Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa
File: 323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa (raw, json)
Hash identifier: oYZ8nz2WJas0xrln7v1b7AoTJQ7GRDEHvZFLX/caHbE=
Subject key identifier: 0C:DD:5D:32:54:92:EB:69:0F:BF:25:80:74:6E:03:FB:02:E3:78:6D
Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial: 1F700F7A12348110C6A089AD33363E44E8CD76F8
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa
Signing time: Wed 10 Jul 2024 00:00:01 +0000
ROA not before: Tue 09 Jul 2024 23:55:01 +0000
ROA not after: Wed 09 Jul 2025 00:00:01 +0000
asID: 38524
IP address blocks: 2401:de80:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:70:0f:7a:12:34:81:10:c6:a0:89:ad:33:36:3e:44:e8:cd:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Validity
Not Before: Jul 9 23:55:01 2024 GMT
Not After : Jul 9 00:00:01 2025 GMT
Subject: CN=0CDD5D325492EB690FBF2580746E03FB02E3786D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:d9:96:60:fb:02:6e:df:42:78:6f:d3:8f:
89:12:c4:58:68:ff:e1:a2:b8:1a:07:33:9a:0d:63:
04:b9:7c:55:89:92:0d:78:32:2c:90:65:cf:ca:47:
56:7f:95:68:e9:9f:e8:b7:1d:99:9a:75:a3:a5:50:
d3:4d:ac:71:6f:17:78:60:4f:73:fb:a0:2f:30:d1:
ea:f7:53:10:74:46:e6:ef:e3:55:24:1d:63:b1:df:
4a:c0:11:5d:27:ee:a6:88:ea:4c:e4:73:c2:86:8f:
93:0e:78:11:48:62:29:31:49:e9:20:2a:7c:44:41:
f3:95:98:f7:a7:72:35:22:48:26:9a:66:97:a8:b9:
ac:90:9b:e3:7a:78:c4:85:1c:be:2f:04:70:5e:f9:
61:8b:bb:a6:0c:fd:95:99:b4:7e:1e:21:40:59:39:
8b:83:54:48:f5:af:e0:2a:b6:11:ee:1a:b2:13:1b:
36:0e:44:6a:54:b7:4d:55:d2:65:d2:8d:d4:a2:c2:
a2:4a:8d:55:ed:33:b4:1e:b6:e2:9d:27:49:ec:3e:
cb:aa:25:04:6e:5f:2a:1e:e4:d9:04:71:ad:64:5c:
3d:a3:d2:6e:01:8a:17:54:b1:77:da:f4:4c:e4:3f:
e1:77:a1:5c:ab:40:d5:0a:76:a3:1f:bd:a0:2c:9e:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:5D:32:54:92:EB:69:0F:BF:25:80:74:6E:03:FB:02:E3:78:6D
X509v3 Authority Key Identifier:
keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:de80:7::/48
Signature Algorithm: sha256WithRSAEncryption
42:64:01:7e:f4:1c:95:05:b8:04:5d:e3:09:ca:85:e4:05:eb:
6b:0a:e8:e9:49:11:c2:f4:f6:bf:91:c4:2b:4c:02:70:63:6d:
d0:ac:72:63:c2:09:c5:68:b8:f3:c4:06:9c:e1:97:4a:e0:8c:
a9:fe:1e:c3:f9:2a:75:66:6d:37:cb:a1:a5:1b:52:60:50:e6:
f6:13:2c:20:a9:32:4a:5a:62:50:a2:e5:ee:5a:80:13:71:85:
64:76:79:00:b0:04:c2:8f:fa:70:af:ee:bb:1c:d9:b0:a9:13:
c4:d1:8a:56:89:2a:b0:13:99:70:9c:8e:74:24:12:e6:e3:5e:
9e:2a:b2:b7:30:43:f3:cc:7d:58:05:46:89:8a:b8:be:fd:fe:
a5:46:45:10:a6:9c:d9:42:38:5d:90:26:aa:0e:4a:c0:49:ed:
9b:cc:9a:e6:ff:b4:c3:6d:23:b7:a7:46:b1:a1:2e:2a:60:29:
27:58:88:c8:fe:00:5b:4a:55:58:4b:8a:b3:32:cf:49:82:57:
cd:2a:ea:f8:03:fe:a6:db:31:8c:38:f2:d4:6a:1a:ab:1a:d2:
ec:9f:e3:c8:91:c5:30:0f:e5:1b:f7:4e:57:6f:29:13:16:59:
25:e2:61:40:fa:11:98:e9:b2:54:d2:e1:79:77:86:f4:52:b8:
69:e6:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:46 2025 by rpki-client