Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa
File: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (raw, json)
Hash identifier: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=
Subject key identifier: 02:31:08:4F:37:C8:6F:A1:24:F8:89:6B:23:D2:97:10:AC:ED:5B:11
Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
Certificate serial: 3F963507F123EBFF46CF998A5D355A88D950898B
Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa
Signing time: Tue 11 Mar 2025 13:00:02 +0000
ROA not before: Tue 11 Mar 2025 12:55:02 +0000
ROA not after: Tue 10 Mar 2026 13:00:02 +0000
asID: 137323
IP address blocks: 2001:df4:9100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:96:35:07:f1:23:eb:ff:46:cf:99:8a:5d:35:5a:88:d9:50:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
Validity
Not Before: Mar 11 12:55:02 2025 GMT
Not After : Mar 10 13:00:02 2026 GMT
Subject: CN=0231084F37C86FA124F8896B23D29710ACED5B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:7a:3d:2f:88:e8:40:ef:e1:da:76:b2:ba:
d1:e9:db:2d:30:8f:a0:74:fa:0a:15:35:85:5a:17:
0f:1e:58:56:5c:51:45:d5:91:f2:75:1e:93:8e:2b:
44:ba:ac:eb:63:b1:ba:d5:47:09:79:01:4d:8e:d5:
84:31:db:0d:ee:5a:2e:27:d0:9b:5e:90:28:57:96:
a7:2c:ed:54:b6:df:c2:9d:42:06:ca:cd:47:d6:2d:
4b:c0:68:11:c5:e3:18:04:10:d3:c1:11:22:a0:b6:
da:a4:d2:1b:42:e3:1a:5f:69:da:02:ed:55:a8:a5:
45:8a:d3:cf:c1:87:9d:dd:7f:1c:c1:35:40:ce:70:
22:4c:71:f8:45:96:59:bb:ee:a6:9b:48:a0:fc:88:
c6:c8:16:51:d6:b5:d4:d0:c5:f6:f8:b6:eb:b0:3e:
9c:96:18:7d:4b:25:1e:65:63:dd:6e:f4:08:ec:77:
ee:c8:01:47:5a:64:08:b1:e4:9d:b5:a1:9b:32:1a:
13:68:16:a2:2e:f1:6c:47:7a:71:e7:01:ba:bc:0b:
76:6e:d9:9d:5e:0c:3e:db:6b:9b:91:e2:be:ae:34:
f8:8e:37:40:a5:bd:c9:9d:b9:a6:29:d7:b0:08:6f:
3e:f0:a7:f4:33:5b:ad:59:13:07:60:78:28:a2:e0:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:08:4F:37:C8:6F:A1:24:F8:89:6B:23:D2:97:10:AC:ED:5B:11
X509v3 Authority Key Identifier:
keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:9100::/48
Signature Algorithm: sha256WithRSAEncryption
a6:90:e7:3e:ac:e1:af:67:8d:36:f2:f3:31:b7:31:72:84:c8:
6a:cd:f9:58:e5:96:cb:5c:bd:52:24:80:7a:79:ca:07:af:72:
2a:5b:8e:cd:76:f1:fc:46:a7:29:6e:59:b7:0a:20:f0:18:5d:
11:81:a5:e0:92:08:2f:24:fe:08:a8:df:06:2a:dd:3c:d9:23:
96:ea:f0:16:6c:d4:dd:06:95:b2:ff:2c:01:65:30:81:6b:a9:
fb:6b:53:71:8d:64:4a:61:0b:b4:e9:b9:dd:eb:73:0a:ed:ab:
6d:2f:7e:02:4d:17:76:ca:d7:7f:eb:2b:6b:84:26:e1:3e:47:
d1:0b:2b:92:ef:9f:39:c2:97:e3:03:83:fe:51:ba:0e:e9:8b:
e6:2c:f5:ee:dd:9b:06:b5:62:13:27:89:fc:cb:6e:9d:8e:e2:
35:bf:42:f9:9e:0b:5e:72:de:01:1f:b3:fc:9b:9c:f5:26:c4:
50:88:56:c1:1d:2d:43:fd:e1:92:ac:5b:df:58:5a:dd:8d:37:
8d:1a:2b:ad:63:f7:e8:92:6a:fc:37:4c:bf:00:a4:ed:61:bc:
19:b6:43:41:a2:5a:59:4a:cc:8f:77:61:0e:b7:d0:50:30:79:
cd:47:18:a7:fd:17:bd:e1:56:cf:fe:7d:e4:e1:2c:82:25:94:
98:20:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:44 2025 by rpki-client