Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa
File: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (raw, json)
Hash identifier: 6/CFAgI9fYm2h+bpsbThjdmYrbI1a+tEsxm7cMbpBNY=
Subject key identifier: 1A:BE:AC:8A:2A:1D:16:B7:88:ED:F6:F5:24:17:A9:77:FE:33:79:B6
Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Certificate serial: 22396EF05CE47641B09260A2492536B7F341D860
Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa
Signing time: Mon 02 Dec 2024 11:00:01 +0000
ROA not before: Mon 02 Dec 2024 10:55:01 +0000
ROA not after: Mon 01 Dec 2025 11:00:01 +0000
asID: 150523
IP address blocks: 2001:df1:dfc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:39:6e:f0:5c:e4:76:41:b0:92:60:a2:49:25:36:b7:f3:41:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Validity
Not Before: Dec 2 10:55:01 2024 GMT
Not After : Dec 1 11:00:01 2025 GMT
Subject: CN=1ABEAC8A2A1D16B788EDF6F52417A977FE3379B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:cd:3d:d0:f7:8d:19:51:ae:75:a3:d4:36:
ea:f4:0a:25:0c:c9:8a:4f:54:ea:7f:1d:81:2c:73:
24:90:12:c8:e9:a7:25:80:0e:8d:47:fc:02:74:5e:
85:a7:e0:3d:51:2a:31:2d:a9:07:84:91:a7:33:68:
ac:d2:70:6f:c1:6d:bc:79:68:f4:6c:9e:b9:2b:23:
c5:7b:fd:fc:06:24:0c:ac:e5:17:e4:29:56:c9:c5:
d2:0f:e8:13:fd:cc:95:22:b7:e6:11:f6:d1:6c:75:
6c:75:b9:28:c5:10:13:d4:bf:24:03:20:2f:dc:d4:
54:85:d4:93:18:f4:f9:35:9d:69:03:ca:fb:99:33:
ef:cd:d5:31:e9:ba:dd:65:9d:ef:78:2c:bf:89:35:
15:34:c3:15:ed:e8:5c:6f:a6:94:51:bf:92:f1:67:
17:b1:33:ec:c6:13:bb:43:d0:7f:0e:38:af:fd:88:
ba:6b:8f:f8:7f:df:6b:7d:83:26:8e:b4:89:8b:bd:
49:6a:ef:b3:26:a1:be:0b:31:b7:fc:ec:36:fe:f6:
af:1b:79:4b:ff:38:81:67:7b:a2:c0:82:e7:1e:ef:
05:f3:79:cb:f6:7f:d9:35:7b:c8:70:2e:f2:fe:28:
47:de:92:27:fb:7f:86:3f:f1:c2:36:58:88:d4:f8:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:AC:8A:2A:1D:16:B7:88:ED:F6:F5:24:17:A9:77:FE:33:79:B6
X509v3 Authority Key Identifier:
keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:dfc0::/48
Signature Algorithm: sha256WithRSAEncryption
18:d8:a3:f4:eb:91:46:19:f1:f0:ed:89:25:24:b0:7e:61:56:
4e:12:36:07:c0:be:ac:4c:2a:10:78:c3:0a:b5:23:d1:e4:95:
20:36:a3:93:d2:4d:53:09:d8:73:a6:28:74:f5:a3:52:09:09:
06:d4:cf:eb:de:c8:34:2d:6b:79:5d:93:bf:00:f7:67:c8:4a:
b5:87:70:60:50:2e:18:0f:59:f9:e1:e1:39:56:2b:15:4c:c0:
da:23:b5:75:3a:d4:2f:ec:3c:2b:12:dc:45:5b:a8:ed:4e:49:
37:5a:81:51:a1:df:8b:6d:0a:74:ec:14:7b:f6:65:e9:93:47:
d3:3a:7b:c1:a1:c4:d2:53:d6:35:37:43:d4:61:1e:fc:24:e2:
f7:9d:53:12:43:32:55:18:1d:ef:15:7f:ce:ea:10:ff:de:ca:
93:57:b8:a3:65:68:7e:ec:5a:f1:07:e1:c5:3f:74:5d:82:d6:
b4:f9:31:41:f5:97:48:78:76:24:84:9a:61:fe:d3:06:28:95:
15:cf:8d:71:6a:b8:63:32:79:2d:00:8b:3e:98:db:e8:f0:76:
8f:ad:f3:e9:8a:9e:bb:0f:fb:a2:a5:02:95:cb:31:2b:7a:0f:
a2:58:b2:91:02:b5:f9:22:02:77:15:bd:cd:c1:11:77:65:39:
ab:11:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:11 2025 by rpki-client