Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa
File: 323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa (raw, json)
Hash identifier: bOnNASAxU7FvIcmDh0D0xKu1370xmQnojFY5i6CmnOM=
Subject key identifier: 79:AD:44:87:C8:8D:B2:4E:E6:9A:B2:71:28:E7:1C:4F:EB:51:AD:02
Certificate issuer: /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Certificate serial: 1DB9E8A3C2247C06D944CF5AB91226980472ADF3
Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa
Signing time: Thu 16 Nov 2023 06:00:01 +0000
ROA not before: Thu 16 Nov 2023 05:55:01 +0000
ROA not after: Thu 14 Nov 2024 06:00:01 +0000
asID: 45701
IP address blocks: 2001:df0:a900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b9:e8:a3:c2:24:7c:06:d9:44:cf:5a:b9:12:26:98:04:72:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Validity
Not Before: Nov 16 05:55:01 2023 GMT
Not After : Nov 14 06:00:01 2024 GMT
Subject: CN=79AD4487C88DB24EE69AB27128E71C4FEB51AD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:1b:20:fc:76:ee:8a:ad:87:1c:59:79:9a:
8f:de:57:35:f0:6a:72:4f:a8:5b:d0:a4:c6:b2:f5:
97:08:1b:22:51:39:d2:5f:f4:2e:39:63:3a:2e:9e:
cd:ee:85:d1:db:b8:de:4b:0b:4b:b0:45:6a:24:bb:
9b:78:4d:b5:68:bd:1f:c1:0a:44:06:0c:84:ed:89:
c0:dd:88:48:3c:42:e2:70:6a:55:12:34:a5:6c:5e:
3b:b2:09:bd:ed:ac:86:72:6b:15:56:80:7c:1a:0d:
d7:c9:33:f4:75:18:dc:6f:a1:10:13:6d:40:27:12:
1b:1a:65:1a:c8:21:b1:26:7a:4f:37:31:3a:d4:46:
fc:a7:ba:d4:05:ab:b1:31:bb:13:92:c4:d2:0f:5a:
0a:90:68:b9:84:09:f8:78:31:14:3f:aa:cd:f7:3c:
72:64:8c:f2:98:22:28:da:ae:4d:b2:05:c9:0d:c1:
3f:b0:d4:80:b4:91:26:ec:81:be:ef:8c:ac:42:d6:
19:a9:65:8a:2d:98:aa:53:a6:87:ab:c1:d5:fc:e7:
37:52:50:64:eb:9d:e2:c3:9b:7d:e9:35:af:af:19:
27:c6:36:cf:ed:1d:8f:89:e1:86:a2:66:a9:c1:79:
86:41:69:26:da:9d:1e:1b:69:1f:4e:ba:f9:6e:65:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:44:87:C8:8D:B2:4E:E6:9A:B2:71:28:E7:1C:4F:EB:51:AD:02
X509v3 Authority Key Identifier:
keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:a900::/48
Signature Algorithm: sha256WithRSAEncryption
3e:90:91:7e:b6:5e:c7:cc:dd:f2:e7:29:77:81:94:c0:08:45:
39:8e:8b:6d:5c:00:af:dd:cf:8b:a8:9c:22:64:c1:56:89:0e:
8e:c7:05:99:a3:bf:7f:15:df:94:5c:89:59:78:74:d2:a0:de:
2e:6a:30:f0:f5:6d:27:d3:05:97:09:53:00:4e:13:ab:20:46:
7c:65:1b:b7:dc:8f:21:31:15:9f:4b:fa:14:ca:68:67:3b:7f:
bf:91:17:54:18:38:3a:f8:ad:58:8a:43:5e:c9:ef:4a:fe:89:
e8:bc:f7:4e:8f:9d:49:f0:74:8e:2c:c5:0e:6a:d1:8c:8f:ee:
69:4c:01:3e:ea:81:6f:cb:dd:3e:c4:f9:86:35:1c:57:fc:c4:
99:c6:30:b8:71:76:fe:07:88:bd:c6:1d:43:a1:35:06:95:3b:
a4:ef:82:4a:c3:31:c6:78:0d:92:e7:49:b0:6b:21:c5:f1:62:
2a:73:26:a3:e2:54:60:b5:28:7d:f1:72:5d:f5:63:bb:51:92:
2c:1c:36:6f:90:2a:41:88:8a:50:fa:53:ad:50:16:06:05:f8:
75:50:0a:3d:ba:79:af:1e:eb:01:a5:17:ac:78:a3:0b:f5:62:
54:e4:2b:3c:42:ed:36:dd:6e:f9:65:ed:20:98:28:0c:14:30:
a3:a7:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:42:33 2025 by rpki-client