Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: SXf51XvFrHgPLsufLhNp6EyMs+Q+RKQBLQA+5Vv4X6Q=
Subject key identifier: EC:9F:3E:6E:BB:FF:AB:8C:F9:AA:A6:14:5B:EC:02:BE:F6:90:E2:54
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 2A7473256D253EEAA8C4E87FB0E7777D05695378
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:26:12 +0000
ROA not before: Fri 06 Dec 2024 13:21:12 +0000
ROA not after: Fri 05 Dec 2025 13:26:12 +0000
asID: 137316
IP address blocks: 2402:7ac0:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:74:73:25:6d:25:3e:ea:a8:c4:e8:7f:b0:e7:77:7d:05:69:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:21:12 2024 GMT
Not After : Dec 5 13:26:12 2025 GMT
Subject: CN=EC9F3E6EBBFFAB8CF9AAA6145BEC02BEF690E254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:05:67:2f:12:54:eb:81:f4:d3:ef:9d:24:
e1:cb:53:7d:0b:7d:6b:34:77:93:be:38:d7:c4:07:
05:01:39:ea:36:0e:76:af:29:bb:f4:27:45:16:2e:
ef:50:aa:98:ec:02:1f:0c:9f:fa:e7:1a:c7:ff:69:
88:aa:66:43:e7:0e:46:d4:cb:71:68:95:a1:7c:6f:
65:ad:55:af:42:25:f9:d5:c9:86:6b:5d:2a:d7:98:
92:cd:82:2f:16:e8:e0:41:29:27:6f:d1:fb:52:39:
4a:45:3e:e9:d1:7c:4e:26:f3:a3:b3:67:e1:61:ba:
c0:35:c4:3c:6f:88:88:f7:d0:ae:fc:72:ef:6c:2b:
33:a7:2d:d4:fb:5c:87:73:15:9a:f5:b2:f8:88:7d:
8c:61:16:3c:e5:7d:f8:21:9f:55:ee:2e:a1:22:45:
aa:0c:f9:4b:d1:ae:6e:7f:8b:31:9f:4b:31:57:90:
7b:66:13:34:82:52:96:1c:e4:bb:ca:37:c9:fd:d8:
a6:43:5e:a3:10:d3:58:92:52:cb:11:ab:38:8a:71:
94:60:4f:8b:6a:8d:5a:63:1c:60:36:04:56:9a:b8:
5a:80:03:3c:e3:c1:18:f1:3d:e6:50:25:0a:d8:98:
13:6f:1c:a1:45:01:1d:66:bc:1b:5e:e3:a6:57:b0:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:3E:6E:BB:FF:AB:8C:F9:AA:A6:14:5B:EC:02:BE:F6:90:E2:54
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
05:49:b3:66:52:d0:34:90:0e:00:76:52:3f:51:c1:3e:bc:d3:
8e:6e:45:5c:ad:e0:47:14:9f:78:be:3a:ad:12:71:7f:68:ed:
5a:78:ef:be:25:72:1d:00:ac:7d:55:11:22:ed:cb:44:e3:90:
cf:11:ce:e9:8c:52:c0:35:03:98:85:1c:a9:65:c7:88:7e:be:
e6:57:6a:fd:34:c8:4d:47:af:94:05:c0:ea:62:e0:e1:6e:6b:
62:24:be:99:61:99:e1:5a:f8:80:54:94:c4:e1:54:84:ed:ba:
af:c1:c4:bd:10:42:c9:8f:7c:12:16:5b:21:ab:f8:36:11:3d:
5d:47:68:b3:f0:bb:9c:45:a7:3d:5e:72:2c:df:7b:4e:e9:f6:
5f:10:03:62:66:09:5c:2c:f2:7e:ca:41:62:3d:19:5d:bd:45:
fb:31:9e:5a:75:1d:e5:c6:e9:56:9d:0c:92:c0:b8:35:b3:2e:
81:e1:16:aa:25:3b:dc:57:fb:c0:52:5f:67:4b:0b:d1:ed:a8:
f5:4c:31:f0:e1:ea:0a:d4:6f:ce:b1:0d:73:45:7a:a8:7f:1f:
2f:ec:e8:21:6c:09:71:cc:14:3c:c1:b7:a2:2a:20:28:15:34:
29:ab:3b:35:80:94:d0:c6:f0:f0:d9:31:ed:8c:26:6f:d7:1a:
30:33:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:34 2025 by rpki-client