Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa
File: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (raw, json)
Hash identifier: J55kQHMO+Zd8tUd1x/DC1ZrPlyNBx1LNMyMME0jdVQw=
Subject key identifier: 8B:8A:51:AE:6F:F0:5F:F1:7C:91:69:30:F1:A4:F6:BC:65:33:32:C8
Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342
Certificate serial: 7F3D76FB06501AD7A83B61CF14AA514E84F18A9E
Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa
Signing time: Fri 05 Jul 2024 01:33:09 +0000
ROA not before: Fri 05 Jul 2024 01:28:09 +0000
ROA not after: Fri 04 Jul 2025 01:33:09 +0000
asID: 152790
IP address blocks: 2001:df3:d3c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3d:76:fb:06:50:1a:d7:a8:3b:61:cf:14:aa:51:4e:84:f1:8a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342
Validity
Not Before: Jul 5 01:28:09 2024 GMT
Not After : Jul 4 01:33:09 2025 GMT
Subject: CN=8B8A51AE6FF05FF17C916930F1A4F6BC653332C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:6d:84:ef:ac:8e:9c:94:3d:3f:24:f1:73:
9d:a1:31:6a:a0:35:ea:fa:21:f2:c8:77:99:22:dd:
4d:ab:a9:82:55:4b:f7:ce:87:3c:0e:cc:46:a3:6f:
c3:0d:e0:5a:50:d2:be:9f:51:ea:d3:42:ad:dc:5f:
ea:7f:e3:50:5d:d1:06:6a:c9:10:39:49:a5:02:ec:
bd:3b:b7:9b:a9:b1:d7:12:cb:bf:0b:fd:08:11:af:
75:df:3f:6d:8c:04:78:65:bf:f7:ab:ad:46:e2:2c:
6d:55:21:38:b1:33:4d:d5:0d:d3:c3:ab:6d:8e:e7:
5b:f7:22:40:a7:b1:e0:bd:0d:66:86:6f:ef:52:93:
9c:22:4b:ac:fd:11:19:10:35:45:fb:9d:7c:d7:13:
49:73:57:c2:01:51:92:a0:cb:52:64:25:91:b2:33:
1b:ff:e5:7d:d1:1e:ad:34:50:b0:7e:d0:96:fe:32:
88:14:83:70:cc:43:bb:16:f3:92:d7:6c:57:ca:21:
62:3b:13:b1:1c:b4:62:0a:69:8d:c0:98:22:8b:6a:
48:3e:d5:47:66:ab:d6:f6:b2:d1:85:c5:49:0d:14:
02:35:69:54:84:44:fa:c5:63:58:79:5e:32:fe:0c:
2d:b6:b0:8b:43:5e:93:c7:c7:99:7d:f2:3e:90:2e:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:51:AE:6F:F0:5F:F1:7C:91:69:30:F1:A4:F6:BC:65:33:32:C8
X509v3 Authority Key Identifier:
keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
72:c6:86:4b:15:b6:c5:b6:2d:9e:c2:62:9e:55:a5:c7:bb:9c:
e0:12:c2:16:38:60:23:9c:76:86:0d:09:ac:92:52:3b:59:90:
e8:a9:00:ed:31:a2:37:10:eb:1b:2a:5b:f3:ac:40:34:4e:1a:
6c:48:f5:19:dc:87:21:95:16:a5:45:b7:95:e7:b9:c3:98:29:
75:3f:c5:e9:00:12:5f:5d:f5:88:ef:4c:56:3e:fd:31:f6:89:
c9:ad:21:7b:90:34:fb:67:e7:46:17:3d:0d:fa:22:3f:7b:7f:
e7:cf:98:09:2a:71:eb:36:4b:1b:c2:d0:8b:82:3c:68:50:f4:
50:d2:c5:2e:b5:66:ec:38:8b:2b:36:dd:95:02:bf:b6:45:23:
65:49:d0:40:0f:81:e5:19:f0:62:44:52:1b:8f:71:a6:d8:f9:
db:8f:45:17:0f:a7:60:2b:91:d0:23:58:8e:ad:1c:a8:45:06:
ae:43:48:26:d0:2a:cd:12:85:67:b9:f5:75:01:18:71:82:32:
11:38:02:ee:4c:0a:c4:2b:c1:96:7f:04:e0:32:38:9b:e6:e4:
55:fa:e5:c0:95:6c:d0:5e:ea:13:f6:15:1d:6d:74:20:f7:cd:
f2:f7:db:1e:07:b9:0c:fd:25:1c:c7:45:7a:41:17:4c:6a:92:
8d:25:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:13 2025 by rpki-client