Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa
File: 323430313a616530303a3a2f34382d3438203d3e203338373533.roa (raw, json)
Hash identifier: vcWqHugRDCRA4TjuRYgJZjICKmDAlA+fa61LRtJjf3k=
Subject key identifier: 03:FA:E9:18:87:5C:C5:47:60:BC:D0:C3:AB:DD:A6:A4:A1:63:00:E1
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 78882690C653D7498078A1344CB3C1584C5A5FFA
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa
Signing time: Mon 15 Jul 2024 05:00:01 +0000
ROA not before: Mon 15 Jul 2024 04:55:01 +0000
ROA not after: Mon 14 Jul 2025 05:00:01 +0000
asID: 38753
IP address blocks: 2401:ae00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:88:26:90:c6:53:d7:49:80:78:a1:34:4c:b3:c1:58:4c:5a:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jul 15 04:55:01 2024 GMT
Not After : Jul 14 05:00:01 2025 GMT
Subject: CN=03FAE918875CC54760BCD0C3ABDDA6A4A16300E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:fe:06:43:7a:4c:79:93:d0:d6:6e:61:e7:
3b:4a:ae:77:c6:aa:7a:a1:aa:8e:52:1f:6c:b5:ce:
a1:54:ed:ff:86:7c:95:e9:12:ed:f2:df:25:00:cf:
66:56:82:7b:df:44:cc:b2:a5:1e:44:b6:ab:3f:64:
2c:00:e9:38:9d:94:60:09:c6:da:8e:f0:ec:40:83:
fe:02:e5:3e:7b:e5:41:c2:f2:9f:8b:48:59:05:0b:
05:b4:d7:42:37:cb:15:17:ae:00:a4:2e:e8:9c:36:
05:dc:7c:a5:c4:70:aa:89:79:e5:07:28:80:45:e7:
d3:ad:4f:29:ab:37:df:d1:04:ff:71:53:7c:2c:66:
97:4f:fe:fd:88:da:6c:de:62:3e:a6:39:18:58:7d:
d4:32:6b:a1:9b:c0:7b:a0:4a:f1:f8:86:a5:06:94:
3d:83:7d:f0:ac:60:57:73:67:84:e0:b6:13:f0:31:
7c:c4:a8:81:ef:25:bc:d7:b4:8c:15:eb:62:b3:5f:
d2:83:1d:38:8d:fb:bb:34:c5:4c:ee:e9:b1:fe:ce:
c1:b3:88:fd:bf:36:e5:e5:67:1c:f8:35:d5:bc:4f:
56:3d:e2:36:2d:88:cd:44:63:3d:fd:bb:ba:07:e6:
fe:a5:8f:46:0f:9d:bf:3f:2e:8a:81:30:f6:d6:44:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:E9:18:87:5C:C5:47:60:BC:D0:C3:AB:DD:A6:A4:A1:63:00:E1
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:ae00::/48
Signature Algorithm: sha256WithRSAEncryption
88:50:85:4c:cd:24:f8:42:0d:48:76:95:01:27:bc:1a:18:48:
d7:a2:9f:ff:20:bf:c6:21:8a:7b:f2:1b:0c:27:e3:99:88:ec:
bd:7c:c7:bf:8f:3b:fe:aa:18:84:aa:37:5d:af:0a:44:87:09:
40:95:f9:85:3b:3c:01:58:15:ef:10:b0:be:12:54:c6:22:46:
3b:bc:16:6f:42:2c:a2:24:6e:a7:e8:2c:63:44:28:f7:43:ff:
b3:55:e3:67:6e:24:7b:48:1b:55:6b:7e:33:c3:66:c8:32:9d:
3c:55:31:73:8c:b4:27:8c:c8:09:14:0b:63:4d:9d:b4:27:5a:
8f:7a:4b:f9:3f:6b:be:3b:81:95:13:2c:fb:bb:8d:ce:11:bc:
a7:cd:13:6b:38:5e:02:4e:4b:a4:76:d5:e6:ac:c2:f0:60:c3:
dd:6c:c4:b3:b1:62:35:e0:e8:66:a5:7b:17:41:f9:a4:1a:2a:
fe:94:aa:56:9b:77:9a:31:ab:78:88:87:8a:2a:4f:60:0b:23:
1f:4d:9f:a0:c8:08:ec:a4:3e:c7:1a:f3:74:f1:28:ff:70:f9:
b2:c2:b4:7c:0c:d6:f7:2b:db:ed:e1:2c:17:1a:63:8c:3a:30:
5b:17:04:24:03:dc:89:40:61:f2:e1:cf:42:0a:2c:ad:d6:95:
97:96:85:c4
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUeIgmkMZT10mAeKE0TLPBWExaX/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNDA3MTUwNDU1MDFaFw0yNTA3MTQwNTAwMDFaMDMxMTAvBgNV
BAMTKDAzRkFFOTE4ODc1Q0M1NDc2MEJDRDBDM0FCRERBNkE0QTE2MzAwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpf4GQ3pMeZPQ1m5h5ztKrnfG
qnqhqo5SH2y1zqFU7f+GfJXpEu3y3yUAz2ZWgnvfRMyypR5Etqs/ZCwA6TidlGAJ
xtqO8OxAg/4C5T575UHC8p+LSFkFCwW010I3yxUXrgCkLuicNgXcfKXEcKqJeeUH
KIBF59OtTymrN9/RBP9xU3wsZpdP/v2I2mzeYj6mORhYfdQya6GbwHugSvH4hqUG
lD2DffCsYFdzZ4TgthPwMXzEqIHvJbzXtIwV62KzX9KDHTiN+7s0xUzu6bH+zsGz
iP2/NuXlZxz4NdW8T1Y94jYtiM1EYz39u7oH5v6lj0YPnb8/LoqBMPbWRBmTAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUA/rpGIdcxUdgvNDDq92mpKFjAOEwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAa4AAAAwDQYJKoZI
hvcNAQELBQADggEBAIhQhUzNJPhCDUh2lQEnvBoYSNein/8gv8YhinvyGwwn45mI
7L18x7+PO/6qGISqN12vCkSHCUCV+YU7PAFYFe8QsL4SVMYiRju8Fm9CLKIkbqfo
LGNEKPdD/7NV42duJHtIG1VrfjPDZsgynTxVMXOMtCeMyAkUC2NNnbQnWo96S/k/
a747gZUTLPu7jc4RvKfNE2s4XgJOS6R21easwvBgw91sxLOxYjXg6GalexdB+aQa
Kv6Uqlabd5oxq3iIh4oqT2ALIx9Nn6DICOykPsca83TxKP9w+bLCtHwM1vcr2+3h
LBcaY4w6MFsXBCQD3IlAYfLhz0IKLK3WlZeWhcQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client