Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa
File: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (raw, json)
Hash identifier: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=
Subject key identifier: F4:09:5D:3D:A3:B2:A6:E7:BB:73:7F:8E:DB:49:86:D4:3C:E3:4B:0C
Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Certificate serial: 083983A5BFE993F55FF013A828AD1BA2EDF07BC1
Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa
Signing time: Mon 26 Aug 2024 11:05:19 +0000
ROA not before: Mon 26 Aug 2024 11:00:19 +0000
ROA not after: Mon 25 Aug 2025 11:05:19 +0000
asID: 152830
IP address blocks: 2001:df3:f840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:39:83:a5:bf:e9:93:f5:5f:f0:13:a8:28:ad:1b:a2:ed:f0:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Validity
Not Before: Aug 26 11:00:19 2024 GMT
Not After : Aug 25 11:05:19 2025 GMT
Subject: CN=F4095D3DA3B2A6E7BB737F8EDB4986D43CE34B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:63:51:91:48:16:f9:b3:be:57:ec:da:31:
09:4e:7e:58:ff:72:15:60:73:39:91:16:b5:55:c1:
a1:a2:5d:c8:4b:31:a4:eb:fb:f3:18:91:49:d3:27:
66:72:57:08:fb:d4:83:6d:21:da:dd:02:c7:67:e4:
91:7d:98:94:8f:6e:96:14:f7:05:c9:10:dc:27:1d:
a1:e1:bc:e4:c3:9f:35:90:b2:a8:20:76:b3:43:3b:
02:bf:79:ed:be:ac:90:dc:06:d6:8e:d4:05:d2:4b:
4e:30:44:37:d1:45:61:e1:60:55:e4:2e:ae:f0:cd:
52:1a:73:1e:75:ee:5a:13:bb:f1:15:24:32:94:9a:
9b:ca:cc:1a:f6:5e:0d:01:9a:88:0f:9c:26:10:fd:
f1:7e:22:7c:50:e5:ae:fe:58:ec:98:0a:b0:dd:13:
c2:d2:f1:37:a5:95:3f:c7:d0:b3:2d:45:1b:74:39:
24:2a:2f:d6:b8:cc:53:ff:b2:c7:48:a7:4d:d6:da:
8a:3e:07:cc:a2:b5:38:30:2b:e5:d3:c1:eb:f9:2f:
c8:56:3a:b4:f7:4d:ba:ae:6d:ed:bf:9c:71:9d:72:
ef:b9:60:b7:fd:cd:5c:0b:1d:cc:b7:13:9b:19:6d:
72:e0:f7:02:d9:65:d2:5f:31:da:50:db:93:85:d2:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:5D:3D:A3:B2:A6:E7:BB:73:7F:8E:DB:49:86:D4:3C:E3:4B:0C
X509v3 Authority Key Identifier:
keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f840::/48
Signature Algorithm: sha256WithRSAEncryption
a6:97:54:72:02:17:b0:2a:41:41:b9:33:fd:b0:77:dd:3c:46:
c6:4c:40:27:34:af:1d:e1:22:4a:64:99:8e:f3:74:e1:df:af:
5b:0d:0a:c5:ff:2d:15:99:2a:21:66:93:3a:7f:84:0c:e0:da:
04:a0:0e:ad:1c:f8:58:80:83:66:34:2e:7b:9c:9a:38:3a:4d:
2c:70:01:a3:cf:e1:da:ed:97:1b:63:b5:d0:98:a0:a1:8c:82:
2b:8f:13:83:c4:02:2c:95:eb:8b:c5:6d:0d:92:d1:f6:51:0b:
4e:8e:2c:a8:f4:52:b2:c0:4b:3c:ea:46:fe:26:f1:dd:82:30:
50:f2:10:d8:51:6b:30:1b:61:8c:3b:31:4e:d0:e7:95:49:eb:
1b:d0:9c:c8:f2:8b:30:1a:b1:95:89:dd:58:4d:c5:28:b3:24:
c4:28:19:e9:b3:ee:21:fa:27:10:e4:b9:62:25:07:b8:bf:aa:
6d:9c:62:0b:55:ee:f0:ca:92:3f:b5:87:e6:26:f4:d6:41:9d:
53:6f:2e:c3:7d:68:76:9d:3c:59:c1:3a:7c:90:96:3a:ff:24:
d4:96:67:73:0e:d9:c2:ed:75:cf:34:45:b3:5a:f0:53:1f:07:
e7:ca:3f:26:05:b7:f6:ea:c0:d9:a4:2a:89:96:37:3d:63:b4:
68:f4:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:52 2025 by rpki-client