Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa
File: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (raw, json)
Hash identifier: jZW9pP83pfMfhNQAbPKjYIQIf3owIxez3BQ7EEpmyu4=
Subject key identifier: 65:DD:47:98:01:9B:F6:01:C4:5F:A8:F7:08:76:B5:C6:65:66:BE:0D
Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial: 7CB039D7D9AE82E665EA51FFBDEDCE6D1D80C88B
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa
Signing time: Fri 26 Jul 2024 05:02:17 +0000
ROA not before: Fri 26 Jul 2024 04:57:17 +0000
ROA not after: Fri 25 Jul 2025 05:02:17 +0000
asID: 45718
IP address blocks: 2001:df0:b3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b0:39:d7:d9:ae:82:e6:65:ea:51:ff:bd:ed:ce:6d:1d:80:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Validity
Not Before: Jul 26 04:57:17 2024 GMT
Not After : Jul 25 05:02:17 2025 GMT
Subject: CN=65DD4798019BF601C45FA8F70876B5C66566BE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:ad:8e:2c:0b:d4:dc:c1:d4:a0:b8:06:68:
a6:38:35:30:0c:43:48:58:0f:9b:33:bf:1d:8e:55:
d6:68:67:bf:3f:27:6d:fe:20:94:6a:07:68:2f:15:
4c:59:c3:e1:57:e0:10:6a:8f:fe:65:54:af:84:f2:
ad:ca:f9:96:18:24:27:f9:29:75:e5:93:90:b5:1a:
2f:70:0b:41:cc:e8:fc:81:08:d4:3d:59:0f:b3:89:
58:47:58:74:44:62:cf:83:bf:b9:15:d6:72:e5:64:
5b:0b:ed:cf:64:f9:d0:8f:6f:b7:60:cd:48:74:68:
e7:af:01:e8:13:8b:d4:67:7d:65:c3:db:3e:ed:6e:
d5:96:59:f9:22:3e:a1:7f:16:81:99:22:94:7a:60:
86:75:c7:07:fd:07:bf:72:c3:98:f5:f5:45:52:fd:
07:98:1c:75:5b:3b:e1:45:57:28:8a:e4:83:6a:9b:
eb:6d:af:b9:69:1f:1a:61:31:8f:5b:fc:1d:01:bc:
54:10:e7:9e:05:bd:92:79:87:ea:6c:e7:bb:f2:0d:
6f:1c:73:d0:b3:cb:47:4e:76:1a:66:53:25:4f:a8:
f3:34:38:86:e3:f0:ef:59:a2:34:77:3b:1d:2d:71:
2d:a8:5d:68:f7:e9:d9:2c:fa:85:df:a4:95:08:86:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:47:98:01:9B:F6:01:C4:5F:A8:F7:08:76:B5:C6:65:66:BE:0D
X509v3 Authority Key Identifier:
keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:b3::/48
Signature Algorithm: sha256WithRSAEncryption
97:6e:9f:ae:64:e9:1a:b4:3f:08:aa:bd:41:0f:7c:60:8b:8c:
ff:2c:80:d4:eb:2f:ba:51:0f:a8:4d:29:e0:b3:29:78:12:0b:
22:f0:65:03:6e:28:57:ab:07:ce:d8:d3:e4:01:c5:b6:89:ab:
1a:a2:67:9f:b2:62:f9:9f:99:d5:ff:92:ba:fc:10:ea:94:0a:
4d:58:1b:e4:a0:cb:d9:f7:9a:e0:2d:ab:9d:44:de:f8:23:3e:
8f:23:1a:8a:cb:54:18:97:f4:4b:b4:8a:22:1b:b8:ea:5f:a5:
51:42:6c:b3:fa:be:27:8a:78:22:35:8d:d0:0c:2b:34:e4:a8:
fb:ac:fe:2a:0c:32:c8:9d:bf:0a:7b:de:fa:59:fe:95:86:06:
ba:ed:6b:8a:57:42:6a:42:36:bd:e7:57:a0:e7:fd:c1:51:e0:
93:5f:2a:ba:9c:15:99:59:bd:a4:1e:b8:fa:3d:e1:80:27:f6:
2f:c3:74:b8:62:8c:1c:d2:16:d6:6c:52:38:c6:bd:3e:68:18:
40:4d:c9:f1:03:21:06:1c:1c:1f:81:d6:eb:88:0e:40:5c:05:
90:e7:a2:a0:57:1c:af:89:5c:2e:c5:2b:57:e2:fe:f6:0b:43:
2e:9f:44:14:f3:6e:7d:20:1e:1c:8a:20:40:48:7b:c7:48:f9:
35:1d:ba:7a
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfLA519muguZl6lH/ve3ObR2AyIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz
QkQzMUQxRDAeFw0yNDA3MjYwNDU3MTdaFw0yNTA3MjUwNTAyMTdaMDMxMTAvBgNV
BAMTKDY1REQ0Nzk4MDE5QkY2MDFDNDVGQThGNzA4NzZCNUM2NjU2NkJFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3U62OLAvU3MHUoLgGaKY4NTAM
Q0hYD5szvx2OVdZoZ78/J23+IJRqB2gvFUxZw+FX4BBqj/5lVK+E8q3K+ZYYJCf5
KXXlk5C1Gi9wC0HM6PyBCNQ9WQ+ziVhHWHREYs+Dv7kV1nLlZFsL7c9k+dCPb7dg
zUh0aOevAegTi9RnfWXD2z7tbtWWWfkiPqF/FoGZIpR6YIZ1xwf9B79yw5j19UVS
/QeYHHVbO+FFVyiK5INqm+ttr7lpHxphMY9b/B0BvFQQ554FvZJ5h+ps57vyDW8c
c9Czy0dOdhpmUyVPqPM0OIbj8O9ZojR3Ox0tcS2oXWj36dks+oXfpJUIhlYLAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUZd1HmAGb9gHEX6j3CHa1xmVmvg0wHwYDVR0j
BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4
QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz
MUQxRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h
N2NhLTBiNWViODZiMDFjNi8wLzMyMzAzMDMxM2E2NDY2MzAzYTYyMzMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ACzMA0G
CSqGSIb3DQEBCwUAA4IBAQCXbp+uZOkatD8Iqr1BD3xgi4z/LIDU6y+6UQ+oTSng
syl4Egsi8GUDbihXqwfO2NPkAcW2iasaomefsmL5n5nV/5K6/BDqlApNWBvkoMvZ
95rgLaudRN74Iz6PIxqKy1QYl/RLtIoiG7jqX6VRQmyz+r4ningiNY3QDCs05Kj7
rP4qDDLInb8Ke976Wf6Vhga67WuKV0JqQja951eg5/3BUeCTXyq6nBWZWb2kHrj6
PeGAJ/Yvw3S4Yowc0hbWbFI4xr0+aBhATcnxAyEGHBwfgdbriA5AXAWQ56KgVxyv
iVwuxStX4v72C0Mun0QU8259IB4ciiBASHvHSPk1Hbp6
-----END CERTIFICATE-----
Generated at Fri May 2 11:11:50 2025 by rpki-client