Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa
File: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (raw, json)
Hash identifier: ySmHccwgVUo/Xec9y8NyZzFaqBKw2yi8gAIwJ6BUXGE=
Subject key identifier: B0:4D:13:63:BE:07:B5:68:25:97:39:78:15:CC:71:41:6D:1D:B6:E5
Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial: 35F801E8C3667469A0C9AD03B2121386107DDC9D
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa
Signing time: Wed 07 Aug 2024 05:00:00 +0000
ROA not before: Wed 07 Aug 2024 04:55:00 +0000
ROA not after: Wed 06 Aug 2025 05:00:00 +0000
asID: 138072
IP address blocks: 2403:a1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f8:01:e8:c3:66:74:69:a0:c9:ad:03:b2:12:13:86:10:7d:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Validity
Not Before: Aug 7 04:55:00 2024 GMT
Not After : Aug 6 05:00:00 2025 GMT
Subject: CN=B04D1363BE07B5682597397815CC71416D1DB6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:27:ab:4b:02:72:97:fa:64:91:c0:e6:b1:
d3:58:84:a9:41:25:1d:5b:7c:34:7a:01:9f:2d:3d:
88:83:24:49:d0:b3:d8:ed:07:36:d7:24:7a:1f:5e:
0a:16:83:1b:10:64:fd:6d:ff:10:00:ca:cb:85:58:
97:6f:01:a4:1e:4b:de:2f:a3:12:d4:cf:54:8e:d8:
fd:ef:c3:91:a0:e1:79:91:78:a6:a9:ab:70:13:0e:
9f:ee:77:55:bf:a1:6a:7c:6e:9c:6b:1d:ce:cb:a4:
e7:90:aa:f6:27:00:55:18:ee:c6:07:13:ad:e6:c4:
b6:e3:c5:0e:db:c6:4a:77:72:3c:2e:a4:76:23:ec:
7e:9a:af:e1:2e:b5:be:fa:7e:5a:c6:93:38:e9:fc:
c4:7d:f7:64:59:82:5b:78:fc:f2:29:72:1c:61:3b:
d0:19:da:99:70:ef:2c:06:71:e2:dd:dc:0b:ef:75:
a6:84:6c:6b:3e:e9:fd:59:ea:74:72:90:c3:f3:17:
31:99:04:6b:4a:ce:54:be:59:32:e0:b4:1b:30:4a:
c6:b4:2f:8a:87:cf:9f:3a:ae:66:05:d0:4c:70:59:
38:27:6d:fe:a7:bf:91:27:f7:17:f1:52:b3:7e:46:
31:ff:96:ca:37:ec:06:36:48:70:a9:d4:f5:2f:cb:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:13:63:BE:07:B5:68:25:97:39:78:15:CC:71:41:6D:1D:B6:E5
X509v3 Authority Key Identifier:
keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:2c:ef:b8:c4:31:3e:0a:ed:e8:0d:b8:0e:8c:a4:f6:68:85:
d2:c0:b2:8d:17:04:0b:cf:53:5d:b4:df:0f:42:5c:f9:5a:fa:
e2:05:7f:d3:b5:e2:bf:44:1e:8a:c4:82:99:90:e9:81:3a:53:
2d:dd:e9:e3:67:33:ab:06:44:1f:57:ea:c5:6a:ca:e8:4d:d3:
30:f8:9f:c6:94:97:c7:65:62:5d:24:74:48:cf:e9:29:7a:f0:
78:00:fa:9a:77:6d:ca:5f:7b:1a:7d:ca:dc:76:fd:bd:d3:62:
89:c6:ef:91:85:ab:36:20:41:16:76:03:c0:67:8a:f3:53:89:
16:98:10:14:33:eb:96:51:82:50:32:ae:ad:3f:0c:4c:41:fe:
55:88:97:f4:c2:d9:9d:aa:0c:93:af:b7:f3:c7:88:61:90:3d:
8a:fc:91:89:ae:9a:89:10:ee:21:8b:cb:f0:8b:58:9c:e3:81:
96:99:cc:66:a2:46:ea:fd:a2:fd:dc:fe:31:73:2b:52:55:46:
9d:f2:7f:a7:3a:63:8a:43:8a:a4:7d:93:91:10:17:8f:9d:ab:
43:c0:bb:d0:bf:e8:5d:ba:4b:42:31:14:83:7f:58:c4:10:32:
4e:e6:43:1a:2a:f0:d3:bf:63:a9:a0:4d:34:08:1f:9a:51:c9:
38:89:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:51 2025 by rpki-client