Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa
File: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (raw, json)
Hash identifier: JeTZeiHc0ObZ6NTa9su8J3fL4BDL7P59zUbcfeYDg+8=
Subject key identifier: AB:C7:3F:BD:D6:C1:32:BF:4D:89:CB:84:2E:B5:EA:BB:45:3E:E9:CD
Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial: 481AA33F54DDBA844E249C0F2E0D2F5882FE21D0
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa
Signing time: Fri 12 Apr 2024 04:00:00 +0000
ROA not before: Fri 12 Apr 2024 03:55:00 +0000
ROA not after: Fri 11 Apr 2025 04:00:00 +0000
asID: 138089
IP address blocks: 2403:e0c0:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1a:a3:3f:54:dd:ba:84:4e:24:9c:0f:2e:0d:2f:58:82:fe:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Validity
Not Before: Apr 12 03:55:00 2024 GMT
Not After : Apr 11 04:00:00 2025 GMT
Subject: CN=ABC73FBDD6C132BF4D89CB842EB5EABB453EE9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:06:57:ba:16:89:be:5e:47:c2:24:1e:c3:
fa:b9:5b:0f:0c:7f:63:7a:ea:81:1c:c5:1b:87:77:
a8:b8:b5:5a:06:fc:dd:19:da:7a:f1:bd:6d:31:9e:
d4:7e:32:79:dc:f4:cf:9d:33:a1:ee:76:ed:89:c2:
78:92:7c:88:aa:74:67:94:94:1a:35:0c:cb:6e:08:
e8:81:3e:05:84:ca:f9:23:83:53:93:63:eb:8b:01:
28:6c:53:9c:7b:ce:a5:9f:6f:f6:c2:b5:83:30:0b:
b2:5c:fd:02:56:b9:c4:77:13:22:28:5e:cd:68:d9:
11:fb:58:02:1a:99:b8:99:3e:fb:ba:47:33:9d:03:
46:53:38:dd:49:42:ac:8f:5b:42:a4:3c:15:40:49:
28:81:e6:4c:07:6a:81:a7:6b:74:54:84:b0:d1:3a:
48:a7:ea:51:80:e7:ef:60:23:cf:b0:2c:45:c9:1f:
f6:be:0b:d9:47:5b:e9:f1:73:bf:cb:9a:b7:0c:18:
cd:a6:c6:db:9a:73:f2:b3:6d:95:d5:84:7e:1b:9f:
3d:56:5a:a5:21:d4:c4:a1:19:0e:fa:00:df:f1:89:
95:51:f3:b1:ab:a7:b3:ca:e6:d4:71:e7:55:b3:95:
f9:b2:21:62:a4:c6:cb:36:1a:28:37:cf:65:a7:ae:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:3F:BD:D6:C1:32:BF:4D:89:CB:84:2E:B5:EA:BB:45:3E:E9:CD
X509v3 Authority Key Identifier:
keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e0c0:13::/48
Signature Algorithm: sha256WithRSAEncryption
97:1a:19:0d:fd:36:0f:65:6f:86:2b:92:f5:38:f7:2d:65:2d:
d3:8b:ef:f4:18:7c:2d:bf:72:90:58:17:ff:0f:ba:d6:9f:c5:
92:d6:2a:f4:c1:18:05:43:a0:65:d9:5a:e9:2c:b4:cb:af:94:
7f:52:15:3d:31:b3:0a:76:d8:78:7d:26:76:b9:36:7d:8d:ca:
eb:b9:a8:d7:2f:a7:7c:38:8e:7c:2d:0c:77:1e:d1:c1:55:40:
59:e2:83:9b:25:fd:17:4e:c3:69:fe:41:ee:68:3b:1d:f3:2d:
e7:0b:7b:c4:76:c8:51:53:60:f4:eb:c0:59:c7:ab:8a:9f:b6:
57:d3:6f:95:b0:45:94:47:f1:7c:a8:2e:01:d8:5d:0d:6e:ba:
1f:6a:31:11:7a:f8:5c:52:fb:89:7c:26:a6:4f:22:0c:40:7a:
22:dd:bd:fd:ae:e4:34:5f:3b:07:be:dd:69:34:5b:92:05:64:
f5:55:a3:93:62:71:07:eb:10:c4:ca:1a:f5:ee:c8:66:77:50:
bc:0d:cf:38:4b:5b:44:09:a5:85:45:56:12:99:1e:c1:03:d0:
e5:7c:98:1c:53:63:a8:bf:ea:f8:e1:d2:f9:09:21:c0:c6:d0:
5f:13:11:b3:d0:ad:e5:24:12:cd:a8:ca:70:21:d2:ba:e0:ae:
79:4f:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:22 2025 by rpki-client