Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa
File: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=
Subject key identifier: 77:E4:4D:D1:60:55:69:8F:C5:AD:29:D8:04:62:A6:2C:15:9E:68:B4
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 0849E43D4EBEEAF5782BA6E6597C33E5901BC4F6
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa
Signing time: Tue 10 Dec 2024 05:58:16 +0000
ROA not before: Tue 10 Dec 2024 05:53:16 +0000
ROA not after: Tue 09 Dec 2025 05:58:16 +0000
asID: 153087
IP address blocks: 2404:97c0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:49:e4:3d:4e:be:ea:f5:78:2b:a6:e6:59:7c:33:e5:90:1b:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 10 05:53:16 2024 GMT
Not After : Dec 9 05:58:16 2025 GMT
Subject: CN=77E44DD16055698FC5AD29D80462A62C159E68B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:4d:72:df:3b:88:b6:e3:4e:66:fe:83:3f:
a7:d3:d1:30:7e:8b:3d:bc:1a:26:11:17:13:d7:10:
6f:00:f8:01:d6:4f:10:1c:92:0e:27:fe:dc:12:a0:
4c:d2:81:9f:d7:c5:8b:dc:d6:50:ed:04:7b:85:58:
fe:97:57:45:2c:ae:48:78:2d:9f:3f:a0:b0:d7:30:
7a:a1:21:e8:54:d6:dd:64:46:6c:b7:d4:78:56:89:
a6:09:1f:34:2e:64:78:25:5e:3a:bd:f1:73:2f:6a:
3f:3f:7a:1c:ef:6a:21:11:48:37:1b:fa:1a:44:1f:
f9:11:61:7c:b0:4f:81:15:eb:54:60:67:c0:5c:c6:
94:99:f8:17:30:e0:83:4e:12:aa:d3:a3:86:37:5b:
5e:ab:0e:62:a5:a9:c3:e8:d7:77:ae:80:ee:0c:64:
be:d4:d9:22:da:91:a0:77:48:89:21:97:0a:bb:d2:
3a:21:c9:05:29:a6:1f:08:c7:a9:8c:6d:95:ef:dc:
f7:a1:95:b0:d7:0e:33:e6:fd:c1:33:f6:ae:b2:a6:
dd:09:50:7f:12:d8:19:2f:e3:e5:38:71:00:7c:be:
1b:8e:da:7b:eb:d8:29:13:7c:27:87:d1:b8:cb:e0:
41:e1:44:84:5c:fb:22:d3:1a:dd:8a:c6:c0:50:4b:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:4D:D1:60:55:69:8F:C5:AD:29:D8:04:62:A6:2C:15:9E:68:B4
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
b0:72:db:b7:dd:f7:f6:64:a9:bc:67:25:87:ff:ba:34:d2:f9:
8d:6b:08:98:ec:01:d4:f3:df:58:f2:5a:35:50:22:5e:96:8c:
dc:8e:72:9b:c0:f8:10:a4:19:8a:51:c3:06:e4:b8:3b:e2:8c:
3d:09:5b:dd:63:ad:f0:27:a8:56:4e:54:48:6a:4a:e7:5c:f6:
d0:df:ab:34:45:d9:5b:88:41:4c:89:d7:8b:46:3a:5b:d2:07:
8e:ba:04:5b:76:35:c3:a5:6b:8b:44:d7:94:23:43:ca:98:41:
6b:f6:74:94:99:96:3b:f5:0f:90:01:be:6a:5e:63:a3:d3:f7:
6b:2e:8d:0d:b7:0d:91:9c:6e:d4:70:fb:57:d0:84:26:91:e3:
1a:96:7d:2f:a8:f2:5f:5d:33:cf:cc:b8:30:70:9d:d1:f6:34:
0a:d0:d5:0d:d4:12:ca:27:cb:b3:c1:fe:64:71:ce:75:09:3a:
f4:b8:d1:35:2f:4c:c8:7d:cf:e8:90:84:3b:5d:40:2b:6c:d3:
19:ed:44:6c:ad:8d:78:c8:96:b4:12:bf:04:c6:1b:21:88:21:
8e:fe:3d:20:fd:c2:49:61:0a:26:c7:a2:53:a7:b7:2a:16:42:
a2:21:71:2f:d3:bc:49:8b:ff:3f:11:df:44:75:23:27:e2:7b:
d6:a0:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:21 2025 by rpki-client