Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa
File: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier: mhxOtleUhwzJQhVm0X1OZ2EBHI9+zCiCaY9ucqS4Jbw=
Subject key identifier: 97:4A:9D:AB:57:08:86:48:FB:7A:6D:38:71:35:4E:EE:15:8B:D6:CC
Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial: 0750C5201EF560AD82B08961743DEEA8282D2FEB
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa
Signing time: Mon 28 Oct 2024 05:02:55 +0000
ROA not before: Mon 28 Oct 2024 04:57:55 +0000
ROA not after: Mon 27 Oct 2025 05:02:55 +0000
asID: 141968
IP address blocks: 2407:6ac0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:50:c5:20:1e:f5:60:ad:82:b0:89:61:74:3d:ee:a8:28:2d:2f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Validity
Not Before: Oct 28 04:57:55 2024 GMT
Not After : Oct 27 05:02:55 2025 GMT
Subject: CN=974A9DAB57088648FB7A6D3871354EEE158BD6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:c0:f1:c4:5b:af:fd:79:22:52:cc:ee:0f:
8f:2b:6a:fe:94:6d:f2:0d:7c:87:1d:a2:2a:0d:e6:
83:a8:3b:63:29:bc:0a:4d:4a:9f:8d:49:11:c9:5a:
68:6b:f4:47:a1:4a:38:13:33:60:b0:ea:91:44:28:
0f:3e:10:d3:da:73:2e:f5:ae:9a:e9:2c:4e:40:52:
63:55:be:19:48:1f:a2:2b:e3:d2:d8:d3:92:a8:8b:
68:f8:a0:80:d3:63:20:5a:9c:95:56:6e:cf:8f:b2:
29:2a:a9:d0:61:d4:c4:67:74:aa:32:84:79:7a:22:
19:78:5c:9f:d0:ff:fa:39:fc:4b:26:12:12:0b:1e:
6d:00:db:d2:e6:c9:b5:02:4e:09:e8:7a:c8:f5:a1:
84:a6:5c:10:62:8b:00:dd:d4:95:6b:85:8a:ec:80:
54:f9:a2:80:eb:44:1b:1d:3c:f2:cc:30:ac:09:f6:
7a:f9:5f:8c:b6:37:d6:6d:9c:d5:ec:57:85:7b:89:
f7:16:af:86:67:2a:24:15:12:db:94:50:72:a7:81:
02:16:1b:9d:fa:55:e3:8e:29:90:5b:78:81:4f:92:
d1:86:72:16:31:a9:95:65:fc:0b:77:28:e8:c3:d7:
42:10:38:78:d4:09:a0:81:ee:74:67:60:41:4f:2d:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:9D:AB:57:08:86:48:FB:7A:6D:38:71:35:4E:EE:15:8B:D6:CC
X509v3 Authority Key Identifier:
keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6ac0:2::/48
Signature Algorithm: sha256WithRSAEncryption
21:f5:e4:79:b0:98:51:1b:ab:9f:d5:37:85:82:fc:cf:45:52:
38:5a:86:41:6b:05:38:2f:76:4e:c9:66:3d:37:70:81:e4:0d:
14:90:e3:24:9c:79:ea:9e:a0:ee:76:88:df:cf:fd:2f:7d:6b:
bf:70:27:d7:c7:02:04:1a:66:0a:99:1a:8d:d4:e8:1b:cd:7a:
75:10:a2:81:f1:dd:b7:a2:b4:aa:91:2e:53:ef:0e:5a:fa:79:
02:2a:31:76:80:1f:b8:e9:70:75:ab:9d:04:b6:d2:4e:a3:51:
09:5a:14:63:76:97:e0:2e:e2:80:27:cc:da:80:50:a7:cc:d6:
c5:a9:ac:d7:a5:1b:50:37:13:a7:27:37:bb:eb:8d:50:b4:8b:
7c:ed:6a:ad:7b:c2:4b:a3:2d:3c:07:09:08:0b:79:6e:83:9e:
c6:00:c1:dd:95:a4:d4:d2:4b:85:63:5a:6a:05:35:50:df:10:
7c:4d:da:e0:10:34:e5:fa:31:20:19:e7:9f:25:7b:4f:24:20:
2c:04:70:28:86:bf:c5:b1:5a:3a:a2:81:ec:60:31:ea:06:ad:
0b:d7:fe:b1:0e:96:a4:5a:03:83:eb:66:09:e1:ef:55:46:df:
a5:9d:ff:40:f4:9a:1e:d4:7a:8e:c2:62:d2:88:39:37:8e:16:
09:a9:b7:f8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUB1DFIB71YK2CsIlhdD3uqCgtL+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB
NEY2OTM4NzAeFw0yNDEwMjgwNDU3NTVaFw0yNTEwMjcwNTAyNTVaMDMxMTAvBgNV
BAMTKDk3NEE5REFCNTcwODg2NDhGQjdBNkQzODcxMzU0RUVFMTU4QkQ2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f8DxxFuv/XkiUszuD48rav6U
bfINfIcdoioN5oOoO2MpvApNSp+NSRHJWmhr9EehSjgTM2Cw6pFEKA8+ENPacy71
rprpLE5AUmNVvhlIH6Ir49LY05Koi2j4oIDTYyBanJVWbs+PsikqqdBh1MRndKoy
hHl6Ihl4XJ/Q//o5/EsmEhILHm0A29LmybUCTgnoesj1oYSmXBBiiwDd1JVrhYrs
gFT5ooDrRBsdPPLMMKwJ9nr5X4y2N9ZtnNXsV4V7ifcWr4ZnKiQVEtuUUHKngQIW
G536VeOOKZBbeIFPktGGchYxqZVl/At3KOjD10IQOHjUCaCB7nRnYEFPLc/LAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUl0qdq1cIhkj7em04cTVO7hWL1swwHwYDVR0j
BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw
QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2
OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAIw
DQYJKoZIhvcNAQELBQADggEBACH15HmwmFEbq5/VN4WC/M9FUjhahkFrBTgvdk7J
Zj03cIHkDRSQ4ySceeqeoO52iN/P/S99a79wJ9fHAgQaZgqZGo3U6BvNenUQooHx
3beitKqRLlPvDlr6eQIqMXaAH7jpcHWrnQS20k6jUQlaFGN2l+Au4oAnzNqAUKfM
1sWprNelG1A3E6cnN7vrjVC0i3ztaq17wkujLTwHCQgLeW6DnsYAwd2VpNTSS4Vj
WmoFNVDfEHxN2uAQNOX6MSAZ558le08kICwEcCiGv8WxWjqigexgMeoGrQvX/rEO
lqRaA4PrZgnh71VG36Wd/0D0mh7Ueo7CYtKIOTeOFgmpt/g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:25 2025 by rpki-client