Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
File: 323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (raw, json)
Hash identifier: Rd705O9W8SWKuJ5NF6AkaZQphAXZfZhGKbEWE+jjbEk=
Subject key identifier: DC:5D:9D:29:3D:DD:8C:7D:A8:70:E8:BE:91:56:97:A4:5E:A6:D4:0F
Certificate issuer: /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial: 07C131FEBBC77DD55303B40E9FA75D3DB2AE3BBE
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
Signing time: Sun 04 Aug 2024 09:00:00 +0000
ROA not before: Sun 04 Aug 2024 08:55:00 +0000
ROA not after: Sun 03 Aug 2025 09:00:00 +0000
asID: 135474
IP address blocks: 2406:f180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c1:31:fe:bb:c7:7d:d5:53:03:b4:0e:9f:a7:5d:3d:b2:ae:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Validity
Not Before: Aug 4 08:55:00 2024 GMT
Not After : Aug 3 09:00:00 2025 GMT
Subject: CN=DC5D9D293DDD8C7DA870E8BE915697A45EA6D40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:56:1e:d2:de:31:e1:0e:90:4e:ae:7e:3e:
8c:53:a6:5b:7a:28:37:cc:90:38:d3:87:25:0a:86:
9d:7f:b4:7f:fc:c6:30:d1:39:2c:d8:11:1a:91:7f:
42:aa:bd:15:96:35:13:80:b9:c9:ca:9a:cf:f3:5c:
dc:25:0c:3c:26:b5:30:69:73:1d:e1:bb:0b:47:6f:
e8:e4:d9:28:26:06:71:e9:a4:32:34:6e:eb:8e:5d:
89:d6:98:c9:70:c7:88:97:a0:18:90:91:61:51:39:
93:6a:92:dc:d8:8b:f5:c2:ae:ac:4f:1e:3c:cc:7f:
72:b7:c6:94:8d:81:29:f3:2e:8b:88:67:42:80:1b:
c9:04:29:ba:eb:58:9f:8b:4a:86:57:30:37:cd:4e:
6c:9a:c3:85:23:de:8b:92:2e:a4:c2:1c:20:ab:db:
83:e3:e3:f3:8a:2c:5e:d9:ea:4b:26:1d:c7:60:3e:
3d:53:c3:de:16:59:77:77:f9:35:ff:0a:95:22:3c:
35:83:72:fe:5f:a9:a0:e3:c9:fd:29:3c:18:cc:0e:
56:04:68:28:d6:ee:4d:59:ef:59:a6:39:d2:84:fe:
0b:1f:df:76:41:2b:11:d2:7c:e5:e2:81:9f:29:7a:
b6:11:5a:87:94:8d:ec:cd:e8:68:62:7d:74:59:77:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:9D:29:3D:DD:8C:7D:A8:70:E8:BE:91:56:97:A4:5E:A6:D4:0F
X509v3 Authority Key Identifier:
keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:f180::/32
Signature Algorithm: sha256WithRSAEncryption
5d:bf:fe:d1:dd:68:a2:65:0c:25:f6:ea:f4:bc:69:f3:3c:21:
30:8d:a5:d6:26:15:82:d3:db:9d:5f:98:c1:fb:fe:ae:01:92:
b9:b2:4b:5a:a1:d8:72:e4:ad:de:e4:04:b3:62:e1:4f:24:b0:
c5:1b:d0:91:f3:66:1f:fd:6b:37:84:10:89:fb:65:0e:8c:71:
37:24:e6:23:e6:29:56:80:47:a5:de:7d:a2:87:3c:58:67:11:
a4:e3:ac:fe:b7:45:1c:3a:7b:12:75:e2:22:e7:b3:9e:c7:20:
34:f1:a3:31:6f:f6:02:f4:9d:c0:d3:3b:a9:d3:63:95:b7:4c:
ba:bf:33:b8:ae:6e:ba:17:80:da:85:8b:82:d2:6c:2d:d0:4f:
19:48:a7:03:5d:10:de:e6:59:b5:ec:89:83:6e:f5:b2:a5:e4:
9f:df:84:c1:cd:65:81:04:23:65:47:b1:83:c6:47:6d:27:45:
d6:59:29:c4:eb:6a:e2:30:00:5f:cc:39:69:dd:80:be:22:cb:
1f:79:74:c6:32:34:c4:8d:fc:60:62:a3:c6:36:c7:0f:e2:da:
bb:23:e1:39:fb:ec:06:a0:54:46:64:a0:05:1f:cf:24:ea:76:
91:ee:bf:6f:85:e6:bc:b1:3c:b0:e7:14:3d:16:15:b3:d1:cc:
db:63:ad:7a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUB8Ex/rvHfdVTA7QOn6ddPbKuO74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxRjgwRjVCNkM0MTIxMENBMDM3MEFFRUZDOTc5NEVG
MEYwNjQ0QTAeFw0yNDA4MDQwODU1MDBaFw0yNTA4MDMwOTAwMDBaMDMxMTAvBgNV
BAMTKERDNUQ5RDI5M0RERDhDN0RBODcwRThCRTkxNTY5N0E0NUVBNkQ0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAFYe0t4x4Q6QTq5+PoxTplt6
KDfMkDjThyUKhp1/tH/8xjDROSzYERqRf0KqvRWWNROAucnKms/zXNwlDDwmtTBp
cx3huwtHb+jk2SgmBnHppDI0buuOXYnWmMlwx4iXoBiQkWFROZNqktzYi/XCrqxP
HjzMf3K3xpSNgSnzLouIZ0KAG8kEKbrrWJ+LSoZXMDfNTmyaw4Uj3ouSLqTCHCCr
24Pj4/OKLF7Z6ksmHcdgPj1Tw94WWXd3+TX/CpUiPDWDcv5fqaDjyf0pPBjMDlYE
aCjW7k1Z71mmOdKE/gsf33ZBKxHSfOXigZ8perYRWoeUjezN6GhifXRZd3qJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU3F2dKT3djH2ocOi+kVaXpF6m1A8wHwYDVR0j
BBgwFoAU4B+A9bbEEhDKA3Cu78l5TvDwZEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
M2M4ZjRkNy1lNGIzLTRiNDEtYTY4NS01MTQ5NDBmZWM4MTkvMC9FMDFGODBGNUI2
QzQxMjEwQ0EwMzcwQUVFRkM5Nzk0RUYwRjA2NDRBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAxRjgwRjVCNkM0MTIxMENBMDM3MEFFRUZDOTc5NEVGMEYw
NjQ0QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzYzhmNGQ3LWU0YjMtNGI0MS1h
Njg1LTUxNDk0MGZlYzgxOS8wLzMyMzQzMDM2M2E2NjMxMzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNTM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQG8YAwDQYJKoZI
hvcNAQELBQADggEBAF2//tHdaKJlDCX26vS8afM8ITCNpdYmFYLT251fmMH7/q4B
krmyS1qh2HLkrd7kBLNi4U8ksMUb0JHzZh/9azeEEIn7ZQ6McTck5iPmKVaAR6Xe
faKHPFhnEaTjrP63RRw6exJ14iLns57HIDTxozFv9gL0ncDTO6nTY5W3TLq/M7iu
broXgNqFi4LSbC3QTxlIpwNdEN7mWbXsiYNu9bKl5J/fhMHNZYEEI2VHsYPGR20n
RdZZKcTrauIwAF/MOWndgL4iyx95dMYyNMSN/GBio8Y2xw/i2rsj4Tn77AagVEZk
oAUfzyTqdpHuv2+F5ryxPLDnFD0WFbPRzNtjrXo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:06 2025 by rpki-client