Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: oubpHM/IOZj2w2uGnvyDw0YL9onSU3STB293X+f4DhM=
Subject key identifier: 82:74:9B:50:49:8C:BB:58:F5:1F:87:D2:88:61:9B:67:44:A6:29:85
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1D81C87BA038993D6FF23772EB1A4469A1D7CD37
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:08 +0000
ROA not before: Mon 26 Sep 2022 09:55:08 +0000
ROA not after: Mon 25 Sep 2023 10:00:08 +0000
asID: 59282
IP address blocks: 2400:d680:1a7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:81:c8:7b:a0:38:99:3d:6f:f2:37:72:eb:1a:44:69:a1:d7:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:08 2022 GMT
Not After : Sep 25 10:00:08 2023 GMT
Subject: CN=82749B50498CBB58F51F87D288619B6744A62985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:62:83:fb:b0:05:82:67:9f:a2:19:8b:7c:
39:76:6f:fd:0e:27:0a:aa:f4:e5:91:1b:3b:8b:29:
70:67:db:7e:1e:d2:2d:55:77:84:dd:e6:a5:d3:66:
2c:5f:34:69:9c:d2:0e:60:67:c1:0a:4c:89:e5:08:
dd:46:f4:a4:28:b8:97:8c:4d:ae:6b:ac:b4:9f:10:
32:e4:85:ab:fb:1b:b1:68:be:62:e1:fb:69:23:f2:
e8:e6:e4:b7:38:23:b2:87:b8:09:0b:10:bb:06:f5:
3b:e7:02:8e:83:0c:0b:14:20:50:67:df:e7:3f:db:
89:40:f9:d1:69:98:df:34:a2:9f:ac:24:a5:2e:b6:
1b:d2:06:bc:ed:af:05:ca:b0:e4:90:58:d8:28:06:
f8:13:90:ba:1e:e0:c2:9f:40:c6:7c:d3:c2:e8:e5:
14:3e:15:00:66:e3:85:b3:06:af:13:c6:c0:1b:5f:
a8:45:d8:5d:48:f4:2f:d2:df:5d:03:7b:b1:70:8a:
08:d7:0f:bc:42:7a:86:cd:45:e9:73:17:4b:54:ed:
8e:25:0e:37:60:fa:70:d4:b2:16:66:88:18:db:88:
35:b0:b7:d0:8b:ea:51:d5:9c:56:98:52:4e:38:80:
34:4d:90:0b:1e:62:6f:15:99:2c:76:12:6d:40:db:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:9B:50:49:8C:BB:58:F5:1F:87:D2:88:61:9B:67:44:A6:29:85
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1a7::/48
Signature Algorithm: sha256WithRSAEncryption
20:90:d8:14:19:25:dd:21:69:c9:2c:45:e0:ff:ec:37:9f:50:
2d:3c:bb:26:22:d2:b0:b3:67:8d:60:63:2f:ee:cc:d9:cb:b3:
af:20:98:b3:1a:45:f4:99:e2:87:03:f3:f5:b5:2d:a5:08:25:
10:65:0f:02:8d:67:7a:63:d2:05:9d:14:0c:c1:83:d2:ca:61:
af:5a:c7:52:7f:9a:cd:77:28:a2:0f:57:f8:22:8e:db:ec:ae:
bb:c9:82:d3:a2:42:36:5b:c1:d6:84:79:df:0f:e5:ec:ef:be:
f0:12:13:4c:7a:5c:04:67:87:ae:aa:e7:53:8a:52:31:e5:0e:
d9:54:fe:61:18:61:12:3c:b5:72:36:77:ef:f7:61:d9:7e:fd:
00:0f:c7:b6:89:eb:c9:4e:62:27:83:65:d3:a1:b8:ae:95:3b:
ec:bd:a3:51:47:da:54:9e:6c:db:30:c7:4f:a6:8c:9b:5c:da:
24:67:d9:b3:1f:48:71:38:70:ad:3e:9a:3e:18:aa:be:7b:14:
3c:7f:9b:bd:50:7b:57:44:c5:59:17:72:b6:2a:75:ad:a3:ed:
07:97:2b:b7:5a:2d:80:e3:d6:b4:b1:d7:4f:e3:a4:81:34:0d:
bf:6d:3b:8e:24:6a:56:38:b0:20:ff:2c:ba:e9:dd:9e:e9:75:
ed:c6:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:41:48 2025 by rpki-client