Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa
File: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (raw, json)
Hash identifier: 7QwG3sKKh+mYjg4jS1AeFszBYeNEnM56jws/Z3GCGMM=
Subject key identifier: 9F:59:6F:4E:C1:48:5A:45:1B:E0:B7:C3:CC:89:F7:7A:5C:4C:39:E2
Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Certificate serial: 77C89390CE58D8C13A0F55F1618315A4FE966634
Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa
Signing time: Fri 15 Nov 2024 04:00:01 +0000
ROA not before: Fri 15 Nov 2024 03:55:01 +0000
ROA not after: Fri 14 Nov 2025 04:00:01 +0000
asID: 134640
IP address blocks: 2001:df0:a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c8:93:90:ce:58:d8:c1:3a:0f:55:f1:61:83:15:a4:fe:96:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Validity
Not Before: Nov 15 03:55:01 2024 GMT
Not After : Nov 14 04:00:01 2025 GMT
Subject: CN=9F596F4EC1485A451BE0B7C3CC89F77A5C4C39E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:cd:9d:06:b6:67:05:5a:74:0c:8b:97:11:
5d:44:be:10:32:51:03:59:a9:e1:ba:21:83:1b:a3:
f6:c3:97:42:6e:2e:4e:de:12:ac:f6:4e:4b:fe:69:
92:14:f8:cf:3d:e0:85:37:70:2a:2e:aa:bd:8e:5c:
a4:38:40:30:13:f1:5d:fe:e9:93:dc:76:79:a5:45:
fd:06:84:7d:b2:4e:86:59:29:16:20:da:85:df:64:
22:05:d1:61:b8:1c:ac:49:06:ef:12:44:e5:1a:c0:
44:ee:f4:3e:a2:58:b8:2d:19:b2:1a:9b:f8:f7:f8:
32:ad:0c:30:f3:53:10:4e:5f:91:90:34:c1:a7:ce:
9f:4f:ac:0e:17:5b:0e:19:48:3d:1f:84:10:d6:35:
53:19:61:d6:f0:a9:58:4d:b4:8e:96:60:d9:a0:cf:
c1:b7:10:0b:5b:ab:68:f1:61:c7:91:70:72:98:36:
43:0c:2a:71:d1:76:a4:e3:ce:dc:5f:70:a9:a2:70:
71:49:dc:ee:ff:7a:2d:ac:e6:95:52:ce:ff:e6:bd:
8a:6b:fb:2f:61:67:e6:e0:18:55:c3:19:8b:e3:7c:
75:7e:03:87:dd:8a:d5:11:df:e9:3c:39:26:79:76:
06:7c:8d:44:e2:92:d9:79:77:75:40:dc:d7:9f:f5:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:6F:4E:C1:48:5A:45:1B:E0:B7:C3:CC:89:F7:7A:5C:4C:39:E2
X509v3 Authority Key Identifier:
keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:a00::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c0:70:93:ee:d2:26:be:c2:bf:59:1a:9f:4b:8d:aa:89:fb:
09:47:aa:46:8a:15:19:2c:6e:bc:a6:5d:bb:ef:02:88:5d:a2:
40:07:bf:d1:7a:d1:be:34:93:84:ce:93:ce:38:ee:58:2e:0d:
0d:25:53:da:57:40:a1:70:d5:84:d0:94:36:8f:f1:49:79:43:
97:95:63:b3:4e:43:03:c3:43:ef:d0:b9:30:0f:04:39:32:89:
e1:23:08:af:22:c0:08:b0:09:8e:8e:78:5f:0c:fb:6a:41:25:
20:24:c4:93:1f:02:c6:27:a7:75:5b:bb:72:bc:0e:b3:aa:dc:
59:14:a3:76:73:5c:26:5a:34:80:80:eb:66:06:ed:d8:b3:ed:
40:41:12:60:51:e5:51:3a:79:ca:7c:7f:45:21:a7:c1:31:3b:
4a:87:77:6b:53:1f:d2:3f:22:38:9f:9b:1f:cb:18:59:90:02:
26:03:55:61:dc:02:2d:2f:41:65:71:1a:4c:63:82:48:d2:e7:
50:b3:c0:3e:46:b7:23:7a:21:8d:99:79:60:77:04:fb:1f:56:
a8:54:cc:cf:f7:b1:79:29:77:85:99:79:fb:52:94:9a:03:c8:
54:34:2c:c6:5e:b2:73:9d:7b:77:dc:e5:69:c0:1b:5e:e8:b4:
d5:e4:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:02 2025 by rpki-client