Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: 0eZAMf3EKrCLigCe6EHagbJpZLAkSXQ7/pBfxZiqK1w=
Subject key identifier: D3:79:E3:F3:87:96:BC:D1:13:97:FD:01:1F:DD:E5:AB:13:07:AB:AD
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 47123CF504744FE9E65AEAC6A3A2DE1A50A8321B
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
Signing time: Mon 01 Jul 2024 01:03:21 +0000
ROA not before: Mon 01 Jul 2024 00:58:21 +0000
ROA not after: Mon 30 Jun 2025 01:03:21 +0000
asID: 4800
IP address blocks: 2400:8000:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:12:3c:f5:04:74:4f:e9:e6:5a:ea:c6:a3:a2:de:1a:50:a8:32:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jul 1 00:58:21 2024 GMT
Not After : Jun 30 01:03:21 2025 GMT
Subject: CN=D379E3F38796BCD11397FD011FDDE5AB1307ABAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:89:15:4f:e6:ee:08:7b:54:c9:f6:17:51:
fe:b5:53:cd:e7:a7:d8:59:ac:b6:fb:9a:29:15:40:
1a:11:a7:e8:c9:c7:9f:d0:e4:a9:3a:3e:ad:02:2f:
3c:70:35:65:98:b2:c9:d3:eb:f0:7e:e1:8f:7c:7b:
48:06:1a:85:8d:80:99:82:a1:be:e9:b7:3c:b3:5a:
07:4b:30:f8:85:5e:96:90:8a:64:76:7c:03:15:98:
80:39:de:d7:4e:91:f1:5b:3a:a9:46:58:dc:48:d8:
52:dd:ee:2e:e3:f0:30:f2:d3:e2:93:1d:dc:dc:d7:
7b:b4:d6:8a:d7:0f:a4:61:28:72:30:ba:43:c6:1f:
e5:3c:d5:bc:21:df:02:aa:32:f7:91:cd:da:ff:38:
f9:9e:30:33:10:d0:3d:da:18:cf:80:ed:df:0d:1d:
19:61:77:00:bd:56:93:ab:e0:27:26:0c:d1:0b:5f:
c1:64:8d:1c:b1:66:67:5e:0c:41:ae:f6:ce:85:bb:
6a:ea:26:5e:c3:81:ee:09:cf:a0:9f:1f:de:30:f9:
e2:1a:49:90:cc:bc:1c:11:f7:65:50:e7:ef:df:ec:
5a:4d:dc:55:c5:5b:8f:91:73:9c:e6:74:27:f9:49:
ce:6c:63:f1:75:e9:c5:23:fc:23:38:9b:de:4f:50:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:E3:F3:87:96:BC:D1:13:97:FD:01:1F:DD:E5:AB:13:07:AB:AD
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:1::/48
Signature Algorithm: sha256WithRSAEncryption
1b:5d:34:6c:a1:78:fa:0f:3d:90:34:13:5f:42:0e:31:29:18:
86:88:71:1c:31:53:bc:24:a3:ea:95:36:b2:fa:c4:57:95:4d:
97:08:29:28:dc:c9:3b:32:23:37:c4:cb:1d:a8:52:eb:e2:50:
95:da:f8:5f:78:26:0d:54:87:28:a9:b8:9e:b0:3f:a6:d9:09:
44:0c:b7:58:10:98:26:6e:32:28:69:2b:3c:96:b7:ee:5d:2a:
cd:b6:47:02:c4:9d:d6:9b:10:39:93:c7:a7:39:43:e5:7a:88:
35:07:64:5a:79:3a:4c:cb:9f:dc:38:af:d4:16:b4:f0:de:d4:
7b:f3:52:48:73:92:ab:2e:d4:f7:52:a7:5d:f3:19:d6:84:ed:
01:eb:70:1f:3c:cb:09:ea:a3:8b:f0:06:6d:7f:42:2f:21:b9:
57:4d:01:d8:51:ef:04:c5:28:85:24:65:50:82:91:15:48:e5:
f5:69:d9:1d:30:14:0a:97:e2:06:05:af:bf:0c:93:83:cd:c5:
75:a9:bb:57:32:f3:ec:06:eb:27:28:24:27:14:da:4b:e2:59:
7a:06:7b:72:8e:1d:01:d2:94:d2:fb:a4:bd:85:2e:d0:76:2e:
ce:1c:65:d3:d9:7a:11:3c:c3:50:2e:86:65:48:80:6e:34:db:
19:39:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:14 2025 by rpki-client