bc:97:
ca:ac:b5:b8:1d:e0:79:f1:27:76:8b:28:c3:f3:03:
1c:ad:43:33:74:f2:ed:a2:d0:9b:a2:9f:2e:14:0a:
6a:23:7a:5b:dd:21:c1:3f:08:1c:ab:53:74:07:07:
23:1a:af:13:16:8c:39:09:ce:85:7e:5d:9d:d1:6c:
b6:4c:89:71:aa:30:4a:21:7c:0e:fd:04:6e:b6:b7:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:A8:A6:AB:4E:1E:D0:40:BB:4F:81:27:18:A4:A8:DD:09:F3:13
X509v3 Authority Key Identifier:
keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d700::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d2:2e:a3:50:31:07:e8:75:0f:32:1b:55:b1:e7:86:5b:db:
e0:b2:a2:5d:79:78:2a:f6:72:a5:7f:2f:fa:cf:f4:0c:2c:87:
46:75:06:30:96:26:db:ea:13:4b:03:da:f5:a5:e0:f9:16:a3:
4c:a3:85:ac:4c:a8:93:e5:bb:66:6d:9a:28:06:64:76:2a:f2:
c6:42:64:ab:4d:a2:a3:3e:57:de:55:03:2d:14:f3:27:c7:26:
d5:89:7d:2f:9c:52:86:38:58:b0:23:76:5e:af:f0:70:91:6b:
0d:09:56:80:5b:26:f4:4d:d4:19:a3:40:5e:d4:70:7f:c6:4a:
94:43:44:06:85:65:fa:51:09:b9:95:9d:f4:2e:ed:80:76:8c:
0b:bc:4c:68:aa:2d:93:fc:e5:de:af:06:15:2b:4f:39:7f:2d:
5a:13:61:58:2d:e9:19:95:c9:34:8e:2a:91:64:38:3a:aa:bd:
34:10:51:b7:48:69:95:8f:03:fa:27:dc:9a:7e:3f:ca:26:df:
f9:c7:6a:2e:43:f7:78:be:e3:be:22:ae:83:b2:04:3f:e9:d9:
cb:82:c4:bf:bb:15:8b:85:93:1a:cf:40:58:c3:48:f3:c8:5e:
ce:e2:0e:60:52:2a:58:46:d2:24:8c:07:b3:9a:ee:bc:1f:40:
2f:ca:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:27 2025 by rpki-client