Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa
File: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (raw, json)
Hash identifier: 5SmTajAharPZV3QJPqwQSw9HbsdUe2nEolyVEBBASJU=
Subject key identifier: 9E:E9:ED:60:63:DA:CE:5E:AD:C0:45:70:C7:CA:99:96:73:AB:34:64
Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
Certificate serial: 5E3262552E955C14942A514CEDC1357B135620EC
Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa
Signing time: Tue 10 Dec 2024 15:00:00 +0000
ROA not before: Tue 10 Dec 2024 14:55:00 +0000
ROA not after: Tue 09 Dec 2025 15:00:00 +0000
asID: 151011
IP address blocks: 2001:df2:e4c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:32:62:55:2e:95:5c:14:94:2a:51:4c:ed:c1:35:7b:13:56:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
Validity
Not Before: Dec 10 14:55:00 2024 GMT
Not After : Dec 9 15:00:00 2025 GMT
Subject: CN=9EE9ED6063DACE5EADC04570C7CA999673AB3464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:52:34:1f:00:4d:83:f7:f5:a6:2e:d6:20:
51:c7:d9:d0:e9:9e:9b:8f:77:66:62:4b:3f:c6:13:
45:8a:26:b7:d8:bf:36:3a:88:da:64:2f:e5:d1:14:
f9:08:e0:ce:61:8e:ba:46:e2:7b:0d:6a:51:0b:4e:
1c:aa:65:9d:a0:c2:10:21:3d:4b:8c:5d:01:4a:23:
e7:62:c2:c9:45:dc:f6:f7:31:be:4a:a9:20:e9:21:
12:c2:2a:90:9a:c7:6b:24:18:2c:fa:41:37:70:31:
99:a2:d9:6f:b7:52:0c:99:9b:a2:9a:c6:24:87:b9:
f2:a9:69:62:1d:a2:1c:ea:9c:44:5d:b7:16:49:a2:
ee:07:5d:a4:6b:74:c0:63:3f:b0:b4:df:f0:c0:f3:
3f:cc:8e:e0:96:63:8f:42:c4:6b:92:46:ab:f0:c7:
46:e8:21:7c:22:dd:f4:bf:c2:8f:4f:d3:1a:cb:e7:
52:9d:a8:f3:81:39:9c:b2:c9:56:b2:ba:44:63:42:
31:7e:d9:47:5a:7f:0d:14:11:9d:17:02:33:da:e4:
d5:f7:0b:9a:f0:9d:14:e9:ff:55:5c:0a:2e:c1:16:
d0:a8:ad:ee:5a:b8:0d:6f:1f:e2:92:e1:5e:00:4d:
26:5d:94:0d:d5:ee:b3:6c:c5:27:47:5e:a8:58:df:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E9:ED:60:63:DA:CE:5E:AD:C0:45:70:C7:CA:99:96:73:AB:34:64
X509v3 Authority Key Identifier:
keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:e4c0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2f:8e:37:29:2f:d9:d4:f8:fd:ea:d5:f8:b2:00:cf:34:c4:
01:d3:fc:ce:4d:c3:b4:34:90:bd:4f:32:41:f0:c6:cb:63:8e:
55:e4:8d:66:2b:c7:0e:9d:7f:c1:4a:52:70:e8:70:82:55:fa:
ad:07:d0:77:03:5e:24:3f:57:9f:65:42:c1:fd:8d:0f:68:d2:
d3:16:77:e4:24:be:89:c5:b9:85:f9:71:44:e5:06:8a:46:d9:
dc:ee:3c:a7:77:30:a6:ba:b1:df:8b:d8:9c:c1:69:43:74:20:
05:38:38:6a:89:00:95:e3:d8:ef:0b:2b:7a:81:d4:0e:f2:6e:
3a:9a:e5:7a:89:a6:8f:46:91:46:4c:31:84:d3:df:5b:ae:57:
e5:7e:09:b3:07:71:d9:5d:b3:dc:d9:41:22:19:a4:23:2b:68:
a2:25:b9:da:22:18:a5:25:3a:d4:17:cd:c9:53:db:9a:7d:47:
21:a4:d2:fc:28:c7:10:ec:d2:70:15:a9:17:e5:63:ec:d6:a6:
35:6c:ff:27:37:f5:e3:de:0d:a7:ac:34:9e:d5:9d:99:b4:7a:
24:36:12:e1:4f:4b:e5:13:02:1b:69:05:bc:d6:eb:59:cc:b7:
58:be:af:18:b8:6d:f5:b0:0e:59:b5:c1:70:1b:04:88:ff:fe:
84:56:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:56 2025 by rpki-client