Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa
File: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (raw, json)
Hash identifier: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q=
Subject key identifier: 01:06:56:80:84:A2:28:51:47:42:A5:71:F2:DC:3E:CB:B6:16:30:DE
Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial: 3C816B85D4A8B8E6819435E541FE6BBAEC79E512
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa
Signing time: Thu 01 Aug 2024 02:46:52 +0000
ROA not before: Thu 01 Aug 2024 02:41:52 +0000
ROA not after: Thu 31 Jul 2025 02:46:52 +0000
asID: 142339
IP address blocks: 2407:a5c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:81:6b:85:d4:a8:b8:e6:81:94:35:e5:41:fe:6b:ba:ec:79:e5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
Validity
Not Before: Aug 1 02:41:52 2024 GMT
Not After : Jul 31 02:46:52 2025 GMT
Subject: CN=0106568084A228514742A571F2DC3ECBB61630DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3b:76:7a:9e:3d:eb:ac:44:ae:e1:ea:ea:89:
91:a7:fd:a4:29:b8:df:62:c2:8e:64:9b:ca:d4:12:
29:1d:c5:0d:dd:d1:c6:0a:f1:d0:57:a9:d6:cb:8f:
fe:cf:73:ac:ed:5b:d7:fd:1d:62:e5:ab:b4:a4:5d:
da:5e:d9:94:af:26:b9:37:58:c3:a7:16:cb:e0:d8:
41:15:66:58:20:04:f8:b0:d8:54:40:b7:99:90:b5:
8c:76:10:2e:77:9a:ca:3c:90:89:f0:55:11:ed:19:
fa:2d:3f:84:6c:d2:36:58:00:6b:f4:9f:00:49:2e:
16:f2:c1:3e:f0:12:02:0a:a0:41:0e:01:f5:a4:4f:
95:e5:0c:82:95:24:aa:e7:2c:1f:9d:85:26:f4:ed:
cc:1f:e0:19:6a:54:62:85:04:67:e5:cf:d2:5a:f7:
fa:02:0e:c3:c8:39:4e:18:96:56:89:8e:92:d3:62:
80:63:c4:83:86:b5:a5:1b:90:45:93:a7:3e:0a:51:
27:f9:f7:9a:fc:65:cb:48:f8:02:fb:4d:28:80:b8:
eb:66:25:5f:0f:51:d0:4e:b7:2a:6c:33:0e:bb:b1:
ee:c1:1c:9e:e9:79:7c:70:55:45:97:df:a2:62:f7:
ae:66:80:14:24:41:4a:4f:30:19:dc:a0:39:91:b7:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:56:80:84:A2:28:51:47:42:A5:71:F2:DC:3E:CB:B6:16:30:DE
X509v3 Authority Key Identifier:
keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:a5c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b4:d2:f3:10:27:de:0d:77:e5:2e:04:73:e1:48:8a:db:e5:
99:c4:bb:4e:a9:f5:32:e7:a3:a8:74:de:97:d0:fd:27:50:a2:
16:45:30:6d:c2:ab:f1:54:66:a0:79:f3:76:91:c0:28:d7:1c:
d2:3a:15:12:9b:b2:b5:af:8b:a8:ad:fe:b9:8d:72:83:0c:cc:
77:ed:03:3f:51:ed:f5:39:91:c9:cc:00:8d:1b:c3:7f:70:d9:
da:37:34:5b:fe:41:5c:c1:72:1c:ca:b5:af:1d:64:ad:ad:d1:
fb:d5:df:be:49:46:85:ac:cb:2f:4b:b4:ab:8a:c2:fe:af:e5:
5e:5e:8a:04:83:ab:ea:8a:7c:97:04:03:6b:15:c9:cf:ad:9c:
90:a4:3c:2d:03:81:20:ff:55:0d:d2:db:0f:b4:09:60:ab:98:
1b:f0:76:2e:f3:af:0d:81:7c:ae:6e:ed:05:8c:34:12:c9:5a:
4f:de:e5:55:24:6a:8a:c8:f3:a1:ce:d5:10:cd:ec:19:94:dd:
6f:1b:27:c9:6c:a6:9c:ff:65:af:70:b5:5f:87:11:2d:70:0b:
ff:a7:25:5e:53:2d:e9:bb:1d:c7:82:c7:8e:96:9d:21:a8:e9:
ae:d7:c3:3d:a8:cd:21:a8:59:2e:41:50:16:b0:c5:f6:97:75:
ba:ba:0d:f7
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUPIFrhdSouOaBlDXlQf5ruux55RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw
ODMwNUU0NTAeFw0yNDA4MDEwMjQxNTJaFw0yNTA3MzEwMjQ2NTJaMDMxMTAvBgNV
BAMTKDAxMDY1NjgwODRBMjI4NTE0NzQyQTU3MUYyREMzRUNCQjYxNjMwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyO3Z6nj3rrESu4erqiZGn/aQp
uN9iwo5km8rUEikdxQ3d0cYK8dBXqdbLj/7Pc6ztW9f9HWLlq7SkXdpe2ZSvJrk3
WMOnFsvg2EEVZlggBPiw2FRAt5mQtYx2EC53mso8kInwVRHtGfotP4Rs0jZYAGv0
nwBJLhbywT7wEgIKoEEOAfWkT5XlDIKVJKrnLB+dhSb07cwf4BlqVGKFBGflz9Ja
9/oCDsPIOU4YllaJjpLTYoBjxIOGtaUbkEWTpz4KUSf595r8ZctI+AL7TSiAuOtm
JV8PUdBOtypsMw67se7BHJ7peXxwVUWX36Ji965mgBQkQUpPMBncoDmRt7c9AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUAQZWgISiKFFHQqVx8tw+y7YWMN4wHwYDVR0j
BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG
NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw
NUU0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExOTIwMjFlLTM5MDQtNDExNS1h
ZjVlLTNlZGI3MTNiYWExNC8wLzMyMzQzMDM3M2E2MTM1NjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzQzMjMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQHpcAAADANBgkq
hkiG9w0BAQsFAAOCAQEAX7TS8xAn3g135S4Ec+FIitvlmcS7Tqn1MuejqHTel9D9
J1CiFkUwbcKr8VRmoHnzdpHAKNcc0joVEpuyta+LqK3+uY1ygwzMd+0DP1Ht9TmR
ycwAjRvDf3DZ2jc0W/5BXMFyHMq1rx1kra3R+9XfvklGhazLL0u0q4rC/q/lXl6K
BIOr6op8lwQDaxXJz62ckKQ8LQOBIP9VDdLbD7QJYKuYG/B2LvOvDYF8rm7tBYw0
EslaT97lVSRqisjzoc7VEM3sGZTdbxsnyWymnP9lr3C1X4cRLXAL/6clXlMt6bsd
x4LHjpadIajprtfDPajNIahZLkFQFrDF9pd1uroN9w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:21 2025 by rpki-client