Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa
File: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (raw, json)
Hash identifier: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=
Subject key identifier: 1E:36:26:4C:76:11:86:20:82:ED:BA:06:AD:BE:3C:F6:32:43:ED:D0
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 3A5D7DED21478BBC55708F1A41E6C5F87575A5D3
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa
Signing time: Fri 31 Jan 2025 11:00:01 +0000
ROA not before: Fri 31 Jan 2025 10:55:01 +0000
ROA not after: Fri 30 Jan 2026 11:00:01 +0000
asID: 9875
IP address blocks: 2001:f20:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5d:7d:ed:21:47:8b:bc:55:70:8f:1a:41:e6:c5:f8:75:75:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Jan 31 10:55:01 2025 GMT
Not After : Jan 30 11:00:01 2026 GMT
Subject: CN=1E36264C7611862082EDBA06ADBE3CF63243EDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:fa:7a:6d:41:3f:4e:36:91:d9:63:b6:07:
fa:26:21:6d:51:f5:c7:17:5e:ec:bc:ba:af:ac:9e:
c6:af:b2:e2:da:7c:33:c5:36:d8:b2:3a:4a:77:45:
43:55:4c:f3:0c:64:81:1e:b2:c6:8a:4f:30:66:8d:
a4:86:89:da:4b:63:69:f8:af:0c:26:25:97:b5:b2:
cf:32:8d:1a:db:92:cf:59:d1:66:4d:9e:6a:49:57:
3d:84:b0:e3:43:2e:34:47:00:5f:9f:55:b5:62:8b:
05:ff:ec:0c:36:9b:38:23:93:fa:92:f7:1c:53:04:
ae:96:90:a8:2c:4e:ae:88:78:fa:82:53:2a:4b:ae:
da:c6:ee:30:43:05:30:af:17:b4:fa:85:7a:60:7f:
f6:ed:9a:2b:60:98:57:37:b8:41:2e:71:e7:15:2d:
6a:1e:4a:1d:f5:cd:24:91:dd:5d:7e:6b:ab:d9:00:
22:0d:28:7c:58:4d:6a:1c:8c:e3:8a:fc:17:19:a9:
cc:20:2b:11:7d:23:95:80:9f:41:b2:8a:6d:8e:7f:
dd:f8:c1:51:2e:2c:8e:e3:0d:6c:4f:c7:a9:e0:28:
9a:ae:3d:df:18:60:2e:2c:e4:68:33:c7:66:ee:b3:
ee:6f:4f:1b:66:af:02:29:7a:79:f3:80:ba:2a:fb:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:26:4C:76:11:86:20:82:ED:BA:06:AD:BE:3C:F6:32:43:ED:D0
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:f20:2000::/36
Signature Algorithm: sha256WithRSAEncryption
98:41:d0:4b:6b:82:2c:2c:4b:af:d5:78:56:ee:56:07:95:79:
e0:22:cb:ba:bd:f9:63:2c:ad:71:a8:68:9a:40:60:1d:7d:dc:
af:d2:f0:33:47:dd:83:d6:13:02:9e:95:ba:a9:21:9f:1f:40:
87:ff:db:20:7d:e7:2b:84:e1:8a:da:f1:fc:d4:24:ed:64:af:
64:53:5f:a9:da:6b:1e:1d:4a:61:15:0e:21:f3:9e:54:0b:73:
59:11:1d:e3:2b:1b:f1:85:ad:2e:ae:d5:1c:a9:b8:16:d6:75:
e3:d9:49:ad:a7:59:30:f9:e5:ae:8b:e7:48:0c:b8:1c:af:7e:
22:ee:2c:20:10:f2:fb:b3:d0:9d:8c:5d:dc:c7:bd:b5:80:e1:
c3:64:a7:1a:6d:14:06:7a:c8:6f:a3:61:17:6f:47:dc:71:7d:
49:c5:fa:e2:24:d6:dd:ad:21:cb:68:8b:d1:91:86:36:69:fd:
8e:3d:65:a4:f2:ed:ec:27:6a:25:0c:9f:72:a7:53:45:e3:06:
bb:d2:f6:16:50:ca:72:9a:c5:90:1e:88:7a:d5:2a:32:2a:bf:
fe:25:c2:46:67:e8:8b:70:de:87:7b:58:b6:24:06:77:35:67:
f1:68:e9:95:e6:2e:2e:87:78:94:16:52:e7:85:38:b7:ef:7b:
f0:73:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:37:51 2025 by rpki-client