Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa
File: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier: UmJXjjnGUW98bKuzrgmGypxlZo4J64Wat531ZfjB3Ms=
Subject key identifier: 17:96:F1:05:94:98:B3:05:C9:85:08:46:A9:BC:C6:0B:FF:71:51:0E
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 2425329E266C9BF90054FCACCD96347A99AFF112
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa
Signing time: Thu 08 Aug 2024 19:08:06 +0000
ROA not before: Thu 08 Aug 2024 19:03:06 +0000
ROA not after: Thu 07 Aug 2025 19:08:06 +0000
asID: 147137
IP address blocks: 2400:46a0:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:25:32:9e:26:6c:9b:f9:00:54:fc:ac:cd:96:34:7a:99:af:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 8 19:03:06 2024 GMT
Not After : Aug 7 19:08:06 2025 GMT
Subject: CN=1796F1059498B305C9850846A9BCC60BFF71510E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:f8:04:65:2d:e5:53:e1:10:8a:42:49:26:
7d:f8:98:bc:5b:73:08:30:a0:89:aa:ab:62:6b:4a:
bc:ff:a9:ae:2f:b8:9d:80:a4:ba:f9:2f:84:ab:ab:
0b:16:fd:d7:c4:7b:bc:14:54:5e:6d:cf:79:bb:46:
f0:e5:ec:47:c3:c0:c3:68:cc:66:6e:a2:73:b5:f0:
1e:e3:e0:a5:55:08:60:6b:2e:9a:01:33:e7:57:0f:
f4:cf:5e:11:40:b2:11:a6:0c:96:a0:99:ad:e8:6a:
23:3e:66:07:b9:c2:24:53:d5:d0:f1:3a:52:41:bf:
3d:44:72:a6:78:3c:0a:35:b3:75:11:8b:e6:1f:5c:
76:f6:30:88:02:ef:6e:57:ea:93:a2:d4:dc:2e:b2:
48:91:c5:20:eb:75:e5:f5:c2:8d:eb:22:58:47:1d:
12:32:03:46:b1:b5:96:ad:74:87:48:17:14:14:62:
db:55:80:20:f2:7e:55:2b:0f:26:4f:42:8c:e1:33:
1e:59:8f:b6:9a:2f:5d:88:6c:af:ec:ec:4b:87:ef:
68:ef:2d:1e:12:49:b3:23:e4:a7:ca:86:02:35:7c:
1f:ad:0e:c2:f2:c9:93:c3:08:8a:42:ef:50:35:49:
59:82:f7:3b:14:58:4b:51:b0:d8:30:36:9c:7b:37:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:F1:05:94:98:B3:05:C9:85:08:46:A9:BC:C6:0B:FF:71:51:0E
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46a0:20::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d2:27:cb:89:ce:26:46:4d:c2:a7:1c:3d:61:8d:53:89:8d:
58:ba:f5:5a:f6:9c:0c:48:35:12:13:95:f9:2a:d7:a5:73:57:
50:5d:7a:70:4f:40:72:dc:a9:76:c6:f5:00:99:c7:5c:71:2b:
6b:15:4a:44:62:c1:ca:49:dc:a3:ee:f4:c2:57:1e:44:c3:87:
c9:49:5d:49:11:04:33:f2:36:dc:33:5e:0b:16:18:eb:c0:5b:
7a:d6:7f:c5:9f:ff:28:d6:b7:cb:c4:5d:51:45:47:bc:80:b5:
27:b9:f0:26:8f:26:44:af:4b:52:73:5e:ba:78:3c:42:27:6d:
6e:f6:13:bc:df:87:ba:b3:e2:d6:d1:3d:60:1a:8d:d4:30:6a:
b6:45:0b:3c:97:b7:2f:21:78:27:1c:a2:57:37:d7:14:26:eb:
16:d6:9c:62:e0:a3:fb:6b:45:cc:01:41:7d:0a:fe:f8:48:aa:
15:02:05:e0:f3:60:1f:de:19:f3:ac:6d:eb:92:0e:a3:8f:38:
d6:3e:67:08:e9:c8:2b:e2:21:e9:29:47:3e:76:e0:c5:50:b1:
a0:d7:4e:11:06:3b:bb:a0:fe:5c:74:84:0f:9e:9e:b7:d4:81:
58:e7:e1:55:20:71:c5:1c:96:21:25:de:79:ce:70:05:94:17:
8a:9e:bd:9f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJCUyniZsm/kAVPyszZY0epmv8RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNDA4MDgxOTAzMDZaFw0yNTA4MDcxOTA4MDZaMDMxMTAvBgNV
BAMTKDE3OTZGMTA1OTQ5OEIzMDVDOTg1MDg0NkE5QkNDNjBCRkY3MTUxMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblPgEZS3lU+EQikJJJn34mLxb
cwgwoImqq2JrSrz/qa4vuJ2ApLr5L4SrqwsW/dfEe7wUVF5tz3m7RvDl7EfDwMNo
zGZuonO18B7j4KVVCGBrLpoBM+dXD/TPXhFAshGmDJagma3oaiM+Zge5wiRT1dDx
OlJBvz1EcqZ4PAo1s3URi+YfXHb2MIgC725X6pOi1NwuskiRxSDrdeX1wo3rIlhH
HRIyA0axtZatdIdIFxQUYttVgCDyflUrDyZPQozhMx5Zj7aaL12IbK/s7EuH72jv
LR4SSbMj5KfKhgI1fB+tDsLyyZPDCIpC71A1SVmC9zsUWEtRsNgwNpx7N223AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUF5bxBZSYswXJhQhGqbzGC/9xUQ4wHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i
Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA
IDANBgkqhkiG9w0BAQsFAAOCAQEAnNIny4nOJkZNwqccPWGNU4mNWLr1WvacDEg1
EhOV+SrXpXNXUF16cE9Actypdsb1AJnHXHEraxVKRGLByknco+70wlceRMOHyUld
SREEM/I23DNeCxYY68BbetZ/xZ//KNa3y8RdUUVHvIC1J7nwJo8mRK9LUnNeung8
QidtbvYTvN+HurPi1tE9YBqN1DBqtkULPJe3LyF4JxyiVzfXFCbrFtacYuCj+2tF
zAFBfQr++EiqFQIF4PNgH94Z86xt65IOo4841j5nCOnIK+Ih6SlHPnbgxVCxoNdO
EQY7u6D+XHSED56et9SBWOfhVSBxxRyWISXeec5wBZQXip69nw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:22 2025 by rpki-client