Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa
File: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (raw, json)
Hash identifier: WEOUyrjdm5MHLBlul4TfoQsPYZiEC6VkTMRCL8M+beg=
Subject key identifier: E4:7C:2E:DF:54:18:96:13:1D:49:FF:22:03:37:23:FD:CB:AC:F1:16
Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial: 4136DD5020F0A1367D22B2A02FE0A5334A3D6686
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa
Signing time: Mon 01 Jul 2024 01:05:53 +0000
ROA not before: Mon 01 Jul 2024 01:00:53 +0000
ROA not after: Mon 30 Jun 2025 01:05:53 +0000
asID: 9785
IP address blocks: 2403:7200::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:36:dd:50:20:f0:a1:36:7d:22:b2:a0:2f:e0:a5:33:4a:3d:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Validity
Not Before: Jul 1 01:00:53 2024 GMT
Not After : Jun 30 01:05:53 2025 GMT
Subject: CN=E47C2EDF541896131D49FF22033723FDCBACF116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:12:6b:a9:47:11:43:7f:7a:3b:be:2f:10:
08:cd:c4:69:06:1b:df:b3:1c:d9:a4:8a:cf:fa:08:
aa:d4:c5:a8:8d:78:0f:82:b6:8d:a8:6e:dd:cf:75:
0a:bd:ae:48:fd:fe:5e:28:37:dd:b8:8b:00:92:c6:
88:01:82:f4:d1:4c:40:e7:01:4d:45:f7:9d:7a:34:
95:46:3a:31:6a:be:2c:79:cd:0f:e3:1a:b5:66:b9:
95:22:7d:78:34:07:41:65:66:47:41:c4:5b:e8:df:
b7:c3:98:4d:b5:93:fd:5d:ce:07:58:9d:13:48:63:
f1:07:02:c3:3e:8b:d9:6a:8f:07:e8:42:39:ea:88:
47:6f:32:08:2d:0f:4f:78:56:8b:55:ba:4f:a9:9a:
65:67:80:91:e2:c4:4e:bf:8e:33:16:da:1c:ea:30:
fd:03:2b:22:3c:2d:eb:c0:26:36:fb:75:57:10:e6:
c6:41:ca:47:fc:21:6d:35:1f:d9:a8:80:79:f9:ca:
97:33:ee:e5:94:80:4d:aa:73:55:c6:ef:61:72:07:
43:fc:c1:7a:db:6d:2f:dd:3a:bb:f1:09:90:0a:cf:
83:0e:27:46:db:18:6e:a7:6f:2a:ba:74:53:b2:fb:
20:98:2f:91:7c:8b:96:38:3b:d6:5e:83:d7:26:17:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:2E:DF:54:18:96:13:1D:49:FF:22:03:37:23:FD:CB:AC:F1:16
X509v3 Authority Key Identifier:
keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:7200::/32
Signature Algorithm: sha256WithRSAEncryption
73:e7:39:57:da:18:ec:23:df:e2:15:89:ba:0f:96:b5:f9:57:
39:f8:6f:d7:b2:66:fc:cb:58:9b:ec:f9:ca:cc:fc:2b:47:ce:
37:aa:2a:42:1e:70:9d:63:c2:5c:23:42:3f:1d:c4:51:b1:50:
67:96:fa:45:dd:e5:07:dc:99:33:b5:55:80:6f:1b:59:9d:be:
3e:32:cc:70:f0:fa:1a:7d:1f:a5:f2:4e:d2:88:0b:d5:df:e1:
fa:8c:2f:d2:7c:9d:d6:7d:37:92:68:55:92:2b:5b:25:4d:7f:
9e:1b:97:e3:1a:04:56:f5:38:b6:48:66:b8:f0:53:d1:94:7a:
84:4e:6b:61:0e:c7:77:bc:05:8f:74:46:ec:0d:84:8c:4b:e9:
80:2d:24:4a:64:db:40:22:50:26:2e:e9:43:1b:f2:97:2b:dd:
55:87:70:9e:e1:21:fd:d8:85:8d:a4:b2:7f:66:77:03:d7:60:
1f:6b:16:78:6c:d4:27:d4:da:0a:a8:c5:36:ca:97:5a:15:14:
e4:a0:35:43:15:58:8b:02:38:aa:0f:e6:02:71:1a:4a:4c:8a:
1e:af:c5:3a:6f:37:23:f7:c0:68:26:e3:da:f9:f8:ca:34:0d:
40:e8:5a:ec:16:ae:79:bc:fa:c8:a3:51:43:09:4a:4b:43:9d:
40:f1:7a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:29 2025 by rpki-client