Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa
File: 323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa (raw, json)
Hash identifier: rZeCS55HO6aLQecVXkr9X9nZxnppbVZfkavZq+fHlns=
Subject key identifier: 77:BD:1B:A9:C2:CB:82:96:97:1D:25:13:EA:AE:95:2D:28:1E:45:37
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 541C5E7DFCCE4CFB49F698DE0D0A1DAAEAE0582E
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa
Signing time: Wed 29 Jan 2025 03:02:50 +0000
ROA not before: Wed 29 Jan 2025 02:57:50 +0000
ROA not after: Wed 28 Jan 2026 03:02:50 +0000
asID: 38753
IP address blocks: 2401:ae00:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1c:5e:7d:fc:ce:4c:fb:49:f6:98:de:0d:0a:1d:aa:ea:e0:58:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jan 29 02:57:50 2025 GMT
Not After : Jan 28 03:02:50 2026 GMT
Subject: CN=77BD1BA9C2CB8296971D2513EAAE952D281E4537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:a7:4b:a1:e0:26:c9:37:f6:75:ea:a4:85:
d5:6d:3e:90:3a:f1:0d:0e:a7:2a:1f:14:2e:ae:01:
08:59:55:ee:ef:f5:17:ea:d9:49:fa:d4:a9:4b:da:
ac:5c:8a:1f:3b:99:9c:21:6e:13:9e:2e:ff:2b:52:
ce:4c:c2:3d:12:14:2c:f2:ad:57:49:f2:6b:1e:fd:
27:23:9f:08:05:b2:b7:ef:2d:91:64:35:6e:8c:53:
4c:e8:59:02:80:7c:0f:c5:49:b6:a5:8d:17:78:7a:
dd:ca:3f:3e:a4:17:ff:91:54:b6:66:51:f3:a4:04:
48:a0:4b:f6:7e:6e:62:34:7a:db:34:e5:ce:17:95:
6c:bc:16:9e:3a:9f:a2:ab:43:e9:6b:6b:18:98:61:
d3:16:23:5b:f7:27:3c:47:ad:38:0b:24:cb:78:c4:
85:4e:0d:22:9c:83:44:cc:70:4d:a7:d2:79:aa:23:
b1:96:07:04:a9:39:90:54:90:08:4d:1a:97:39:eb:
ce:b6:fb:4c:e0:b5:a2:13:eb:71:18:47:ae:f4:25:
ae:81:f6:4e:06:c2:cd:f9:b5:71:2f:d4:ba:2b:a6:
0a:be:24:b7:f0:d8:79:e1:79:41:81:38:70:9c:96:
aa:99:30:ef:ba:48:b4:0e:27:1a:0f:95:bf:11:0b:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:1B:A9:C2:CB:82:96:97:1D:25:13:EA:AE:95:2D:28:1E:45:37
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:ae00:101::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f4:6e:c8:81:65:e8:c7:53:35:37:b8:97:d5:39:09:b3:41:
8f:4c:d0:01:ae:13:6a:06:21:ce:4d:ea:58:b6:d2:b7:ac:98:
36:66:ab:5a:4d:0b:60:4a:6e:06:65:53:27:e8:24:6b:70:52:
5c:7a:99:79:6b:95:1b:9c:21:81:a6:2a:a9:fe:c3:52:c6:88:
c7:3d:f5:fa:b3:6c:ed:48:f9:25:87:bc:ac:6c:e4:7f:23:63:
62:b2:67:bb:ef:bf:43:4c:db:ae:75:b7:bd:6f:88:02:40:1a:
d6:6d:89:37:35:9f:1c:05:6f:c1:cc:89:50:1c:eb:49:02:1d:
6d:4a:52:08:47:5c:c2:bc:66:81:47:bd:d0:b7:98:bb:fe:27:
71:6f:49:8f:de:18:c6:dc:7c:19:3c:79:80:45:23:79:54:cf:
76:84:f3:cd:88:b3:7b:91:04:6e:f5:a7:f0:bd:c9:e1:11:84:
4c:21:7b:66:5f:4d:a6:b4:bb:23:3e:57:7f:3d:bf:9c:a1:9c:
05:6a:73:d0:d1:51:bf:5f:59:8c:33:54:ae:22:b3:e2:69:92:
17:a3:e6:d6:c8:3b:8f:98:3c:f9:aa:24:97:17:f0:ba:7c:d5:
72:2a:58:fa:b3:99:d5:56:60:61:07:a6:af:2b:0a:f8:69:b5:
dc:98:bc:33
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVBxeffzOTPtJ9pjeDQodqurgWC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNTAxMjkwMjU3NTBaFw0yNjAxMjgwMzAyNTBaMDMxMTAvBgNV
BAMTKDc3QkQxQkE5QzJDQjgyOTY5NzFEMjUxM0VBQUU5NTJEMjgxRTQ1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eqdLoeAmyTf2deqkhdVtPpA6
8Q0OpyofFC6uAQhZVe7v9Rfq2Un61KlL2qxcih87mZwhbhOeLv8rUs5Mwj0SFCzy
rVdJ8mse/ScjnwgFsrfvLZFkNW6MU0zoWQKAfA/FSbaljRd4et3KPz6kF/+RVLZm
UfOkBEigS/Z+bmI0ets05c4XlWy8Fp46n6KrQ+lraxiYYdMWI1v3JzxHrTgLJMt4
xIVODSKcg0TMcE2n0nmqI7GWBwSpOZBUkAhNGpc56862+0zgtaIT63EYR670Ja6B
9k4Gws35tXEv1Lorpgq+JLfw2HnheUGBOHCclqqZMO+6SLQOJxoPlb8RC9RtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUd70bqcLLgpaXHSUT6q6VLSgeRTcwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzEzMDMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBrgAB
ATANBgkqhkiG9w0BAQsFAAOCAQEAa/RuyIFl6MdTNTe4l9U5CbNBj0zQAa4TagYh
zk3qWLbSt6yYNmarWk0LYEpuBmVTJ+gka3BSXHqZeWuVG5whgaYqqf7DUsaIxz31
+rNs7Uj5JYe8rGzkfyNjYrJnu++/Q0zbrnW3vW+IAkAa1m2JNzWfHAVvwcyJUBzr
SQIdbUpSCEdcwrxmgUe90LeYu/4ncW9Jj94Yxtx8GTx5gEUjeVTPdoTzzYize5EE
bvWn8L3J4RGETCF7Zl9NprS7Iz5Xfz2/nKGcBWpz0NFRv19ZjDNUriKz4mmSF6Pm
1sg7j5g8+aoklxfwunzVcipY+rOZ1VZgYQemrysK+Gm13Ji8Mw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:30 2025 by rpki-client