Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa
File: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (raw, json)
Hash identifier: T1bNMqpFqTtICxGhMHAhYrL0Kp4CT+jehuuEyOzBKtM=
Subject key identifier: F8:56:E0:DC:63:16:EA:D7:69:08:E9:AB:4D:25:07:99:A1:CD:21:3A
Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Certificate serial: 7B03B973AAE659609638DD24B3E02ABD7C1A31A9
Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa
Signing time: Thu 30 Jan 2025 04:07:45 +0000
ROA not before: Thu 30 Jan 2025 04:02:45 +0000
ROA not after: Thu 29 Jan 2026 04:07:45 +0000
asID: 141067
IP address blocks: 2406:7540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:03:b9:73:aa:e6:59:60:96:38:dd:24:b3:e0:2a:bd:7c:1a:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Validity
Not Before: Jan 30 04:02:45 2025 GMT
Not After : Jan 29 04:07:45 2026 GMT
Subject: CN=F856E0DC6316EAD76908E9AB4D250799A1CD213A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:9e:91:24:5f:09:06:87:b6:8a:75:40:a9:
ac:26:83:f2:a9:08:66:01:7b:eb:d8:d4:78:31:76:
89:9f:c4:db:01:11:73:46:6e:e0:e9:4d:f0:54:7e:
38:aa:92:df:3c:d8:78:bc:d1:5a:08:f6:1e:f9:cf:
b0:76:a4:c7:b3:ed:75:b6:9f:28:0a:3b:26:7f:92:
95:b4:71:2e:dd:5d:76:7a:06:fc:a5:d7:33:c4:78:
c2:15:68:0d:3d:26:c2:83:b8:2c:00:31:09:b8:22:
02:4d:28:0d:e4:13:7a:75:ec:85:06:08:dd:c3:85:
d6:5c:1e:a3:c3:88:10:e9:ff:d8:f4:3d:69:92:2c:
48:17:a9:80:77:4a:49:5d:73:cc:db:1d:e9:ec:dd:
81:08:89:d9:1d:52:3d:e8:38:d5:9f:a0:e0:4f:a6:
91:c5:a1:fa:75:f8:18:03:d6:36:13:ce:16:de:db:
bf:5e:32:f6:57:c2:e1:8d:a2:23:9c:99:1d:e0:20:
23:d7:5a:14:44:5b:95:59:73:9d:32:6c:6c:2b:e1:
16:96:bf:ea:d6:e3:84:3d:ac:b5:c3:13:94:b9:74:
57:dc:fa:ca:d6:c3:08:bb:d1:54:bb:c1:6b:2f:81:
ae:7e:0b:4e:8f:2a:90:61:8a:5c:d9:6d:cb:78:10:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:E0:DC:63:16:EA:D7:69:08:E9:AB:4D:25:07:99:A1:CD:21:3A
X509v3 Authority Key Identifier:
keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/323430363a373534303a3a2f33322d3438203d3e20313431303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7540::/32
Signature Algorithm: sha256WithRSAEncryption
c0:05:b6:20:38:50:7e:04:9a:8d:96:e6:27:ec:52:34:5b:44:
36:0f:fc:f5:ed:21:08:67:fb:20:a8:d1:61:77:b1:50:19:3a:
c3:af:75:17:f6:80:cf:af:46:d2:bb:f1:97:57:f8:76:4a:9b:
45:42:ca:4a:b8:16:ef:54:f9:6b:39:07:b1:91:79:f3:1d:e0:
cc:e3:14:fb:2f:39:b3:49:4b:5a:dc:b5:4d:6a:7a:33:55:4a:
63:87:cc:e1:52:33:3c:cc:34:67:d6:6d:38:da:57:31:3c:9f:
fa:84:fe:0e:33:aa:b8:e4:90:4e:56:ce:0c:64:48:a4:e6:b3:
fc:f7:9d:b0:b2:8c:51:8c:8f:8b:53:59:e9:9d:4f:6c:86:8e:
5b:39:88:26:6e:92:c0:8b:30:d4:66:ee:a5:35:65:04:4b:52:
bc:2d:b0:1d:a2:e3:8e:e2:cd:c8:07:f5:c4:a1:cc:c9:64:78:
be:c8:f8:de:24:e7:7e:99:42:5e:48:c1:a5:ad:23:2b:4c:65:
d7:57:ad:eb:8f:e6:a8:03:22:55:cc:3f:5f:b6:01:0c:5a:a4:
fa:a8:53:18:f8:51:74:33:65:0c:6f:61:3b:25:91:9a:55:97:
aa:cd:2f:c6:15:0a:b0:69:5e:78:71:66:f2:a3:22:0e:34:32:
3c:22:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:24 2025 by rpki-client