Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa
File: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (raw, json)
Hash identifier: jzRutxmwCaj+qL/12+BUDxY9FM50TTowvhnOTHxn89o=
Subject key identifier: 20:28:C7:C4:80:DC:17:C0:71:D0:84:D8:B3:C4:13:70:EE:99:94:4C
Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial: 721A0982607FF336BA0E05C84CA288BBDA974CA5
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa
Signing time: Mon 01 Jul 2024 01:02:35 +0000
ROA not before: Mon 01 Jul 2024 00:57:35 +0000
ROA not after: Mon 30 Jun 2025 01:02:35 +0000
asID: 131749
IP address blocks: 2402:be80:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1a:09:82:60:7f:f3:36:ba:0e:05:c8:4c:a2:88:bb:da:97:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Validity
Not Before: Jul 1 00:57:35 2024 GMT
Not After : Jun 30 01:02:35 2025 GMT
Subject: CN=2028C7C480DC17C071D084D8B3C41370EE99944C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:1d:59:dd:d7:d7:13:7d:75:67:d9:f0:1c:
ca:b2:e6:60:40:91:93:24:e3:6c:51:45:c3:a5:74:
23:0e:f1:2c:b4:03:78:fc:97:34:1c:7c:18:a8:5c:
bb:e6:1a:8b:15:a4:d8:aa:ff:b7:34:6e:bc:db:0c:
7d:1b:e1:62:6b:78:70:4a:78:92:9f:ff:b5:73:cc:
24:0e:fa:6a:2f:0d:d3:8c:b4:ea:70:cd:d6:6e:c3:
92:4e:50:c4:87:8d:ea:fd:e7:d3:74:53:b4:36:45:
14:7b:c9:1e:e3:2c:dd:07:6f:9e:24:65:9d:73:61:
b2:82:7a:45:1c:8f:47:ae:9d:e6:49:7a:10:97:4b:
b0:2e:22:f9:d1:6b:5a:cd:54:12:a5:c4:c0:80:93:
d2:b7:9c:c3:8d:a9:c0:02:5e:8d:ee:85:b5:10:1f:
35:32:2e:52:b2:f5:1d:31:2c:d1:a1:a9:a0:0e:73:
64:a8:cd:28:1d:98:e7:e9:23:92:3a:8d:95:51:83:
bc:04:67:5b:a1:4a:bb:8f:11:b9:94:83:71:f0:08:
f7:25:e2:3e:5d:f2:e3:8a:33:dd:bb:a2:a0:05:35:
0f:d1:c8:30:17:bf:84:51:49:3b:7a:61:d0:e3:dd:
b6:7f:91:4d:cd:f8:27:c1:a2:90:ce:2a:f3:59:05:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:C7:C4:80:DC:17:C0:71:D0:84:D8:B3:C4:13:70:EE:99:94:4C
X509v3 Authority Key Identifier:
keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
44:e5:db:d7:88:c5:0d:23:75:73:b5:5d:3e:64:7e:dd:08:e1:
77:8c:51:1c:df:50:a6:50:7b:a7:ea:f7:c5:07:78:9c:2f:d9:
40:0d:f8:d1:8a:d4:56:1d:50:73:23:69:e2:72:86:c2:63:07:
a8:5c:f3:df:52:47:40:36:77:e6:f4:d9:d4:d4:09:31:79:c7:
36:21:91:f1:29:30:b0:96:9f:a7:ed:ce:b5:62:1f:35:4c:a5:
b7:42:39:76:38:25:4f:3d:aa:37:1a:4a:d2:82:50:8f:0e:0e:
d8:bb:10:89:f7:31:70:66:1b:b5:78:1b:67:a9:ff:0e:85:5a:
54:5b:9a:4a:a0:5b:de:5f:dd:3f:76:77:41:ce:ba:9f:15:3e:
16:f6:05:bc:3a:66:82:2b:eb:cd:e4:90:88:82:34:74:35:2a:
d5:4c:f4:2d:b6:b7:03:54:34:f6:7d:6c:3b:bb:17:30:6d:78:
24:ae:16:7e:1f:ef:2a:2b:de:f7:ac:99:36:c2:dc:26:06:d9:
98:3b:ac:50:a8:86:d8:67:a4:79:fe:cf:5d:67:87:7b:b7:aa:
db:40:d3:ad:65:c9:cd:d8:dd:98:52:cd:71:55:36:75:14:0a:
77:ca:3a:77:3f:cc:9d:a6:c0:1f:8f:03:0b:73:07:0c:7f:6c:
b9:07:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:22 2025 by rpki-client