Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa
File: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (raw, json)
Hash identifier: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=
Subject key identifier: B0:4F:63:9A:A5:5F:95:A2:FC:7C:6B:5C:EC:5E:03:0A:C3:68:AF:68
Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Certificate serial: 6EC0F65A7F42915D73A8CA3FF5514071C2674D86
Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa
Signing time: Fri 20 Dec 2024 08:30:53 +0000
ROA not before: Fri 20 Dec 2024 08:25:53 +0000
ROA not after: Fri 19 Dec 2025 08:30:53 +0000
asID: 136839
IP address blocks: 2001:df2:3d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c0:f6:5a:7f:42:91:5d:73:a8:ca:3f:f5:51:40:71:c2:67:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Validity
Not Before: Dec 20 08:25:53 2024 GMT
Not After : Dec 19 08:30:53 2025 GMT
Subject: CN=B04F639AA55F95A2FC7C6B5CEC5E030AC368AF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:03:9d:85:67:8e:f1:ed:bd:42:9d:bf:fb:
2d:4a:14:a8:01:3c:56:cf:dd:2c:57:31:e0:90:eb:
5b:fc:f3:71:f1:5a:59:a7:4e:3d:ba:2b:54:fa:28:
6a:40:fe:ed:24:7a:51:82:35:0f:cd:c0:a0:f1:c8:
e5:64:46:36:ec:4e:1c:a3:f4:7d:a7:c2:e3:50:7e:
d0:2d:ca:e5:b2:f9:40:f0:5b:c9:19:f6:bb:7a:93:
52:6b:a4:70:00:3e:21:5e:84:00:84:a5:2d:3b:8e:
e6:ea:1d:b7:bd:d0:6e:e2:40:ba:98:a8:0e:43:73:
98:7a:2e:de:dc:53:ce:e4:0e:c1:2f:98:bb:b5:25:
ba:e6:ff:cd:dc:b4:0e:3b:4b:1e:e7:76:3d:ed:5e:
8c:71:d5:e5:42:c0:f7:1f:54:35:f6:fe:ba:46:0f:
69:93:22:8a:8c:71:5d:44:dd:4e:02:37:6f:e9:4f:
56:e5:ae:b4:9d:00:33:8c:ea:b9:ff:52:3f:db:1c:
eb:fb:e1:c8:97:c7:b7:c1:62:2a:f0:92:cc:71:81:
f4:56:c8:46:d8:64:11:b7:1a:51:2b:f0:5a:b1:e5:
39:11:08:eb:69:5c:4d:54:e0:bd:a4:af:9d:71:b2:
c5:00:68:2a:9e:41:84:16:2e:7d:03:53:10:e8:7d:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:63:9A:A5:5F:95:A2:FC:7C:6B:5C:EC:5E:03:0A:C3:68:AF:68
X509v3 Authority Key Identifier:
keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:3d00::/48
Signature Algorithm: sha256WithRSAEncryption
2e:c3:04:01:bf:5e:26:1b:71:ce:4f:fa:ea:8e:bc:51:8a:9d:
ad:8c:60:fb:db:da:14:7f:5a:62:5b:d6:c9:34:0d:34:07:9e:
1f:27:ba:62:c5:97:f9:4c:ca:7b:b5:ef:c6:f3:67:a2:fd:36:
f0:fd:46:f7:d5:27:3d:15:87:4a:f7:36:63:70:73:8f:85:59:
91:c5:47:f4:c0:74:8e:1f:6c:95:08:57:25:0b:8b:5f:72:32:
0a:ee:ed:32:dc:31:ce:92:91:88:f4:98:10:d1:79:53:e9:1c:
42:bd:bb:59:89:df:13:e9:99:ad:01:d2:e5:5b:dd:dd:07:d0:
71:00:30:d0:ac:d0:bb:e9:99:94:c9:35:64:8e:3f:cb:c9:e1:
d8:78:59:62:7f:4b:1e:b5:e9:ca:27:46:1a:5a:d5:3c:02:0c:
cd:a9:0c:6c:0e:20:d2:ad:64:c8:07:9f:de:e2:53:0c:9f:c3:
9e:f4:f5:48:82:2e:fc:f0:1c:ca:e5:1f:01:1a:c4:94:58:88:
ac:15:8d:c6:d5:81:f2:43:2f:6a:de:ff:7e:66:6f:b9:b9:f0:
f2:cf:47:fd:9f:14:41:d5:fe:c2:1e:ca:6a:5a:23:5c:d6:c7:
63:b7:d6:f8:03:32:d1:58:e5:c7:30:a9:84:ae:81:f2:98:e8:
6b:81:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:25:58 2025 by rpki-client