Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa
File: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (raw, json)
Hash identifier: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=
Subject key identifier: 8D:00:04:A2:87:00:14:18:0E:14:04:02:D8:0B:55:13:B2:13:40:74
Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
Certificate serial: 6AE9C25939D894AE2A2ABC4C57F5A9A1B4FFB060
Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa
Signing time: Sat 10 Aug 2024 10:02:28 +0000
ROA not before: Sat 10 Aug 2024 09:57:28 +0000
ROA not after: Sat 09 Aug 2025 10:02:28 +0000
asID: 138884
IP address blocks: 2404:ce40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e9:c2:59:39:d8:94:ae:2a:2a:bc:4c:57:f5:a9:a1:b4:ff:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
Validity
Not Before: Aug 10 09:57:28 2024 GMT
Not After : Aug 9 10:02:28 2025 GMT
Subject: CN=8D0004A2870014180E140402D80B5513B2134074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:c8:15:0b:f4:0e:5b:bb:53:68:40:8a:c7:
29:4b:fa:14:2d:57:02:09:5c:a1:b6:01:d0:63:20:
52:06:c8:35:61:1b:21:3b:7a:c6:43:83:65:63:6a:
de:4b:01:59:50:36:11:80:62:44:a1:dd:bf:67:5b:
d0:e5:28:61:b4:d0:e0:b1:68:d6:98:79:bb:c0:93:
f4:47:68:2b:c1:1e:88:36:69:5e:51:a7:10:60:ae:
9c:d8:a7:57:63:79:d8:a1:09:4f:05:8a:17:28:91:
1a:3d:4a:86:4e:8c:f5:5c:c5:6e:f4:0e:00:b6:77:
f2:30:7c:96:24:ac:2f:79:72:ac:ff:56:25:08:24:
e8:8a:6a:46:40:70:39:fc:b1:97:fa:40:49:b8:6e:
5d:d4:1f:03:3d:75:cd:9f:e4:c3:43:f6:bb:b0:eb:
ff:4c:d6:92:58:9e:b5:98:5e:85:e6:4f:7c:e9:dc:
7f:c9:dd:ea:8b:15:19:eb:db:c2:63:61:c1:c1:9a:
6b:95:5a:38:84:32:b9:96:41:1d:e9:41:b0:ff:a9:
9a:e7:45:42:0e:38:73:f7:65:16:56:32:b0:fb:ad:
2b:d6:4a:6c:fd:1c:16:e8:cf:b5:1f:4d:17:1b:e3:
76:fe:6d:58:a5:8a:d7:0b:fa:44:2c:e3:be:cf:11:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:04:A2:87:00:14:18:0E:14:04:02:D8:0B:55:13:B2:13:40:74
X509v3 Authority Key Identifier:
keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:ce40::/32
Signature Algorithm: sha256WithRSAEncryption
61:2c:5e:ee:c0:d7:2c:63:be:f6:a7:a1:4a:f2:cb:ea:84:cd:
be:2c:65:ea:c6:e8:a1:89:fe:02:65:47:33:1e:74:c4:fb:d0:
42:9b:cf:18:b0:b4:90:37:1a:f4:9b:0c:64:c9:4a:9c:21:37:
78:2a:ce:7e:56:87:1a:74:fd:d1:5a:26:d2:ee:75:d3:7e:46:
77:14:28:48:35:86:69:3e:83:42:f3:03:c0:2e:c4:9c:71:44:
83:85:9c:fb:1d:fa:fd:e9:d6:73:e2:b4:e4:c8:83:2b:c1:38:
20:3c:8e:80:5b:50:aa:79:ad:f9:de:ca:f1:b6:99:43:0f:e5:
f1:c5:39:fb:d6:43:f1:24:ac:98:54:91:b6:75:53:68:9c:84:
7e:5b:03:b8:bf:59:73:ef:47:73:f4:d9:56:ca:b2:90:cf:ea:
88:42:df:23:ee:cc:fb:1e:2d:a7:84:2d:18:1f:40:57:37:bd:
9b:0b:2c:5f:6a:fa:14:2a:6d:87:c5:e9:4c:90:49:37:56:f0:
74:42:cc:0e:bd:71:f6:67:e0:9a:b2:6f:7c:ef:ea:21:26:e7:
d6:f3:fc:0e:b8:a6:04:65:77:b0:a4:90:c0:ca:07:1d:57:c8:
11:ae:8a:1c:6d:88:5a:8c:eb:97:af:b1:61:4e:a3:60:6a:42:
8f:c9:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:49 2025 by rpki-client