Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
File: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (raw, json)
Hash identifier: zXZN4XBzb/xjE5PUhLqfsrwTCA7e+BucjzfZkW492Ro=
Subject key identifier: C9:90:E9:E9:D3:96:B9:1B:EB:43:6C:63:BF:32:13:F5:43:8C:98:A4
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 758720B7E98E38E1C16FAB176224B00EB589CC0D
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
Signing time: Mon 01 Jul 2024 01:03:58 +0000
ROA not before: Mon 01 Jul 2024 00:58:58 +0000
ROA not after: Mon 30 Jun 2025 01:03:58 +0000
asID: 24523
IP address blocks: 2402:1200::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:87:20:b7:e9:8e:38:e1:c1:6f:ab:17:62:24:b0:0e:b5:89:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Jul 1 00:58:58 2024 GMT
Not After : Jun 30 01:03:58 2025 GMT
Subject: CN=C990E9E9D396B91BEB436C63BF3213F5438C98A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:23:2c:6b:8d:3a:bf:a9:66:8e:bc:43:82:
3e:11:8f:67:8c:1e:93:47:db:62:41:17:08:5e:41:
7f:c1:cd:96:21:b9:ee:3c:fc:64:0f:ab:71:e7:ea:
1d:63:a7:7c:a6:82:09:4c:0d:00:a8:1a:15:4c:fa:
16:3f:9d:e4:16:ed:fd:b0:10:60:ca:11:56:de:8a:
41:3e:fb:9c:77:e7:3d:70:3c:73:f5:3b:9f:f7:0a:
82:3f:a6:90:ae:2b:ab:a4:4d:fb:ab:c6:eb:14:8a:
d3:96:d1:6e:a8:42:b1:b1:67:89:6d:2a:34:a0:9a:
38:c7:30:15:fd:de:48:7e:8b:e3:70:9b:a2:ae:cd:
a9:f5:1c:14:5e:de:f5:72:56:05:fe:a5:97:d7:56:
da:96:e5:c9:27:88:83:15:b5:28:6a:fc:7e:34:00:
6f:76:ba:a2:53:6f:67:df:cf:d7:4f:95:ae:df:82:
9b:d5:6d:1f:7f:31:cf:56:c1:cd:74:61:55:d5:59:
4e:5f:cf:c5:8f:c5:9d:2e:d1:2d:9a:de:f3:26:05:
2d:a7:c5:e1:81:ad:75:79:e7:2f:3e:e0:c3:0e:69:
bf:13:c5:f0:7d:57:d1:d9:38:1d:b0:85:9e:6e:53:
f8:d2:2c:2b:57:2c:4a:20:2e:a7:21:1f:03:48:e5:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:E9:E9:D3:96:B9:1B:EB:43:6C:63:BF:32:13:F5:43:8C:98:A4
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:1200::/32
Signature Algorithm: sha256WithRSAEncryption
1a:d4:aa:37:e5:ae:e8:8a:0a:c1:e2:9d:d1:a8:b9:c8:d8:e9:
84:b9:27:bb:20:1d:47:e8:4c:f8:61:b5:59:33:fb:7f:6b:fc:
7d:b3:97:f5:d6:39:13:e6:3f:ca:86:84:18:4a:11:24:a5:74:
ba:a1:b9:dc:93:6e:9b:5b:d6:62:4d:30:eb:34:08:91:df:e5:
4e:6b:45:d5:81:5f:8e:f9:80:71:41:1a:9f:03:0f:83:cc:d9:
48:2d:e6:0c:79:74:cc:9b:b9:23:9d:d5:09:b8:87:b4:97:b8:
3a:73:49:29:e7:4c:ba:53:64:c0:e8:f7:8e:3d:49:24:a4:da:
85:f0:51:c9:c0:d9:e5:a2:48:5d:df:53:93:ba:72:28:0a:30:
80:34:ad:c1:76:ac:ea:2d:4b:bd:af:a2:39:b0:89:a0:da:20:
38:a0:9a:90:23:98:33:64:aa:20:fd:3f:2d:80:17:3f:ed:9c:
e3:a2:e6:8e:ab:ab:e3:98:69:51:71:a0:2e:ff:0b:b0:b5:db:
92:70:eb:37:d9:e7:29:6a:e7:57:ee:29:cd:d0:f8:b1:d8:9e:
f8:fd:ba:3b:a5:9d:b9:b1:6f:32:d4:a5:56:5f:f7:83:1a:9d:
3a:c8:df:6f:09:3a:03:1c:37:bf:f1:b0:a9:08:a8:ab:fe:fa:
ad:4c:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:58 2025 by rpki-client