Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa
File: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (raw, json)
Hash identifier: YVPmHYNM/91Kh3go+8hTY3GFfVG3Jf2pj4Fr/0KSs7Q=
Subject key identifier: B0:C7:18:57:DD:4C:27:D1:EE:A3:46:BF:60:0D:2F:F6:17:67:B4:2A
Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial: 754E61778E7BA2E30E8C017D4F20D683EF77FC
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa
Signing time: Thu 08 Aug 2024 04:00:03 +0000
ROA not before: Thu 08 Aug 2024 03:55:03 +0000
ROA not after: Thu 07 Aug 2025 04:00:03 +0000
asID: 133827
IP address blocks: 2404:a640:956::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4e:61:77:8e:7b:a2:e3:0e:8c:01:7d:4f:20:d6:83:ef:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Validity
Not Before: Aug 8 03:55:03 2024 GMT
Not After : Aug 7 04:00:03 2025 GMT
Subject: CN=B0C71857DD4C27D1EEA346BF600D2FF61767B42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:ec:b2:e6:de:6c:df:41:30:fc:d1:d5:f2:
7a:e8:be:9d:3c:05:3f:7d:f1:a3:5f:3d:54:25:05:
89:49:24:53:81:8e:b3:13:fb:2f:13:d8:29:e8:63:
0b:8c:5b:78:03:85:31:30:c3:52:f4:70:43:db:e4:
c0:60:ba:fc:cf:65:7e:60:40:d6:ff:20:8e:43:ea:
15:6a:bd:ad:56:6f:85:8d:13:d4:76:c3:30:07:c9:
ef:5c:68:cb:d5:15:32:84:94:db:94:53:56:85:95:
44:6f:e5:5c:bb:69:36:80:8e:9e:a4:fe:2c:06:5f:
59:eb:be:0e:53:58:1d:31:9d:31:81:25:46:19:38:
ac:46:f0:cf:b5:92:9a:ca:94:bb:e5:56:a6:af:f7:
01:f3:4d:a8:a0:82:87:bc:e3:56:6c:b9:fe:55:a4:
1f:4d:96:bc:36:93:a3:fb:34:3c:50:15:60:8a:71:
e4:b3:bb:96:02:80:b8:fd:24:b3:ae:ee:01:55:7a:
6f:29:1c:28:8d:ec:e5:76:26:1c:54:88:e5:9e:92:
06:71:9a:b6:ad:d9:02:33:81:a1:f0:70:f5:46:eb:
eb:66:c4:e0:2e:4e:21:b1:b9:c5:32:71:da:09:63:
d6:95:8a:0a:12:68:b3:4d:b9:65:e6:82:aa:51:8a:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:18:57:DD:4C:27:D1:EE:A3:46:BF:60:0D:2F:F6:17:67:B4:2A
X509v3 Authority Key Identifier:
keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:a640:956::/48
Signature Algorithm: sha256WithRSAEncryption
4f:87:58:c9:4a:ce:c9:91:ca:fb:3e:72:d2:09:87:ce:15:92:
fa:3b:75:f0:92:ea:1c:0e:fc:cf:47:72:f7:64:37:bf:fa:c4:
48:92:a3:99:e9:3a:c6:fc:40:dd:40:92:f7:24:62:57:2c:2b:
d3:31:72:c4:66:24:93:fd:2d:c5:ae:51:53:da:b2:bd:41:7e:
e5:4d:48:4c:b2:14:b1:c5:6e:13:4d:9d:1f:65:6a:51:38:7a:
b7:3a:42:00:7a:83:17:6c:90:ad:cf:41:0d:1f:c0:86:7c:eb:
21:b4:b6:d0:c1:ea:3d:c5:96:83:a6:5f:6f:42:3f:a2:41:31:
7c:de:30:29:16:a0:64:62:29:00:d0:7d:63:6d:d9:3e:26:b8:
89:d4:9d:3a:38:34:50:a2:61:11:ca:2b:e8:79:ef:83:26:12:
d7:a3:c2:00:0e:cd:a9:17:d9:b9:9e:b7:db:5b:57:1e:9d:37:
91:3a:10:b1:1f:c4:5a:6d:af:21:4e:24:6b:ba:90:33:04:6a:
85:37:69:17:3d:57:55:c5:be:aa:26:1f:f3:a8:d3:ec:d7:82:
0b:91:74:0a:e0:ce:8c:5f:99:9f:17:3d:17:0b:2f:13:1c:45:
0c:f0:f2:25:54:54:14:f9:11:ec:bd:a4:58:00:88:fe:eb:94:
74:66:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:49 2025 by rpki-client