Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa
File: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (raw, json)
Hash identifier: JfUP4DY2OySOqiZg8NfjMlof+FxgtDOlpZm2V8KRewI=
Subject key identifier: 8A:91:03:57:DA:9C:7B:19:BB:9C:F5:0D:48:FB:4C:16:71:FB:6B:6D
Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial: 2AC7CF9B1F4AA616D55582FA0308944F4B7E1284
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa
Signing time: Mon 01 Jul 2024 01:02:40 +0000
ROA not before: Mon 01 Jul 2024 00:57:40 +0000
ROA not after: Mon 30 Jun 2025 01:02:40 +0000
asID: 58499
IP address blocks: 2001:df0:c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c7:cf:9b:1f:4a:a6:16:d5:55:82:fa:03:08:94:4f:4b:7e:12:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Validity
Not Before: Jul 1 00:57:40 2024 GMT
Not After : Jun 30 01:02:40 2025 GMT
Subject: CN=8A910357DA9C7B19BB9CF50D48FB4C1671FB6B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:1d:6c:b2:b1:30:de:28:34:5a:18:45:26:
86:ac:e8:8c:bc:35:ad:ac:61:0f:76:b5:b5:eb:8a:
58:a8:59:22:8c:11:ad:46:c9:51:cb:a9:1c:4b:22:
27:6d:2e:3a:78:27:de:f9:c3:2a:53:21:57:cb:6c:
af:a3:12:89:6f:ba:f9:81:c7:6f:ae:7d:c0:49:74:
9b:01:4a:77:75:9c:5c:7c:af:54:12:f6:28:ae:d3:
83:5b:1f:3b:38:7b:50:bb:5f:84:bb:aa:ca:11:b5:
1f:7e:4e:4b:f5:ca:e2:cd:e3:c7:9b:68:89:72:35:
bc:79:07:2c:ad:70:67:af:67:16:23:41:dd:58:39:
eb:b2:f9:d4:c2:db:77:81:ef:ea:1c:be:18:8d:b8:
55:87:aa:4c:8b:7d:4a:89:01:0e:24:5e:cb:62:4c:
44:a4:b5:6c:6b:ec:09:84:e2:dc:1e:c4:a4:f9:cf:
d8:12:74:05:40:e0:41:b2:53:32:d0:94:fb:47:c2:
51:40:18:de:06:98:c1:94:30:2e:9c:03:97:a6:35:
9d:51:a2:f8:16:89:66:60:0c:0d:1a:06:f3:73:82:
e9:68:67:0e:cd:b0:21:93:b0:84:9e:d0:db:73:7a:
12:58:b9:f4:76:97:d3:67:6a:22:37:5c:c5:b3:66:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:03:57:DA:9C:7B:19:BB:9C:F5:0D:48:FB:4C:16:71:FB:6B:6D
X509v3 Authority Key Identifier:
keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:c80::/48
Signature Algorithm: sha256WithRSAEncryption
9c:03:e2:44:d2:33:64:b8:0e:2f:a0:a6:94:d8:88:01:70:5d:
ee:c6:56:fc:14:9c:8f:8e:78:12:e3:05:16:5e:ce:28:e9:0d:
ea:1e:d4:3d:3e:9b:25:1b:f1:54:e2:7e:1c:b2:d5:ab:ce:a2:
e6:3f:7b:6a:ed:c5:b6:f3:e6:ba:87:55:62:43:62:ef:b6:08:
67:c6:55:c2:80:c6:3c:0f:b6:94:ca:12:49:c8:33:1f:f7:82:
80:55:23:0b:38:81:9f:c2:5b:e9:46:c6:9d:b5:2f:11:78:3e:
3b:8e:93:f9:65:4a:31:08:a8:02:a7:e3:e4:2c:54:9e:82:01:
8a:e6:be:be:32:5f:15:b2:d5:35:2f:59:d3:c8:a3:7b:47:08:
36:e2:91:6c:69:5b:06:a9:74:7f:0f:8f:49:4a:19:89:57:ef:
a7:8f:a2:1d:24:ee:5f:89:f8:01:78:c2:d5:2b:d4:c0:6e:71:
a6:02:98:56:9d:a9:84:bc:e8:e8:b3:54:c9:8c:9b:75:0a:4b:
d0:ce:3d:1d:6a:06:53:86:1f:da:ff:81:2b:44:96:f1:86:9c:
3c:bb:83:a2:81:12:3e:87:39:b0:7d:2d:92:55:3d:a7:f5:6d:
94:00:c0:9f:2b:5c:a9:a7:bb:d9:d4:af:d9:82:20:af:1a:27:
db:f9:71:2f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKsfPmx9KphbVVYL6AwiUT0t+EoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3
MEZBRDRBNTAeFw0yNDA3MDEwMDU3NDBaFw0yNTA2MzAwMTAyNDBaMDMxMTAvBgNV
BAMTKDhBOTEwMzU3REE5QzdCMTlCQjlDRjUwRDQ4RkI0QzE2NzFGQjZCNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DB1ssrEw3ig0WhhFJoas6Iy8
Na2sYQ92tbXrilioWSKMEa1GyVHLqRxLIidtLjp4J975wypTIVfLbK+jEolvuvmB
x2+ufcBJdJsBSnd1nFx8r1QS9iiu04NbHzs4e1C7X4S7qsoRtR9+Tkv1yuLN48eb
aIlyNbx5ByytcGevZxYjQd1YOeuy+dTC23eB7+ocvhiNuFWHqkyLfUqJAQ4kXsti
TESktWxr7AmE4twexKT5z9gSdAVA4EGyUzLQlPtHwlFAGN4GmMGUMC6cA5emNZ1R
ovgWiWZgDA0aBvNzguloZw7NsCGTsISe0NtzehJYufR2l9NnaiI3XMWzZjqHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUipEDV9qcexm7nPUNSPtMFnH7a20wHwYDVR0j
BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw
QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB
RDRBNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiMWM5NTc5LTU2YmEtNGE3MC1i
YTEzLTNiMDVhNmNjYjIxZS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYzMzgzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wDIAw
DQYJKoZIhvcNAQELBQADggEBAJwD4kTSM2S4Di+gppTYiAFwXe7GVvwUnI+OeBLj
BRZezijpDeoe1D0+myUb8VTifhyy1avOouY/e2rtxbbz5rqHVWJDYu+2CGfGVcKA
xjwPtpTKEknIMx/3goBVIws4gZ/CW+lGxp21LxF4PjuOk/llSjEIqAKn4+QsVJ6C
AYrmvr4yXxWy1TUvWdPIo3tHCDbikWxpWwapdH8Pj0lKGYlX76ePoh0k7l+J+AF4
wtUr1MBucaYCmFadqYS86OizVMmMm3UKS9DOPR1qBlOGH9r/gStElvGGnDy7g6KB
Ej6HObB9LZJVPaf1bZQAwJ8rXKmnu9nUr9mCIK8aJ9v5cS8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:41 2025 by rpki-client