Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: PqiUcpNf/7FxBWSo0M7ORKTw4r0GFcdqTZ8jW03mfAU=
Subject key identifier: 7C:12:02:3A:A7:9A:BF:46:77:64:36:B1:65:E2:16:0E:D0:97:4F:78
Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial: 1F33A5240902021E6C27F9A9EE465ABC416E2881
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 29 Dec 2024 08:00:00 +0000
ROA not before: Sun 29 Dec 2024 07:55:00 +0000
ROA not after: Sun 28 Dec 2025 08:00:00 +0000
asID: 139972
IP address blocks: 2405:c440:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:33:a5:24:09:02:02:1e:6c:27:f9:a9:ee:46:5a:bc:41:6e:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
Validity
Not Before: Dec 29 07:55:00 2024 GMT
Not After : Dec 28 08:00:00 2025 GMT
Subject: CN=7C12023AA79ABF46776436B165E2160ED0974F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:8e:ac:e1:75:fb:e8:8b:ac:b4:ad:21:b7:
51:e2:2d:dc:3b:52:54:38:45:31:93:b3:5d:f5:82:
b2:9b:84:10:1a:e9:80:1b:e1:b0:cd:e0:8e:79:56:
1e:97:f9:4b:80:bc:44:90:66:e7:4d:b3:a0:bd:8e:
e0:5a:5d:50:f8:c0:a8:1e:4a:94:f3:0d:42:ef:b8:
04:ee:ed:b3:99:6d:7d:23:29:71:5c:9a:78:47:cb:
fc:c8:03:bb:bc:4c:3c:73:21:fa:8a:5e:55:b0:94:
64:4e:8b:fd:7f:dc:ae:df:e2:6d:0c:df:16:d5:b8:
f8:ee:0a:7e:94:74:46:f8:7f:d0:4f:01:fc:5e:2b:
f1:4a:a8:dc:87:2c:ef:1b:6f:4e:10:7a:ba:a8:61:
70:a7:0c:16:e4:f0:ba:c2:df:9d:89:d0:1c:24:36:
53:8d:66:88:19:41:f0:0f:b3:38:1d:56:e9:53:99:
4b:41:5e:b8:cd:6e:66:23:62:34:d1:32:8a:d0:f7:
1b:8a:a5:2c:ba:f3:63:b6:38:17:0d:33:b9:15:8f:
52:93:46:7a:53:9f:90:1e:51:81:dc:0f:02:53:78:
10:2d:90:85:63:24:a6:ba:53:be:c5:28:77:22:e3:
d7:6a:2e:16:75:e1:bd:01:e6:a8:51:ea:9f:9d:32:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:02:3A:A7:9A:BF:46:77:64:36:B1:65:E2:16:0E:D0:97:4F:78
X509v3 Authority Key Identifier:
keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:7::/48
Signature Algorithm: sha256WithRSAEncryption
42:84:2c:95:c9:45:9a:de:09:62:3c:ab:80:a0:69:89:50:15:
f8:11:2e:da:07:06:f5:68:d6:cc:34:cb:f8:25:c0:b2:61:89:
e2:48:a4:41:4a:8f:0f:fc:d9:40:dc:fc:df:b7:73:74:db:06:
51:ce:3a:2f:16:0f:45:29:83:5f:78:f3:71:0b:5a:41:b0:de:
57:4c:46:02:23:de:20:38:65:23:b2:89:25:8d:de:f1:dd:5f:
d6:91:0a:e4:13:f8:ea:fb:ca:51:dc:6a:a1:df:50:16:dc:70:
12:70:15:f7:df:ae:f0:81:53:82:c2:f7:95:9b:03:67:c7:4d:
52:44:90:85:0d:a3:4f:03:8f:df:f8:49:35:fb:8f:64:35:ea:
de:06:7f:a8:22:07:99:03:0f:5b:49:6a:9a:3a:3a:58:34:35:
e6:c8:4a:02:45:62:55:e9:6c:bb:7e:3b:9b:f3:c5:df:23:fa:
a1:b6:d5:39:28:07:e6:f4:e2:72:94:a3:60:71:07:41:c1:a7:
41:bf:b3:d0:56:2f:be:74:1b:16:79:72:21:38:f6:2b:7f:2b:
96:db:12:03:da:e1:13:ce:36:40:2d:ae:a0:7d:4d:18:32:44:
22:19:32:6b:08:96:13:c0:42:a2:a6:35:dc:cf:82:2e:5c:cf:
0d:4f:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:10 2025 by rpki-client