Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa
File: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (raw, json)
Hash identifier: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=
Subject key identifier: A1:0A:51:A8:86:44:7B:FA:4F:95:BA:DF:08:F2:69:27:32:88:7E:53
Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial: 6E7A776C91441430182DBFFC8F42922D848DD746
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa
Signing time: Tue 28 Jan 2025 05:01:06 +0000
ROA not before: Tue 28 Jan 2025 04:56:06 +0000
ROA not after: Tue 27 Jan 2026 05:01:06 +0000
asID: 141937
IP address blocks: 2001:df2:22c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7a:77:6c:91:44:14:30:18:2d:bf:fc:8f:42:92:2d:84:8d:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Validity
Not Before: Jan 28 04:56:06 2025 GMT
Not After : Jan 27 05:01:06 2026 GMT
Subject: CN=A10A51A886447BFA4F95BADF08F2692732887E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:5e:0d:08:d0:b3:08:87:e0:a9:9b:47:1a:
78:f6:14:8b:50:04:42:a9:b3:c9:a7:c4:e4:7d:52:
0f:b5:e9:97:8d:e5:3e:1a:c1:dc:ec:45:64:2c:c8:
12:5d:02:e2:51:f5:10:d3:a5:36:fb:9c:42:b0:6d:
f3:b6:b3:8d:80:a0:4f:fd:81:c9:e4:b2:c7:29:67:
84:ed:66:42:74:99:fb:bd:fa:fb:82:48:d5:2e:fe:
5a:84:1a:54:4e:b7:4f:52:ee:01:77:6c:d9:47:13:
d3:51:c4:d9:ef:25:c9:bd:cb:0c:b3:47:24:60:07:
99:62:27:31:0e:2b:89:59:88:bb:b6:4b:79:62:0f:
3e:4c:cf:79:74:3f:53:d9:cc:a5:f3:d3:af:5c:15:
88:5b:43:d4:8d:b1:1e:87:7f:d7:55:31:fb:d8:0a:
91:25:38:1b:50:db:47:c7:04:2d:f1:0c:3c:57:28:
3a:05:77:7b:19:e3:27:9c:db:4e:5a:a6:cb:03:e9:
b3:57:4f:f3:55:d5:ba:d5:f6:bd:79:cd:38:41:78:
71:e5:57:15:8f:49:8d:ef:53:2e:1e:a8:62:36:7e:
a2:98:8d:f0:ce:bd:20:57:97:c4:4a:6c:20:34:f2:
8e:f4:6a:53:4d:ad:26:f3:dc:b0:96:5f:a1:32:2d:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:51:A8:86:44:7B:FA:4F:95:BA:DF:08:F2:69:27:32:88:7E:53
X509v3 Authority Key Identifier:
keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:22c0::/48
Signature Algorithm: sha256WithRSAEncryption
11:7f:7b:ee:25:36:62:a0:ce:51:12:a1:93:de:0e:81:05:78:
3b:07:90:6d:87:a7:3d:ba:01:93:65:02:ff:80:bb:43:1b:18:
84:f0:4e:86:71:97:b5:53:f5:5e:71:fe:25:0e:d8:d0:dc:52:
92:cf:80:2d:68:a4:c7:75:13:a3:19:3d:cb:d8:5d:1d:9e:57:
11:18:63:d1:b0:78:cf:c5:41:30:62:ee:b8:ec:6f:a5:14:a4:
84:a8:a0:98:d6:db:c7:41:04:ce:03:5e:5a:bb:fe:51:df:d0:
be:77:08:5a:aa:53:cc:0f:d2:e1:96:dd:fb:88:23:e6:6a:46:
3e:54:ae:fd:ab:82:b2:00:68:ab:ec:c0:75:e1:6c:c3:30:f4:
cc:d6:6d:5c:7f:3f:7a:cb:e2:48:09:d3:90:aa:1b:f5:42:fd:
03:f4:62:43:f4:f9:68:49:c5:12:b2:65:60:d9:01:8c:3b:f7:
e6:94:f1:f6:d2:55:7d:85:68:9d:41:69:fb:b0:03:40:90:e6:
c7:10:83:25:f5:7c:50:47:3c:4d:73:93:60:e4:72:b4:71:f3:
9f:5d:a8:ab:e5:e6:d3:bf:4e:84:56:9e:93:bc:08:01:5e:29:
c9:62:d2:93:bc:6a:2d:5c:11:6a:44:a6:4d:fb:2f:06:f1:90:
a9:aa:8e:e9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbnp3bJFEFDAYLb/8j0KSLYSN10YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2
OTFCODhGMzAeFw0yNTAxMjgwNDU2MDZaFw0yNjAxMjcwNTAxMDZaMDMxMTAvBgNV
BAMTKEExMEE1MUE4ODY0NDdCRkE0Rjk1QkFERjA4RjI2OTI3MzI4ODdFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimV4NCNCzCIfgqZtHGnj2FItQ
BEKps8mnxOR9Ug+16ZeN5T4awdzsRWQsyBJdAuJR9RDTpTb7nEKwbfO2s42AoE/9
gcnksscpZ4TtZkJ0mfu9+vuCSNUu/lqEGlROt09S7gF3bNlHE9NRxNnvJcm9ywyz
RyRgB5liJzEOK4lZiLu2S3liDz5Mz3l0P1PZzKXz069cFYhbQ9SNsR6Hf9dVMfvY
CpElOBtQ20fHBC3xDDxXKDoFd3sZ4yec205apssD6bNXT/NV1brV9r15zThBeHHl
VxWPSY3vUy4eqGI2fqKYjfDOvSBXl8RKbCA08o70alNNrSbz3LCWX6EyLT/TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUoQpRqIZEe/pPlbrfCPJpJzKIflMwHwYDVR0j
BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw
REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC
ODhGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0YWFlM2YwLTljNzAtNDJmYy1h
ZTNlLWJiNTkwMDQ2YjBmZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTMyMzI2MzMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzkzMzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8iLAMA0GCSqGSIb3DQEBCwUAA4IBAQARf3vuJTZioM5REqGT3g6BBXg7B5Bth6c9
ugGTZQL/gLtDGxiE8E6GcZe1U/Vecf4lDtjQ3FKSz4AtaKTHdROjGT3L2F0dnlcR
GGPRsHjPxUEwYu647G+lFKSEqKCY1tvHQQTOA15au/5R39C+dwhaqlPMD9Lhlt37
iCPmakY+VK79q4KyAGir7MB14WzDMPTM1m1cfz96y+JICdOQqhv1Qv0D9GJD9Plo
ScUSsmVg2QGMO/fmlPH20lV9hWidQWn7sANAkObHEIMl9XxQRzxNc5Ng5HK0cfOf
Xair5ebTv06EVp6TvAgBXinJYtKTvGotXBFqRKZN+y8G8ZCpqo7p
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:05 2025 by rpki-client