Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa
File: 323430323a333730303a3a2f33322d3438203d3e20313337333436.roa (raw, json)
Hash identifier: gX2nr7Vimw48ijwwaN1tXl5MnYTcoC/4Nd81ZyCnx2w=
Subject key identifier: 98:D8:6D:D5:6F:E4:1A:A7:0C:25:E2:85:A4:7E:CB:3B:0B:80:6A:D7
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 28E8046DF439FF1E741428E10D3FB792CE38AFD7
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa
Signing time: Wed 04 Dec 2024 03:02:02 +0000
ROA not before: Wed 04 Dec 2024 02:57:02 +0000
ROA not after: Wed 03 Dec 2025 03:02:02 +0000
asID: 137346
IP address blocks: 2402:3700::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e8:04:6d:f4:39:ff:1e:74:14:28:e1:0d:3f:b7:92:ce:38:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Dec 4 02:57:02 2024 GMT
Not After : Dec 3 03:02:02 2025 GMT
Subject: CN=98D86DD56FE41AA70C25E285A47ECB3B0B806AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:73:17:dd:4b:a8:78:4b:f0:09:fd:44:aa:
f8:7f:78:cb:c8:18:d0:65:73:9c:96:c9:49:c1:49:
5a:c7:9c:41:39:be:b1:28:ff:d0:9c:69:b4:ec:27:
ea:6f:45:83:d4:2b:e1:b2:a7:7e:36:94:1d:34:c6:
6a:80:69:fb:15:4b:af:f3:f1:66:c2:ba:ca:3b:5a:
16:01:a7:3a:7c:9a:81:b0:9d:f9:a5:f9:95:c5:d8:
1a:e0:12:ec:c7:5f:3a:c2:f9:49:08:91:7d:c8:6e:
c4:86:b7:34:f3:56:08:88:be:85:06:38:ec:0f:14:
a7:0c:c4:51:f8:57:72:a9:c4:1c:14:0b:cf:1e:50:
c5:ed:30:85:1d:05:0a:24:97:53:84:13:f0:fa:23:
4d:bc:2e:c0:04:1b:83:c0:21:43:ad:0c:d5:38:61:
14:ec:8b:76:e5:7f:59:3b:0b:08:bc:d5:96:4c:97:
20:e9:1a:ed:9a:0c:f3:74:64:95:9e:67:37:42:9c:
b1:13:32:c1:96:18:dc:4c:dc:4a:29:8c:12:29:a3:
b6:93:23:65:c7:3c:87:8b:8c:94:10:3f:47:72:04:
04:fa:be:2c:7e:fb:71:d9:1e:26:70:4a:ae:e0:d2:
ae:3b:f9:3f:38:77:5e:95:b5:f7:4a:fa:cf:14:b3:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D8:6D:D5:6F:E4:1A:A7:0C:25:E2:85:A4:7E:CB:3B:0B:80:6A:D7
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:3700::/32
Signature Algorithm: sha256WithRSAEncryption
8e:51:64:55:6f:51:32:bb:77:85:45:34:6e:06:2e:b1:ba:37:
ed:c5:6f:45:63:cc:03:99:ac:38:33:39:a9:59:cb:ad:a5:be:
17:4c:81:ed:b3:89:37:cd:46:6b:d3:2b:de:f4:b4:97:23:9d:
49:3b:44:46:2a:1d:ef:86:60:8c:9b:be:68:0d:dd:b6:54:b6:
f5:2c:66:c5:27:57:13:a5:fe:24:b5:5a:43:18:81:9a:0e:25:
73:d3:04:96:89:f6:0b:99:be:ef:71:b2:dc:5d:da:84:fc:1e:
73:e0:dc:85:7e:42:af:51:8b:fb:cb:91:7d:10:44:1b:83:23:
1d:7e:50:e5:88:74:6f:44:5f:68:6e:55:d5:19:9a:e9:91:99:
b0:0d:ec:b8:4f:3a:50:e5:1b:d7:69:09:ad:7d:07:d3:e1:74:
f3:71:45:22:b8:1f:89:8e:f4:51:3e:26:f6:c1:ae:54:f5:20:
4e:f3:e9:eb:5f:4b:58:f0:18:b5:55:ef:63:94:9b:3e:af:4a:
d0:d8:fc:a6:f5:8c:74:5c:e6:51:0b:e1:c4:10:ba:2c:d3:1b:
e9:5c:29:e9:b5:7b:12:7b:d1:8d:c3:43:78:6f:74:cc:78:8e:
22:42:12:b8:84:31:dd:8f:cd:59:70:39:32:81:0d:20:ab:c7:
bf:40:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:45 2025 by rpki-client