Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa
File: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (raw, json)
Hash identifier: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=
Subject key identifier: 3C:43:69:67:4E:78:E8:D8:F6:DC:6A:15:AA:03:31:DF:A3:EB:D4:9E
Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Certificate serial: 1FC1BC52452FE96CA38B8DA487AB522B9DD8E8DC
Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa
Signing time: Sun 24 Nov 2024 05:02:33 +0000
ROA not before: Sun 24 Nov 2024 04:57:33 +0000
ROA not after: Sun 23 Nov 2025 05:02:33 +0000
asID: 24202
IP address blocks: 2406:2140::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c1:bc:52:45:2f:e9:6c:a3:8b:8d:a4:87:ab:52:2b:9d:d8:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Validity
Not Before: Nov 24 04:57:33 2024 GMT
Not After : Nov 23 05:02:33 2025 GMT
Subject: CN=3C4369674E78E8D8F6DC6A15AA0331DFA3EBD49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:5a:0b:d8:a6:eb:d6:11:50:93:9a:85:b6:
e7:ac:e9:d9:59:76:72:dc:ba:0e:40:bf:2b:db:79:
e7:7d:9c:82:e6:b3:92:a6:4c:a8:bf:c9:3f:f8:c7:
b2:78:9c:a6:3e:cf:42:86:b9:c1:ce:ca:b5:2f:9e:
4b:c3:af:4a:29:10:d0:43:4e:73:32:f7:6a:04:40:
f8:2e:69:fe:89:fc:21:23:14:36:28:dc:38:37:97:
a3:76:23:4d:42:8f:0c:36:db:f9:0b:f6:f5:76:97:
8f:a6:ce:c5:e4:35:6e:5c:38:6f:30:c1:46:86:d1:
8c:99:87:13:f9:71:71:2a:95:ed:10:19:d4:89:6b:
24:4b:f8:17:92:da:c1:75:fe:72:e2:65:0b:eb:1d:
a4:ba:09:5b:94:db:90:e4:42:34:e3:2e:75:1d:67:
b4:2c:b6:d1:ee:15:97:60:dc:8c:ce:41:72:7a:a0:
77:2b:53:c4:43:c3:5d:a5:09:cd:65:59:07:26:6d:
22:04:fe:84:d2:86:36:c6:e3:bb:b9:ed:87:00:b3:
a7:95:7c:b4:f0:85:e8:f9:69:20:b7:8a:81:49:fc:
14:21:c3:d4:a2:81:bd:27:f1:b6:3e:37:72:61:a2:
db:aa:fd:99:64:73:b2:cf:7f:6e:8b:e5:79:57:3f:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:69:67:4E:78:E8:D8:F6:DC:6A:15:AA:03:31:DF:A3:EB:D4:9E
X509v3 Authority Key Identifier:
keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:2140::/32
Signature Algorithm: sha256WithRSAEncryption
10:d9:2a:31:e8:1d:69:17:59:3a:ab:e0:5d:d6:3a:b3:15:e5:
cb:48:da:68:47:d3:58:49:04:92:13:e5:c0:d7:9d:c0:9c:12:
f9:91:5e:91:29:63:23:33:ae:a0:ef:3a:de:1d:b1:f1:c8:71:
c4:9b:04:20:6d:2a:2d:c3:f7:6d:d7:77:f0:b7:a9:a2:cb:66:
1e:ca:26:48:21:4c:8c:6f:4d:0d:0b:68:33:c3:e4:ab:22:e4:
d7:83:58:71:ee:db:23:8e:5b:56:03:3a:c4:2f:11:85:de:cd:
06:21:72:42:60:a9:0d:57:43:5c:06:63:9b:fa:13:da:45:6c:
35:09:cf:d3:37:53:22:75:f2:3b:a5:6d:5a:1d:42:67:4b:f0:
05:28:62:67:68:46:6a:17:5c:40:d5:5c:78:a4:cc:e2:52:2b:
71:31:c8:ba:f7:b1:ce:39:aa:53:e0:8c:4f:1a:17:68:b7:22:
97:9b:c6:2a:c7:1f:12:c4:e5:39:f6:39:72:db:a7:59:a5:d4:
61:d6:c4:fc:86:fa:0a:27:62:b0:25:75:85:71:50:a7:46:0d:
c6:92:3e:33:56:19:fc:63:62:29:36:1e:85:33:e7:ab:fe:a4:
2d:9b:72:83:f1:6d:4e:21:45:25:77:e6:13:fc:97:de:cb:5b:
76:b8:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:40 2025 by rpki-client