Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa
File: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier: lU4krARzF94xW6yIUtLYTvIXCuXd5JN3d9Mt84DDor8=
Subject key identifier: 2B:39:A2:72:B1:D2:30:B3:8F:0A:34:B5:DF:78:15:9B:31:A0:74:9D
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 2CDF4B98AB379AB4E7D39397A322382381246467
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa
Signing time: Thu 08 Aug 2024 19:07:18 +0000
ROA not before: Thu 08 Aug 2024 19:02:18 +0000
ROA not after: Thu 07 Aug 2025 19:07:18 +0000
asID: 147137
IP address blocks: 2400:46a0:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:df:4b:98:ab:37:9a:b4:e7:d3:93:97:a3:22:38:23:81:24:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 8 19:02:18 2024 GMT
Not After : Aug 7 19:07:18 2025 GMT
Subject: CN=2B39A272B1D230B38F0A34B5DF78159B31A0749D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:82:e0:9b:fb:30:01:39:b0:c1:b8:23:22:
8e:09:7e:e9:2e:0d:52:f5:31:ca:c0:a4:16:17:69:
70:08:03:6e:00:39:65:e7:67:15:09:55:b0:8c:6d:
3f:24:1d:c1:c0:1c:9c:b0:1c:6a:9a:20:d4:7f:75:
f2:f4:61:2f:3a:58:ae:40:82:bf:d1:d3:01:35:30:
1e:a7:58:3e:76:1b:ee:6d:f5:77:de:fc:21:bc:e7:
23:67:60:a7:7e:6f:fe:ed:12:8d:1f:c6:25:01:a4:
2b:27:0d:4d:2f:0b:c3:c9:12:2d:6f:32:83:a1:6a:
df:6b:a2:79:5e:e8:fe:98:6f:96:9a:42:07:7e:e4:
a7:58:12:03:50:9d:42:f3:8d:28:b3:e9:18:6b:c2:
dd:7f:4b:51:21:7f:28:b5:60:6c:eb:9d:47:b3:28:
14:f2:c9:dd:ac:c9:28:7a:1e:37:b8:1e:47:d0:51:
71:bf:42:b4:28:6c:06:c9:1e:c2:5e:29:10:2f:94:
49:f5:51:a3:6d:78:3c:e5:ca:b8:d6:fd:bc:ad:31:
94:45:34:05:5a:ec:c6:21:ff:49:23:d7:7a:2c:72:
60:a3:76:81:a9:65:e6:3f:67:ff:78:db:a8:d8:cd:
45:16:ab:c4:f6:c3:f5:3b:04:43:09:71:26:ea:f5:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:A2:72:B1:D2:30:B3:8F:0A:34:B5:DF:78:15:9B:31:A0:74:9D
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46a0:18::/48
Signature Algorithm: sha256WithRSAEncryption
27:df:fd:4d:87:1c:cb:a8:31:2e:9a:a7:7b:13:a8:3b:9f:df:
13:60:87:07:97:08:d6:7f:f0:ba:da:c1:fe:e5:c1:a4:0a:59:
99:de:52:a3:ec:ab:45:79:8a:f5:6f:db:7c:14:5a:35:86:5c:
62:c4:d9:dc:92:44:c5:db:89:ec:56:1f:fb:79:2d:73:d6:cf:
c6:d6:ec:f8:65:41:57:d2:e0:ba:c6:a1:65:a2:07:72:1c:f4:
d1:ae:af:c9:ad:9d:11:36:b8:ef:66:c3:f5:07:a6:70:ba:41:
4c:8a:83:b1:50:28:17:8a:25:5e:75:66:19:19:ec:03:5f:4c:
ea:9f:6c:ce:f9:82:a9:bb:5f:2d:4e:d2:25:46:c1:2a:b9:a1:
2f:3e:2f:9a:46:ac:1f:94:a8:3e:e7:a5:f0:d0:5d:11:71:b8:
6c:0b:eb:ef:a4:3f:58:dd:3f:13:da:1a:a0:69:7e:25:c0:42:
77:2f:c0:87:37:fd:4c:fa:53:1f:75:1f:e7:ca:de:ca:ae:81:
9d:14:07:7d:0a:a7:76:60:bd:a8:ac:f0:2b:84:ea:64:e1:ff:
d9:1d:0c:73:95:a7:89:3b:85:58:d6:32:0a:38:e3:b8:2d:c4:
68:71:27:de:d2:43:d2:1a:ff:45:de:d4:89:11:c2:5e:78:fd:
17:6a:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:35 2025 by rpki-client