Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa
File: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (raw, json)
Hash identifier: dShjUK+1B9xhLAsugTMDbSpNCwLh0hAVCcSuJIUamwo=
Subject key identifier: B3:6C:B6:D8:C8:74:1E:06:B0:78:DC:C1:D6:0B:8E:3B:9B:21:B6:C5
Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial: 659373E7594EE412341D0AE13EAB4BD761D9F07B
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa
Signing time: Thu 19 Dec 2024 04:01:29 +0000
ROA not before: Thu 19 Dec 2024 03:56:29 +0000
ROA not after: Thu 18 Dec 2025 04:01:29 +0000
asID: 138097
IP address blocks: 2001:df6:ef00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:93:73:e7:59:4e:e4:12:34:1d:0a:e1:3e:ab:4b:d7:61:d9:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
Validity
Not Before: Dec 19 03:56:29 2024 GMT
Not After : Dec 18 04:01:29 2025 GMT
Subject: CN=B36CB6D8C8741E06B078DCC1D60B8E3B9B21B6C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:b9:49:08:be:30:0d:62:aa:97:b1:1b:57:
bd:2c:82:86:b9:33:07:60:fb:c9:90:59:ae:0a:50:
76:06:66:09:ff:4b:95:12:9a:d5:b1:c4:0b:21:35:
58:c1:56:48:e8:89:31:0c:ca:83:56:dc:99:35:cc:
38:eb:61:b1:ee:05:dd:66:a2:f8:1a:4f:c8:c0:d3:
4a:47:55:e5:01:f9:8f:a5:3c:b1:03:f7:71:8a:7f:
75:eb:3a:ac:84:28:ea:30:88:d3:71:d1:5b:3e:32:
c7:33:e1:85:2c:3b:85:c7:ef:5f:40:84:7b:0d:60:
20:bd:ba:16:9f:f1:f7:33:f3:6f:68:95:b3:b8:eb:
0d:70:df:91:c7:c7:7b:ad:bb:d7:d9:60:84:16:3e:
be:3a:2b:13:8c:f1:94:f5:04:8e:7b:05:ad:d2:e2:
45:4d:f3:4a:09:35:14:45:b6:fd:aa:f3:6c:53:cc:
8a:1b:b4:90:bf:dd:c9:8f:af:6b:a6:82:02:e1:f6:
4b:81:5c:cf:01:50:11:e9:c4:e5:e8:93:ea:f4:df:
ff:f6:ea:23:81:17:b8:1e:02:e1:45:a1:f9:c0:c1:
8b:97:fa:3e:95:a5:c9:28:9c:57:fb:a6:cd:b0:7e:
93:a1:a5:44:93:fd:fe:4b:32:98:ef:15:0f:1e:3e:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:B6:D8:C8:74:1E:06:B0:78:DC:C1:D6:0B:8E:3B:9B:21:B6:C5
X509v3 Authority Key Identifier:
keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:ef00::/48
Signature Algorithm: sha256WithRSAEncryption
38:11:13:c1:38:33:ed:21:de:56:e2:d3:c1:a4:0d:c6:11:46:
d0:d6:47:1a:e8:30:da:d9:f8:68:4d:c5:00:af:c8:d6:19:b2:
56:01:b5:f9:2f:ed:6f:47:e9:7d:90:41:3c:a2:c8:90:c1:eb:
61:70:65:47:d9:b0:29:e2:34:5d:eb:1a:5e:f0:3b:8f:91:08:
bd:21:6b:b3:a0:33:a3:73:eb:e1:0d:f0:bd:b8:ec:4c:a8:e5:
2c:be:7c:6e:c5:8c:92:b6:aa:d7:e1:89:57:95:90:f9:1b:3e:
39:1d:27:0d:e5:2f:4f:bd:3f:da:79:f1:b0:54:ef:db:44:c9:
88:eb:99:1e:89:3c:67:ad:a6:2d:3d:6e:01:ec:4e:4f:a1:d7:
01:78:a4:2c:64:7f:e5:3b:c6:c7:dd:0a:3f:cd:8b:68:7d:63:
e0:3a:7b:a4:d6:a4:07:e6:88:17:2c:d3:8e:64:da:f6:82:6c:
0e:5c:55:ae:3b:3d:ad:b4:89:44:42:33:a8:4f:87:b3:e6:10:
69:2c:3e:3c:9a:74:8f:fb:6a:f2:51:22:1e:c0:21:4e:1d:20:
08:22:06:8f:cc:34:d5:79:5d:cb:37:73:9c:db:cd:71:73:3a:
60:23:ec:d8:bd:d1:bc:a6:cd:62:31:b2:63:6c:84:36:7f:b4:
74:2b:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:53 2025 by rpki-client