Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
File: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (raw, json)
Hash identifier: BAj6wGXRStOevsKAAs4sF+Q+V6U6g9tECkAMCeQYV7c=
Subject key identifier: D6:AB:31:98:84:FB:99:03:A0:5E:F7:FC:7E:34:66:B7:0D:13:27:FD
Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial: 3748C5E3496DDA6E84984E704F23111F00D27657
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
Signing time: Thu 30 May 2024 16:00:01 +0000
ROA not before: Thu 30 May 2024 15:55:01 +0000
ROA not after: Thu 29 May 2025 16:00:01 +0000
asID: 134655
IP address blocks: 2404:5980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:48:c5:e3:49:6d:da:6e:84:98:4e:70:4f:23:11:1f:00:d2:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Validity
Not Before: May 30 15:55:01 2024 GMT
Not After : May 29 16:00:01 2025 GMT
Subject: CN=D6AB319884FB9903A05EF7FC7E3466B70D1327FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:60:ed:46:a8:c7:15:ed:a9:f7:fe:e4:34:
e0:ba:53:c7:2c:dd:dc:62:af:5b:f5:1c:7a:f6:06:
ef:6d:dd:aa:27:6f:e6:2b:ac:ec:68:24:1c:3b:0d:
7d:11:2a:2d:95:7f:bc:3e:56:a9:48:e2:2c:aa:b6:
58:1b:db:8f:76:03:b1:b3:0a:da:20:8a:5d:dc:3c:
bf:62:7c:8f:26:54:d3:4a:62:8a:1e:f8:b2:fc:b2:
4c:77:7f:89:74:3e:1a:73:99:19:15:8e:85:af:c6:
95:d9:fd:ea:4d:ab:fd:f0:08:d5:02:f8:e0:db:f7:
c5:2a:41:5d:2e:1d:c1:9d:aa:bb:87:4c:dd:7b:22:
26:2a:d3:96:9f:48:29:5a:25:50:c6:bf:6a:13:1b:
2c:43:9b:ba:8f:c4:39:c3:c3:df:bf:a3:d5:e2:23:
4d:6a:33:de:ec:fa:d7:f4:b9:e8:97:5c:12:ad:58:
be:12:e4:11:5e:e7:fa:14:fe:3c:10:61:d2:1e:aa:
9d:4a:b6:6c:76:b2:de:57:42:0d:50:6d:9a:78:33:
ec:93:28:c3:8f:02:a2:74:2a:e3:fc:69:44:3f:03:
0f:7b:0a:bc:85:82:82:97:4f:b6:23:61:50:0e:a8:
65:7e:4e:05:de:87:24:98:b9:b7:7c:3f:70:76:cc:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:31:98:84:FB:99:03:A0:5E:F7:FC:7E:34:66:B7:0D:13:27:FD
X509v3 Authority Key Identifier:
keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:5980::/32
Signature Algorithm: sha256WithRSAEncryption
52:cd:3a:90:96:90:1d:fb:2c:76:40:9f:a1:ee:71:68:07:cb:
7f:6d:c9:75:9b:58:c2:81:d3:45:c5:3f:2f:7f:d4:8d:ce:f4:
59:eb:b7:4e:12:41:88:f9:aa:79:40:35:9c:d9:af:54:25:1d:
41:f6:f2:79:b3:d4:f8:89:4d:63:89:88:b6:86:3e:eb:7d:da:
e5:a1:8e:02:a2:e0:51:09:17:ec:28:89:c8:1b:9b:b8:6a:64:
c3:c7:f9:82:a8:09:01:3c:71:eb:33:12:85:b4:94:f8:49:7a:
d7:b9:da:e2:dd:46:a7:cb:7a:f4:f2:e6:13:9f:a3:c5:e3:7d:
b8:da:17:9a:30:cf:18:b8:a5:89:48:67:0f:dd:1b:7e:98:f3:
7d:09:6b:16:76:20:ac:9a:a5:e8:88:d4:01:30:10:b2:ac:2b:
ae:9a:57:1a:f0:b8:00:79:f2:01:47:09:09:3b:c9:c3:d4:c7:
50:33:72:86:99:dd:65:52:85:9e:5d:13:8c:ca:0f:1c:c1:57:
78:fc:a0:3b:97:f8:8e:15:f8:f9:9b:9a:36:ea:f3:fb:dd:64:
fa:08:a0:94:ce:aa:f8:58:c9:d4:ee:18:fc:39:0c:e1:34:4d:
55:24:aa:3f:57:45:cc:6f:94:3b:8b:c7:20:3e:f5:fa:f7:53:
0b:f2:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:45 2025 by rpki-client