Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa
File: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (raw, json)
Hash identifier: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=
Subject key identifier: 86:F4:34:B0:39:C0:FD:52:B4:2D:20:62:4D:32:7D:1E:5C:51:CF:CB
Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F
Certificate serial: 2313525BF582298CA55FE705C80128A23AFA2151
Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa
Signing time: Thu 15 Aug 2024 04:01:32 +0000
ROA not before: Thu 15 Aug 2024 03:56:32 +0000
ROA not after: Thu 14 Aug 2025 04:01:32 +0000
asID: 58404
IP address blocks: 2001:df2:e300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:13:52:5b:f5:82:29:8c:a5:5f:e7:05:c8:01:28:a2:3a:fa:21:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F
Validity
Not Before: Aug 15 03:56:32 2024 GMT
Not After : Aug 14 04:01:32 2025 GMT
Subject: CN=86F434B039C0FD52B42D20624D327D1E5C51CFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:c5:58:f2:7e:75:5d:37:b8:e8:96:23:65:
2b:07:36:43:8c:71:a7:d5:f9:f2:ea:88:09:ac:8d:
e0:0f:61:ea:f4:42:d1:ad:be:d6:e2:b4:59:f3:f2:
50:57:9f:d7:ea:8b:b6:93:db:e1:cc:5c:b5:0b:3e:
10:ae:6e:86:48:81:a9:cd:a4:19:84:21:52:12:71:
3e:67:34:42:cf:89:80:c0:48:b3:43:51:ce:31:07:
d7:7a:e3:26:3e:69:56:e3:36:90:9b:5b:1c:61:89:
e6:d2:bc:f5:6d:87:16:94:d3:61:8a:7d:a8:e9:06:
34:1b:67:31:b2:08:25:20:43:63:8d:56:30:3f:4a:
97:38:fb:44:1b:f0:a8:46:ac:70:c2:c4:26:97:71:
5e:ab:af:e3:d6:8c:7d:64:4b:07:25:6c:4d:d7:db:
8a:27:ac:36:5a:5c:f0:d7:af:1a:f5:44:3b:87:b2:
d6:b1:7d:73:a3:d0:cb:71:6c:74:01:d7:02:a0:b8:
99:ab:7e:f0:4b:ae:18:cb:c9:fa:d2:11:0f:06:dc:
82:e5:ec:0a:4f:be:b1:c5:bf:70:42:9c:9e:10:d7:
95:1b:75:ea:84:55:39:32:ca:2b:4e:75:b4:5d:a0:
b8:61:74:92:ac:d5:c2:db:83:10:a6:3a:13:ab:2e:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:34:B0:39:C0:FD:52:B4:2D:20:62:4D:32:7D:1E:5C:51:CF:CB
X509v3 Authority Key Identifier:
keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:e300::/48
Signature Algorithm: sha256WithRSAEncryption
06:60:56:50:15:dd:83:9a:ea:0a:2e:8c:2b:48:81:bd:03:ae:
f1:39:50:3b:71:d2:34:68:09:4f:08:58:48:f4:e1:b4:fc:dc:
b6:80:e3:73:ed:94:1f:e2:a0:0c:07:ef:00:85:2c:28:02:50:
5b:86:9f:97:ad:f1:23:d5:3f:ff:f4:73:b2:a4:c0:43:c3:93:
9a:df:68:19:32:9e:ae:78:25:70:fd:71:04:10:73:4d:d4:2d:
3e:37:31:b9:19:c2:0c:65:1b:91:72:e5:ef:28:d2:21:bf:cc:
54:25:a5:4c:11:cb:dd:d0:3a:14:4f:d4:eb:6e:33:5a:2b:32:
bb:02:23:8d:24:06:aa:61:a1:6a:0b:87:c3:6c:61:79:e1:56:
c7:76:cb:1b:67:a1:36:8a:56:0a:d9:8c:34:c1:5f:23:a7:d6:
4e:04:eb:53:b6:d5:55:5f:eb:e6:7d:43:5e:f2:11:7b:6a:3c:
c9:b1:db:73:6d:89:0f:de:01:2c:e0:37:a7:ee:34:7b:78:99:
f2:bc:e7:10:08:4e:f7:2e:18:b6:60:a5:69:db:ac:e8:96:c7:
e1:21:86:6b:bb:60:55:8c:35:0d:84:dd:ce:dc:45:c3:dc:fc:
bf:4a:18:c0:87:3d:9a:3e:9e:b7:e0:41:e0:9e:bb:e7:40:2b:
13:aa:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:32 2025 by rpki-client