Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: dQwbjsHNSetISpZm1R+0lXEpwempriRYJESCcSsEoB4=
Subject key identifier: 87:A4:2F:45:26:B5:59:B8:A7:FE:15:3A:FB:60:70:E3:B4:DD:37:17
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 4042EEDEC46BD93515296E2F73F59E9FDE359953
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Thu 27 Mar 2025 07:03:32 +0000
ROA not before: Thu 27 Mar 2025 06:58:32 +0000
ROA not after: Thu 26 Mar 2026 07:03:32 +0000
asID: 133798
IP address blocks: 2402:5680:8710::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:42:ee:de:c4:6b:d9:35:15:29:6e:2f:73:f5:9e:9f:de:35:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Mar 27 06:58:32 2025 GMT
Not After : Mar 26 07:03:32 2026 GMT
Subject: CN=87A42F4526B559B8A7FE153AFB6070E3B4DD3717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:2c:c0:e7:2d:c4:3e:d6:7d:27:8d:e7:d3:
fa:0e:5f:9a:ed:b2:22:f3:c2:b6:07:36:b1:95:86:
1f:5f:f5:dc:af:2b:c3:0c:87:8e:04:ec:1c:26:59:
d6:9c:09:0b:c3:9b:6b:cc:e4:1c:91:3d:8a:c5:65:
3a:7f:40:6f:e4:56:52:56:38:6c:29:f7:09:39:65:
3d:50:75:fa:ed:54:53:37:5d:19:18:97:2e:78:cf:
09:53:73:51:d0:fc:f0:cc:ed:bb:2b:5a:1c:5b:3c:
f0:96:c9:a9:17:ed:07:6f:58:16:d5:2f:3f:87:40:
49:2b:b5:71:35:0c:f4:7d:ec:ac:69:ca:58:f2:67:
2f:7b:bd:6a:40:fa:90:34:81:e0:5d:62:b2:3f:92:
38:57:6d:08:67:ee:02:6a:7c:3d:9b:75:59:ae:12:
0f:5f:ff:bf:5e:77:1a:01:8c:c4:19:ca:76:d0:2f:
c4:11:3d:d7:6f:fe:6e:fe:df:f8:b5:4b:96:98:22:
df:cc:ce:14:ab:49:61:9d:50:e1:c3:c4:eb:ed:0e:
4e:1b:bc:fc:0a:aa:a1:ac:ac:42:95:4b:e4:0f:fe:
83:7c:56:c4:87:e9:99:15:78:46:a4:ec:9a:44:9d:
82:84:99:12:0e:68:ef:ef:21:73:cc:5f:a0:b8:71:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:2F:45:26:B5:59:B8:A7:FE:15:3A:FB:60:70:E3:B4:DD:37:17
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8710::/44
Signature Algorithm: sha256WithRSAEncryption
b2:cc:80:f0:84:54:a3:d0:9c:db:b9:da:c5:56:00:5d:05:40:
0e:b3:1f:3e:b2:c1:63:86:b4:32:fb:5b:5e:04:7b:a9:7c:f9:
73:95:eb:90:60:25:fc:2c:ca:73:46:33:7b:42:58:e4:45:ef:
9e:28:55:4d:21:e5:ad:2a:9d:21:68:ca:4b:e5:04:6b:31:02:
d0:4e:f4:fe:82:9a:0b:58:00:b9:63:fc:e5:a5:fe:4f:f7:fe:
b9:0d:ce:36:d5:d1:90:96:2c:3c:6a:a0:1f:5b:0f:dd:af:fd:
4f:c5:68:65:a7:ac:18:cf:6b:04:15:04:de:b5:9f:8a:a9:4b:
59:a9:58:2a:40:cd:28:48:6f:8b:f9:e9:ba:70:04:9b:36:c4:
e4:93:cd:cf:0a:98:62:f2:e1:7f:c0:18:b6:7b:90:7a:5b:e8:
df:f5:00:09:76:d8:0a:ee:61:25:b7:90:2d:25:71:39:e1:04:
0a:2e:7e:bb:34:4f:a2:91:c0:8f:0b:73:89:cf:5e:61:ce:e4:
df:eb:86:ca:61:8c:fd:3b:b8:ee:b6:de:12:ec:54:dc:93:8f:
50:04:5e:dd:96:52:46:b4:36:db:3e:82:58:b8:3d:80:81:b2:
41:71:cc:9c:75:05:67:bc:89:59:ae:de:58:27:0a:99:8d:b6:
cf:50:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:35 2025 by rpki-client