Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa
File: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (raw, json)
Hash identifier: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk=
Subject key identifier: 97:54:F1:5C:7B:EF:83:2E:BD:5C:FE:46:AC:BC:8F:F2:84:B1:F0:13
Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Certificate serial: 4C10C6E39B91A51F397B08E1A1314381B07D9134
Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa
Signing time: Thu 15 Aug 2024 05:00:02 +0000
ROA not before: Thu 15 Aug 2024 04:55:02 +0000
ROA not after: Thu 14 Aug 2025 05:00:02 +0000
asID: 138078
IP address blocks: 2001:df6:d700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:10:c6:e3:9b:91:a5:1f:39:7b:08:e1:a1:31:43:81:b0:7d:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Validity
Not Before: Aug 15 04:55:02 2024 GMT
Not After : Aug 14 05:00:02 2025 GMT
Subject: CN=9754F15C7BEF832EBD5CFE46ACBC8FF284B1F013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:fa:b3:92:53:90:b9:3c:55:72:aa:40:02:
2d:b4:1b:8c:3a:7f:18:63:90:68:d8:2b:fd:c3:ef:
8d:fa:db:47:78:63:23:c3:24:38:3d:32:1d:83:7f:
1c:c6:dd:fb:52:d4:d5:af:d9:1a:db:df:d3:1b:fb:
4d:ee:00:26:60:e8:64:fc:c4:56:ba:b8:3d:e8:ed:
72:78:9b:90:55:15:88:76:81:c7:5f:ff:b9:bf:13:
3f:7d:0f:72:0c:49:e1:f3:49:3c:b0:da:9c:0b:a2:
d6:b5:fc:3b:79:aa:45:b4:28:92:d4:29:7d:4d:db:
e3:89:b9:3f:75:c4:e9:22:4c:df:15:19:68:73:51:
96:7e:5b:e6:50:a1:26:4a:8e:dd:94:26:80:09:9b:
c1:fe:da:fa:90:86:bb:78:4c:c8:22:be:52:d8:47:
0d:8c:04:f4:9b:58:7f:7d:4e:fd:b3:4f:0e:8b:81:
b1:54:b7:56:8a:5c:3f:d8:62:5e:94:8f:53:fe:b4:
a5:dd:3a:60:6f:d5:71:97:d5:45:f0:fd:c8:ba:26:
46:69:be:9e:ae:5f:b3:0b:0b:db:ee:9e:50:81:60:
3a:2c:06:1e:cf:87:9f:fa:4c:a5:17:ba:bc:22:7e:
1d:55:d4:03:b9:f1:c6:c6:35:16:be:33:a1:68:b9:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:54:F1:5C:7B:EF:83:2E:BD:5C:FE:46:AC:BC:8F:F2:84:B1:F0:13
X509v3 Authority Key Identifier:
keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:d700::/48
Signature Algorithm: sha256WithRSAEncryption
35:18:58:3d:4d:8a:f2:a9:5e:ba:cc:36:d2:9e:ae:4b:3c:b9:
b3:9d:77:f0:47:6f:7c:ea:dd:b1:de:93:98:54:67:3e:06:74:
bb:41:2b:95:26:36:fb:9f:52:22:a4:9b:dd:45:b5:04:4e:ef:
d4:d3:59:19:2d:7b:fc:91:04:46:12:41:b2:c7:47:3e:25:ca:
4b:6a:b1:57:4d:dd:9f:b5:d6:82:11:00:5c:26:54:8b:40:35:
78:c9:4b:94:9e:6a:67:0b:47:7e:90:65:f5:3a:23:45:e6:b6:
1b:f3:6b:13:70:c0:62:01:47:cb:72:70:21:93:a8:8c:78:fd:
60:02:0f:1c:ba:e0:a3:eb:53:7d:df:a1:e1:72:a3:fb:51:9a:
27:1a:52:e8:64:bf:6b:93:2b:3b:ed:90:bf:ee:70:f1:d8:7c:
30:ce:4f:0b:99:f0:1a:00:2e:b2:8a:27:01:ff:84:e4:70:7d:
a2:e1:8e:d3:0a:5d:2b:f1:e7:86:64:45:5f:cf:0e:93:02:85:
1c:55:36:95:9b:80:da:61:88:5d:96:13:8b:9e:03:76:a8:82:
4d:1e:fe:7f:98:14:05:18:85:8a:b8:8d:1b:9b:22:cc:a9:b0:
53:8c:04:fb:2e:9c:bd:e7:3a:14:da:37:d3:01:c3:7a:eb:78:
73:12:c1:1d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTBDG45uRpR85ewjhoTFDgbB9kTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1
REU1Q0ZDQzAeFw0yNDA4MTUwNDU1MDJaFw0yNTA4MTQwNTAwMDJaMDMxMTAvBgNV
BAMTKDk3NTRGMTVDN0JFRjgzMkVCRDVDRkU0NkFDQkM4RkYyODRCMUYwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnPqzklOQuTxVcqpAAi20G4w6
fxhjkGjYK/3D743620d4YyPDJDg9Mh2DfxzG3ftS1NWv2Rrb39Mb+03uACZg6GT8
xFa6uD3o7XJ4m5BVFYh2gcdf/7m/Ez99D3IMSeHzSTyw2pwLota1/Dt5qkW0KJLU
KX1N2+OJuT91xOkiTN8VGWhzUZZ+W+ZQoSZKjt2UJoAJm8H+2vqQhrt4TMgivlLY
Rw2MBPSbWH99Tv2zTw6LgbFUt1aKXD/YYl6Uj1P+tKXdOmBv1XGX1UXw/ci6JkZp
vp6uX7MLC9vunlCBYDosBh7Ph5/6TKUXurwifh1V1AO58cbGNRa+M6FouVQTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUl1TxXHvvgy69XP5GrLyP8oSx8BMwHwYDVR0j
BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4
N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1
Q0ZDQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1YzljMzk0LWZjZDAtNGI0Yi1i
YjFhLTgyNDc3MGY0MDM0Mi8wLzMyMzAzMDMxM2E2NDY2MzYzYTY0MzczMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9tcAMA0GCSqGSIb3DQEBCwUAA4IBAQA1GFg9TYryqV66zDbSnq5LPLmznXfwR298
6t2x3pOYVGc+BnS7QSuVJjb7n1IipJvdRbUETu/U01kZLXv8kQRGEkGyx0c+JcpL
arFXTd2ftdaCEQBcJlSLQDV4yUuUnmpnC0d+kGX1OiNF5rYb82sTcMBiAUfLcnAh
k6iMeP1gAg8cuuCj61N936HhcqP7UZonGlLoZL9rkys77ZC/7nDx2Hwwzk8LmfAa
AC6yiicB/4TkcH2i4Y7TCl0r8eeGZEVfzw6TAoUcVTaVm4DaYYhdlhOLngN2qIJN
Hv5/mBQFGIWKuI0bmyLMqbBTjAT7Lpy95zoU2jfTAcN663hzEsEd
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:57 2025 by rpki-client