Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa
File: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (raw, json)
Hash identifier: wGNz9dr+Ig53HqTEoTqtrZQVFnAc6Mtfu8p4RmvZv/s=
Subject key identifier: F9:2A:D7:92:0E:5A:6E:94:53:27:81:2D:95:08:2C:0D:2D:68:43:BD
Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial: 408FA29075D79D544C228181F638C6CF9A605478
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa
Signing time: Sat 30 Nov 2024 16:00:01 +0000
ROA not before: Sat 30 Nov 2024 15:55:01 +0000
ROA not after: Sat 29 Nov 2025 16:00:01 +0000
asID: 139980
IP address blocks: 2001:df2:c680::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8f:a2:90:75:d7:9d:54:4c:22:81:81:f6:38:c6:cf:9a:60:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Validity
Not Before: Nov 30 15:55:01 2024 GMT
Not After : Nov 29 16:00:01 2025 GMT
Subject: CN=F92AD7920E5A6E945327812D95082C0D2D6843BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:28:50:9e:f2:94:ab:17:ba:9c:8e:b2:4e:
bf:08:c5:df:9d:73:25:e2:68:6a:57:47:16:c7:d3:
0b:64:37:65:48:fc:22:d1:c7:92:df:33:f5:36:7e:
31:cc:b9:c6:18:5f:0c:fb:35:2b:a1:22:15:31:11:
b8:49:b4:48:08:e5:a9:4b:7b:d4:ec:34:c4:cc:da:
9f:95:ee:99:f9:fa:6c:aa:9f:0e:57:7d:cc:89:da:
72:54:71:e7:aa:27:78:87:09:e0:20:43:eb:a2:91:
84:7d:21:65:2b:bb:06:1b:0a:4c:79:00:56:77:0b:
fd:ab:63:1b:76:02:68:ec:12:f0:f6:19:11:d0:15:
93:fd:f5:ca:dd:12:a0:b4:d3:b7:9c:97:7c:a8:a3:
b7:70:1a:8a:2b:19:16:a2:c0:19:ae:8b:c8:cc:10:
b3:65:8e:99:cd:15:02:0d:14:49:b5:ea:f8:5e:ae:
e5:d8:d7:d4:64:65:03:ec:50:46:7d:45:10:f4:a2:
3c:7a:33:29:b1:23:e7:36:64:1d:9b:3d:37:64:89:
6d:8f:04:08:da:7e:87:61:41:02:54:8b:b4:8f:bf:
35:19:59:9b:c0:d7:70:b8:46:df:69:d9:52:eb:22:
18:2c:99:ca:17:e8:09:54:5f:a5:37:fc:dd:35:b4:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:D7:92:0E:5A:6E:94:53:27:81:2D:95:08:2C:0D:2D:68:43:BD
X509v3 Authority Key Identifier:
keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:c680::/48
Signature Algorithm: sha256WithRSAEncryption
26:65:3f:71:10:50:8f:95:ff:d2:1b:aa:fc:1b:0e:35:cc:2c:
e4:bb:87:54:f1:61:21:62:1c:75:15:a6:4d:c8:f0:2b:64:f0:
11:9c:ab:b4:0a:3e:a9:21:b8:f8:05:1f:af:9a:c7:98:cb:8a:
13:29:96:15:3f:28:bb:9c:df:05:0a:26:e1:f7:81:2d:9f:8d:
39:0c:da:18:8c:d4:12:08:19:be:53:57:0d:8c:28:92:2b:5b:
54:82:9b:a0:6a:e1:de:0a:0a:cb:a6:aa:f2:d9:ad:08:ad:0b:
96:e7:b2:58:e4:b8:d2:d3:83:ba:0f:e2:c2:a1:04:e6:d7:e7:
90:86:25:2d:69:bd:6c:59:ea:0a:17:b5:cc:48:9d:ab:f5:32:
1f:19:68:51:a6:02:33:e2:7c:6b:c9:7c:78:49:91:b9:a2:37:
6c:83:6e:2b:07:e4:12:38:21:b0:1a:f1:b5:67:a8:8e:5c:5c:
80:bd:9f:a3:7c:ed:bf:b7:f5:e4:18:6c:68:52:9e:16:7b:6b:
c2:4b:f4:9d:ae:36:08:cc:14:ac:64:c2:87:85:45:f3:68:96:
8f:ed:11:22:27:b7:b9:cd:f6:48:9e:64:c4:99:f1:0d:f8:34:
63:e1:50:84:e9:a2:fe:97:31:07:c0:61:01:f1:ba:9a:6e:20:
a3:7e:1c:de
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQI+ikHXXnVRMIoGB9jjGz5pgVHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG
NUU0OUUxQTAeFw0yNDExMzAxNTU1MDFaFw0yNTExMjkxNjAwMDFaMDMxMTAvBgNV
BAMTKEY5MkFENzkyMEU1QTZFOTQ1MzI3ODEyRDk1MDgyQzBEMkQ2ODQzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINyhQnvKUqxe6nI6yTr8Ixd+d
cyXiaGpXRxbH0wtkN2VI/CLRx5LfM/U2fjHMucYYXwz7NSuhIhUxEbhJtEgI5alL
e9TsNMTM2p+V7pn5+myqnw5XfcyJ2nJUceeqJ3iHCeAgQ+uikYR9IWUruwYbCkx5
AFZ3C/2rYxt2AmjsEvD2GRHQFZP99crdEqC007ecl3yoo7dwGoorGRaiwBmui8jM
ELNljpnNFQINFEm16vheruXY19RkZQPsUEZ9RRD0ojx6MymxI+c2ZB2bPTdkiW2P
BAjafodhQQJUi7SPvzUZWZvA13C4Rt9p2VLrIhgsmcoX6AlUX6U3/N01tFpLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+SrXkg5abpRTJ4EtlQgsDS1oQ70wHwYDVR0j
BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5
MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0
OUUxQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZTRjZDk2LWNmYzEtNDU3Ny1h
ZDNmLTc5ODNjMDUyM2MxMC8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzYzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8saAMA0GCSqGSIb3DQEBCwUAA4IBAQAmZT9xEFCPlf/SG6r8Gw41zCzku4dU8WEh
Yhx1FaZNyPArZPARnKu0Cj6pIbj4BR+vmseYy4oTKZYVPyi7nN8FCibh94Etn405
DNoYjNQSCBm+U1cNjCiSK1tUgpugauHeCgrLpqry2a0IrQuW57JY5LjS04O6D+LC
oQTm1+eQhiUtab1sWeoKF7XMSJ2r9TIfGWhRpgIz4nxryXx4SZG5ojdsg24rB+QS
OCGwGvG1Z6iOXFyAvZ+jfO2/t/XkGGxoUp4We2vCS/SdrjYIzBSsZMKHhUXzaJaP
7REiJ7e5zfZInmTEmfEN+DRj4VCE6aL+lzEHwGEB8bqabiCjfhze
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:09 2025 by rpki-client