Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa
File: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (raw, json)
Hash identifier: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=
Subject key identifier: B9:EE:A5:EA:5E:08:10:D6:A9:70:03:34:DA:C7:BB:51:B1:E3:7B:0B
Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial: 15DB1611D6B546FA16123B2077B6E27BE364E000
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa
Signing time: Wed 19 Feb 2025 07:02:42 +0000
ROA not before: Wed 19 Feb 2025 06:57:42 +0000
ROA not after: Wed 18 Feb 2026 07:02:42 +0000
asID: 45289
IP address blocks: 2402:a100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:db:16:11:d6:b5:46:fa:16:12:3b:20:77:b6:e2:7b:e3:64:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Validity
Not Before: Feb 19 06:57:42 2025 GMT
Not After : Feb 18 07:02:42 2026 GMT
Subject: CN=B9EEA5EA5E0810D6A9700334DAC7BB51B1E37B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:2e:91:c8:13:5e:46:f0:89:3b:f0:ff:3f:
c0:3f:1e:6f:a7:3f:33:51:73:64:42:07:4b:9d:8c:
83:6f:c1:c6:d3:56:27:3c:4a:fe:2b:04:46:0f:d5:
af:c3:5d:6b:4e:89:31:75:b9:f2:13:9b:ea:bd:cd:
ea:bb:63:48:5c:cc:f6:27:ea:02:12:0d:e9:30:26:
0d:a7:8d:3b:20:f4:ef:01:ef:79:49:6f:20:c1:72:
41:c1:be:46:c5:23:31:5f:64:36:ad:82:87:e3:0e:
c0:23:c9:bd:69:0f:40:1d:b2:79:f0:08:1c:f4:7c:
60:dd:26:0a:37:ce:e2:38:95:70:aa:eb:7f:a6:2c:
d8:29:db:27:e9:ff:d2:93:3e:9b:37:67:57:be:2e:
7f:0c:74:ba:d2:8b:f7:a1:e2:70:01:2c:88:1a:49:
5b:95:fa:26:e4:5e:b5:10:bc:18:94:95:5c:56:21:
8b:66:30:7c:7a:14:22:4e:92:ea:b2:45:64:84:2f:
f9:6e:c1:52:e5:17:7a:33:b8:ce:84:3f:bf:e2:f3:
ee:75:49:2e:57:c7:2c:98:95:dc:1b:74:78:8e:47:
94:d6:87:fd:6c:22:3a:96:6a:51:94:f5:cb:48:11:
c8:cd:9d:c0:55:a2:93:0e:2e:05:42:50:e6:94:9b:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:A5:EA:5E:08:10:D6:A9:70:03:34:DA:C7:BB:51:B1:E3:7B:0B
X509v3 Authority Key Identifier:
keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:a100::/32
Signature Algorithm: sha256WithRSAEncryption
1b:59:14:01:c0:6b:3a:74:6a:c6:dd:cb:f1:fe:0e:dd:c4:f2:
96:1c:75:e5:6b:cb:7d:ff:5e:06:af:ac:f5:e3:aa:27:7a:40:
e2:0e:0f:49:6a:b4:10:8d:37:a5:8a:ec:f1:12:0b:02:42:6a:
76:e2:9e:70:87:51:9f:0f:e6:16:68:2f:31:81:13:9d:d5:ac:
f0:29:de:1e:7d:fd:1e:40:4f:2e:23:1e:ee:7f:91:99:3f:43:
e4:aa:dd:94:ff:1a:47:2a:95:ac:13:87:00:3d:12:b3:81:89:
7f:e4:2e:4e:b1:7a:b5:2c:de:b5:bc:45:34:54:5b:8f:2f:31:
51:f7:6f:7c:d2:a5:e5:0f:70:02:1f:bf:e5:fc:4b:e6:9a:52:
9e:02:e6:bc:5a:25:4c:f3:7a:47:c1:d6:0d:bd:65:52:8d:5d:
8b:df:6f:c1:9b:0f:37:49:4d:84:33:35:26:12:0f:21:98:29:
38:ba:98:86:56:4b:e9:03:45:2e:fb:19:9b:4e:5d:a8:05:6b:
f8:c3:67:03:4e:dc:5d:2b:f9:ab:3f:45:f9:6b:c0:66:4f:a0:
37:da:85:e7:28:38:fa:19:3f:1e:4b:c9:7e:2e:b7:86:ba:0d:
68:f8:df:1b:c2:98:23:28:40:3b:40:8f:5c:1d:62:05:fa:c4:
fd:08:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:17 2025 by rpki-client