Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa
File: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier: 5GFGBcpbnHArCLWsccSEsO6sZ2NYJkzkbTy81rdk7io=
Subject key identifier: EA:96:C5:0F:CF:C9:F8:9D:60:EE:0B:AC:6C:DB:9C:86:F1:3B:AE:FA
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 35D3564F7762810F1416AB78074438A1166FB23E
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa
Signing time: Fri 09 Aug 2024 08:46:53 +0000
ROA not before: Fri 09 Aug 2024 08:41:53 +0000
ROA not after: Fri 08 Aug 2025 08:46:53 +0000
asID: 147137
IP address blocks: 2400:46a0:26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d3:56:4f:77:62:81:0f:14:16:ab:78:07:44:38:a1:16:6f:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 9 08:41:53 2024 GMT
Not After : Aug 8 08:46:53 2025 GMT
Subject: CN=EA96C50FCFC9F89D60EE0BAC6CDB9C86F13BAEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:8f:05:9a:a9:44:a2:52:f2:de:34:8e:93:
49:a5:fd:41:92:6f:1f:0c:45:64:0f:86:f4:7b:0b:
09:79:13:34:d4:15:02:dd:e1:c0:21:96:7e:d9:67:
18:86:11:92:f1:70:17:8f:72:33:b5:3a:1b:d6:da:
02:4a:6a:4e:e6:96:57:c1:08:dc:b7:f9:49:12:96:
e8:c0:db:84:85:cb:01:5c:e5:3e:7e:1e:84:4b:ed:
17:a7:8b:a6:d3:34:e6:de:cf:6e:15:41:44:cc:c0:
94:74:1e:3a:1a:83:11:21:65:b6:22:b8:b6:a3:c1:
9a:0a:e8:f9:62:0b:7c:db:2d:77:b9:78:09:0a:be:
df:b7:ce:5e:ed:47:23:eb:4c:a9:1d:3a:f1:0d:2e:
44:27:7c:71:eb:07:f9:81:4c:9f:58:48:7f:6a:6b:
b5:14:c8:d5:ce:fa:90:46:28:45:db:d0:94:4e:6d:
71:ec:b2:fe:eb:9f:bd:eb:fc:37:16:b7:e8:d8:5e:
4e:b6:5f:7f:6e:35:2e:af:c9:07:52:b7:08:33:f5:
83:f4:74:c9:70:d0:16:c2:e1:26:70:4d:a0:b2:61:
ae:64:dc:f1:4d:10:0a:1e:38:bc:d9:e6:48:6f:a0:
43:eb:68:d3:ba:eb:10:39:ca:2b:cc:e7:b4:90:b8:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:C5:0F:CF:C9:F8:9D:60:EE:0B:AC:6C:DB:9C:86:F1:3B:AE:FA
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46a0:26::/48
Signature Algorithm: sha256WithRSAEncryption
12:5b:3f:e5:ca:de:52:fb:bb:a4:27:86:1b:e8:b0:0d:ea:96:
47:27:35:b0:08:9b:45:c6:27:6c:f0:f1:d4:21:47:ae:c5:0a:
ec:e2:38:86:66:5e:f1:65:28:c2:56:45:e5:0d:1b:29:6c:3a:
1f:4d:20:4d:c6:07:89:28:c6:ce:32:fb:56:c7:97:ca:51:a2:
6c:3d:58:f0:22:ad:59:fc:e0:a1:1a:3d:4d:3e:74:a9:fd:04:
cc:50:6f:3f:b1:ac:0b:60:1a:5a:c6:44:14:19:dd:31:75:66:
50:ca:1d:05:e8:81:26:51:3f:af:7d:89:77:4f:a2:c2:3c:99:
7c:59:f2:bd:f2:7b:35:7a:4f:e7:13:12:92:e8:8c:64:f9:11:
39:78:5a:50:df:bc:e5:4c:99:63:bc:ec:b1:d3:35:65:3b:7b:
df:db:d5:be:c7:f0:55:5e:33:ad:7b:2b:0d:16:b9:44:21:e2:
3b:eb:d9:71:14:3f:53:9d:86:45:8f:03:23:f3:5a:94:99:38:
9a:a5:4f:53:5f:b7:5f:7a:d7:9b:4a:0f:2d:18:6a:2b:7f:22:
59:bb:c1:7b:be:e8:61:e0:8d:80:fe:90:1e:cf:f0:76:34:08:
be:87:ff:4e:fa:ec:c1:72:6f:cd:4c:5a:a7:a8:47:13:36:91:
60:a7:82:5d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNdNWT3digQ8UFqt4B0Q4oRZvsj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNDA4MDkwODQxNTNaFw0yNTA4MDgwODQ2NTNaMDMxMTAvBgNV
BAMTKEVBOTZDNTBGQ0ZDOUY4OUQ2MEVFMEJBQzZDREI5Qzg2RjEzQkFFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxI8FmqlEolLy3jSOk0ml/UGS
bx8MRWQPhvR7Cwl5EzTUFQLd4cAhln7ZZxiGEZLxcBePcjO1OhvW2gJKak7mllfB
CNy3+UkSlujA24SFywFc5T5+HoRL7Reni6bTNObez24VQUTMwJR0HjoagxEhZbYi
uLajwZoK6PliC3zbLXe5eAkKvt+3zl7tRyPrTKkdOvENLkQnfHHrB/mBTJ9YSH9q
a7UUyNXO+pBGKEXb0JRObXHssv7rn73r/DcWt+jYXk62X39uNS6vyQdStwgz9YP0
dMlw0BbC4SZwTaCyYa5k3PFNEAoeOLzZ5khvoEPraNO66xA5yivM57SQuNHBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6pbFD8/J+J1g7gusbNuchvE7rvowHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i
Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA
JjANBgkqhkiG9w0BAQsFAAOCAQEAEls/5creUvu7pCeGG+iwDeqWRyc1sAibRcYn
bPDx1CFHrsUK7OI4hmZe8WUowlZF5Q0bKWw6H00gTcYHiSjGzjL7VseXylGibD1Y
8CKtWfzgoRo9TT50qf0EzFBvP7GsC2AaWsZEFBndMXVmUModBeiBJlE/r32Jd0+i
wjyZfFnyvfJ7NXpP5xMSkuiMZPkROXhaUN+85UyZY7zssdM1ZTt739vVvsfwVV4z
rXsrDRa5RCHiO+vZcRQ/U52GRY8DI/NalJk4mqVPU1+3X3rXm0oPLRhqK38iWbvB
e77oYeCNgP6QHs/wdjQIvof/TvrswXJvzUxap6hHEzaRYKeCXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:55 2025 by rpki-client