Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: gTj40UYFnyOOZ5cWVXcwbvaKX8w3VLkJvdGszXDQ1b8=
Subject key identifier: 8E:E3:54:57:0A:9C:78:CD:7C:56:81:F1:5F:68:D1:4F:6F:2E:4B:58
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 1B4932FD09835380A529CE9239DD15AAC5C210E1
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 06 Dec 2024 13:27:03 +0000
ROA not before: Fri 06 Dec 2024 13:22:03 +0000
ROA not after: Fri 05 Dec 2025 13:27:03 +0000
asID: 137316
IP address blocks: 2402:7ac0:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:49:32:fd:09:83:53:80:a5:29:ce:92:39:dd:15:aa:c5:c2:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Dec 6 13:22:03 2024 GMT
Not After : Dec 5 13:27:03 2025 GMT
Subject: CN=8EE354570A9C78CD7C5681F15F68D14F6F2E4B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:2f:60:18:cc:88:47:39:c3:9d:41:ea:ba:
3e:65:b2:f6:b1:79:89:de:86:d9:67:76:ab:91:66:
12:0a:42:6c:b7:50:5e:37:a1:e9:2b:b9:6d:ad:f5:
4f:a6:93:07:f0:ba:94:f1:16:08:b4:85:61:41:17:
43:2f:81:41:ff:f9:f9:b8:ab:44:65:b1:12:cc:59:
ce:ec:21:76:b9:8f:a1:ee:c9:42:3b:ad:4a:4b:6e:
d7:13:36:45:c5:82:45:01:80:a6:e1:e3:60:e7:10:
1f:4b:12:3d:c8:64:42:cd:d0:66:8e:97:d1:45:e3:
4a:d1:6f:37:d2:35:5f:93:25:2e:cf:5b:4b:c8:76:
bf:d7:17:0b:35:ec:04:0d:e7:6f:42:41:b2:92:ab:
8f:76:e8:e8:6f:53:fb:d9:16:6c:56:c4:42:f1:5e:
99:b9:2f:a7:8f:7b:ad:be:be:67:f1:48:5a:c3:4f:
2c:70:68:d9:60:fc:8a:0f:0c:23:f7:88:4b:32:41:
6e:ff:c3:0f:9e:26:a2:fd:60:88:17:63:6a:63:60:
b0:06:13:6c:c3:31:c8:2a:c5:5c:ef:9a:fd:95:26:
c4:db:98:d5:1a:b1:43:18:62:90:a2:a1:d0:0f:28:
45:28:20:4b:27:4c:8f:68:38:7e:b7:a8:03:07:dc:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:54:57:0A:9C:78:CD:7C:56:81:F1:5F:68:D1:4F:6F:2E:4B:58
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:d000::/36
Signature Algorithm: sha256WithRSAEncryption
73:73:a4:ed:60:5f:00:d2:48:bf:a8:e7:49:3b:9f:8a:b9:a0:
2d:ad:d0:09:bb:e8:01:22:fd:27:7d:d4:e1:a5:b8:ce:84:69:
df:8e:27:62:27:80:47:00:35:37:c3:52:0a:1e:4b:3b:fc:4d:
ac:00:87:cd:89:63:41:54:67:e6:a5:d7:f7:ee:2a:e0:1b:89:
47:a1:77:d0:5f:9e:a3:03:a3:f9:6f:46:15:96:c1:7d:87:f2:
7b:89:de:20:65:fe:fa:3c:93:98:4c:c1:76:8e:61:d3:18:4c:
2e:23:15:e2:51:76:8c:7e:81:47:11:bc:ed:b3:5d:df:d5:4b:
5c:97:9a:b0:a1:2f:21:af:c4:aa:59:fe:4a:f0:67:13:dd:63:
31:6a:80:fc:28:2b:30:eb:b9:69:ee:c5:0d:1f:b2:fa:66:b7:
8e:9a:02:24:c0:db:07:e0:95:b7:f5:03:71:e8:db:a0:ce:3a:
3a:09:af:d1:28:62:d6:41:0b:ac:6d:31:12:9a:6a:4c:35:de:
2c:8a:1b:88:60:9c:74:36:35:e2:9b:39:fe:e8:79:77:86:0f:
8d:02:76:eb:fc:22:0a:10:cd:0b:15:42:db:c4:72:a2:e9:de:
18:94:7b:20:1b:a5:01:52:94:59:60:15:28:d6:98:7b:1c:f2:
b6:31:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:33 2025 by rpki-client