Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/323030313a6466313a323630303a3a2f34382d3438203d3e203539313531.roa
File: 323030313a6466313a323630303a3a2f34382d3438203d3e203539313531.roa (raw, json)
Hash identifier: vhCKuOaoTGaQ4GDSUNJWhFVxL8oQegZlZW2XAyJemI0=
Subject key identifier: 17:C9:85:33:AE:A7:3B:38:D7:62:45:05:52:91:CE:3F:CF:EB:96:14
Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Certificate serial: 44DCEF2D467AB522DA9DC51514AF634212B14406
Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/323030313a6466313a323630303a3a2f34382d3438203d3e203539313531.roa
Signing time: Tue 19 Apr 2022 09:00:38 +0000
ROA not before: Tue 19 Apr 2022 08:55:38 +0000
ROA not after: Tue 18 Apr 2023 09:00:38 +0000
asID: 59151
IP address blocks: 2001:df1:2600::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:dc:ef:2d:46:7a:b5:22:da:9d:c5:15:14:af:63:42:12:b1:44:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Validity
Not Before: Apr 19 08:55:38 2022 GMT
Not After : Apr 18 09:00:38 2023 GMT
Subject: CN=17C98533AEA73B38D76245055291CE3FCFEB9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:30:7a:f1:6f:c9:b1:c2:df:5a:85:4e:96:
fb:a4:11:67:96:83:bb:51:b6:41:98:83:bf:5d:13:
f5:27:c3:1f:67:61:c5:8e:94:4f:2c:a6:d0:47:9e:
21:01:2c:41:cb:58:0e:52:50:b0:d5:d3:4a:e6:f2:
e0:ce:70:fb:c1:4c:91:57:00:d3:c2:ff:ed:67:11:
64:9a:61:72:be:cc:d9:bb:15:78:c1:5d:fb:f8:c8:
2e:5c:52:79:6f:e8:54:d9:d4:af:63:2f:79:dc:ff:
13:59:c5:ee:2d:3c:43:46:29:88:33:c6:75:3e:70:
81:ae:9d:3d:66:1e:6d:a5:50:b8:80:1d:77:0f:c9:
7e:cd:74:f5:44:80:bc:1a:70:ee:24:e3:bc:a6:ec:
ef:6b:b9:79:52:73:48:64:d5:92:3f:ad:65:2a:08:
16:2f:a2:f9:5b:9c:13:a1:a5:3a:63:87:c7:f3:05:
e0:8d:51:53:2e:80:48:f2:15:f6:44:e7:fb:18:43:
61:69:99:7b:53:e5:b1:47:bf:b9:b1:65:ec:25:fa:
b2:ad:ea:b3:da:47:d9:1c:df:b3:a7:6b:c3:fd:98:
d0:22:bb:f1:4b:ed:1c:3c:c5:98:f8:70:49:4f:2b:
4c:c7:d6:9c:85:a3:d7:81:e1:77:cc:55:27:0c:42:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:85:33:AE:A7:3B:38:D7:62:45:05:52:91:CE:3F:CF:EB:96:14
X509v3 Authority Key Identifier:
keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/323030313a6466313a323630303a3a2f34382d3438203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:2600::/48
Signature Algorithm: sha256WithRSAEncryption
8d:9e:7d:9f:69:64:9b:2e:fb:0a:25:da:47:4c:e0:f2:d7:c8:
b7:b3:17:9e:7d:2e:7a:a9:f8:99:0f:0b:54:7f:07:d7:1f:18:
03:03:f0:75:8e:38:0c:01:aa:70:05:62:0e:49:ea:be:ac:48:
9f:36:b6:f5:2c:aa:36:0d:6c:81:33:78:2c:fb:6f:af:6f:4f:
b2:a3:65:6c:bf:51:97:ac:9e:78:ad:0b:a8:ff:7f:bb:f7:82:
06:63:32:6a:75:32:69:47:f9:83:d6:8a:3f:e2:cf:08:58:48:
14:59:c9:9d:29:2d:c6:80:1d:2c:4b:61:48:c2:02:3f:99:e6:
f2:ab:03:82:d0:ae:90:fb:b2:d6:a2:b4:50:da:b7:10:91:83:
9e:b7:c6:23:b9:2a:6f:73:2b:02:33:45:e4:c0:59:64:a5:b0:
3d:d4:b7:53:75:d1:b5:1e:9f:5a:3a:1d:8c:05:bd:cc:42:b3:
b8:40:34:0c:1f:59:30:62:b7:63:9d:42:66:1a:f2:eb:89:89:
06:4e:c5:60:22:6b:f3:09:d3:da:61:b4:f4:b0:e0:48:9a:a1:
7a:7a:61:07:13:c6:fa:1d:88:d1:cf:0d:61:e4:b7:a9:49:99:
29:f6:d6:48:ad:69:3a:ff:82:67:38:37:17:f7:a6:ab:c9:b1:
2a:30:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:49 2025 by rpki-client