Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa
File: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (raw, json)
Hash identifier: zoOph4ORgnecC4G3qubgAInEaNPWdnN5nyNNpj+Aosc=
Subject key identifier: A4:87:B8:DE:E1:7F:A0:ED:C2:62:58:71:91:EF:39:F3:B8:A0:B9:3A
Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial: 3273CFEEDEE0DFC418F7A29F0B6E10E02295C2CD
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa
Signing time: Fri 16 Aug 2024 01:00:02 +0000
ROA not before: Fri 16 Aug 2024 00:55:02 +0000
ROA not after: Fri 15 Aug 2025 01:00:02 +0000
asID: 46025
IP address blocks: 2402:9800:4004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:73:cf:ee:de:e0:df:c4:18:f7:a2:9f:0b:6e:10:e0:22:95:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Validity
Not Before: Aug 16 00:55:02 2024 GMT
Not After : Aug 15 01:00:02 2025 GMT
Subject: CN=A487B8DEE17FA0EDC262587191EF39F3B8A0B93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:97:24:85:44:b5:05:c2:63:32:2c:69:af:
0f:43:c8:48:ac:2a:af:97:b3:af:f7:f8:b7:f8:f1:
1a:56:47:87:f3:96:37:8f:b7:4c:51:a7:51:ff:80:
af:10:0d:f9:54:cb:a5:bc:e3:f7:1c:f2:56:d7:a0:
4a:ba:1c:98:c2:5f:1d:32:76:0c:fa:2a:5d:f3:a0:
29:bf:77:7d:07:a8:9e:2c:80:08:ff:3b:8d:4b:4f:
cb:b5:07:fa:d0:fd:4a:8b:9f:9c:cb:7c:cb:4e:4e:
d6:04:46:58:1e:dc:f2:01:f1:81:b5:c4:ff:e4:28:
a7:3c:5d:6b:3b:d2:9b:19:ab:c7:5b:15:98:a9:d9:
18:70:e2:d7:28:f1:37:68:02:22:b7:9f:3e:2c:dd:
5a:d2:d4:d9:a9:98:76:cf:61:fa:7d:5d:68:87:c6:
29:94:ce:51:72:3f:37:55:8f:2f:e4:69:4e:f8:b0:
43:7d:3b:68:eb:35:e8:07:12:d3:dc:f6:12:2d:1e:
ff:2a:a4:65:08:b1:82:db:c1:35:4f:8f:ba:d3:00:
71:18:e6:7e:4b:9a:ea:78:ba:e3:4c:9b:75:7d:20:
10:2b:8d:19:5b:15:d6:42:8a:e6:95:e2:3c:20:90:
25:29:42:8c:5f:e1:a2:44:6a:44:6e:66:ad:d3:d8:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:B8:DE:E1:7F:A0:ED:C2:62:58:71:91:EF:39:F3:B8:A0:B9:3A
X509v3 Authority Key Identifier:
keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9800:4004::/48
Signature Algorithm: sha256WithRSAEncryption
41:23:28:e7:3a:cf:b7:c7:7f:e5:59:d3:d2:6a:f3:a5:b5:e4:
ee:a5:d0:3d:d6:c8:84:97:2b:b8:21:ed:4f:82:11:ec:c9:f5:
05:0a:5d:f3:bf:d8:ae:e4:36:8e:43:86:b8:3a:6a:b8:aa:75:
f9:17:22:2e:b6:1b:51:96:c2:e7:fc:55:62:10:19:76:66:fb:
31:16:0c:eb:9d:bc:cf:c1:94:89:cf:08:7e:e3:73:e2:0f:4c:
fc:59:f9:12:11:8e:0d:ba:93:12:e3:f2:6a:ad:b3:36:8c:e8:
c0:09:d1:80:98:5d:b9:8d:74:3a:da:de:05:51:9b:b1:f9:86:
25:87:d3:a5:f0:66:7e:2f:e3:97:53:04:7a:82:e3:11:a5:e6:
69:f5:4f:3a:2b:06:22:05:ca:b4:1d:93:67:3c:27:63:17:28:
98:f1:19:50:95:67:9e:6a:67:26:0e:4b:71:0e:18:a8:f4:41:
58:a3:18:0b:68:ee:02:dd:57:4c:1b:96:a0:a0:22:a9:b3:b6:
ae:03:75:0e:0b:c0:f8:f7:28:96:25:b1:55:47:c8:31:52:81:
44:ce:8a:fc:c9:99:3d:f4:2c:71:7e:bd:6f:60:e8:d8:92:e5:
13:3b:b3:d5:9f:ed:66:60:7e:86:de:92:64:b0:86:35:42:c0:
1b:3f:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:04 2025 by rpki-client