
Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
File: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (raw, json)
Hash identifier: /Qubahg6iyutXhJp/TWUbUW351esUCIVNAyTMSK5KWU=
Subject key identifier: 4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C
Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial: 5C08815B6DF63515DA3974132E309881B1B5F545
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
Signing time: Thu 04 Apr 2024 06:00:01 +0000
ROA not before: Thu 04 Apr 2024 05:55:01 +0000
ROA not after: Thu 03 Apr 2025 06:00:01 +0000
asID: 141074
IP address blocks: 2406:62c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:08:81:5b:6d:f6:35:15:da:39:74:13:2e:30:98:81:b1:b5:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
Validity
Not Before: Apr 4 05:55:01 2024 GMT
Not After : Apr 3 06:00:01 2025 GMT
Subject: CN=4CE26F54C63B23950FED11F9B457743B1A74F95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:61:81:48:91:3a:b0:8b:21:04:67:4f:95:
34:de:7a:7c:1e:d1:ef:91:ce:a4:a4:d5:8b:c3:5a:
42:cc:bb:ee:69:9a:90:24:3b:d2:29:be:93:8b:86:
fa:21:63:97:c6:eb:8f:4b:bd:c3:0e:80:55:18:4c:
ca:0b:44:22:a2:f5:36:77:a6:cc:65:b4:1d:ee:18:
6a:db:c5:b8:05:94:1d:66:56:5c:aa:26:f8:a2:ad:
94:79:24:47:2f:0d:6c:f8:ee:35:45:72:ad:bc:00:
8a:e8:e9:f0:a0:18:e0:68:bc:24:b2:1a:f8:c9:99:
42:64:e3:ba:f5:31:1e:51:67:3f:ac:fb:77:6a:63:
f0:b1:9a:06:1f:12:d3:13:ba:9b:3c:3d:af:cc:e7:
03:32:71:8b:3d:57:47:a8:fe:3f:ef:1f:84:c5:06:
eb:b6:74:7e:68:88:1d:08:5a:87:11:0d:8f:91:74:
97:d5:63:6f:9c:78:29:d0:21:7c:a8:d6:b3:66:a1:
1c:77:6e:c3:fb:7b:44:ad:67:64:fd:58:92:34:ff:
02:cd:97:3a:4c:04:25:ab:7c:2d:a5:30:01:90:f3:
c6:81:91:6e:90:fd:63:41:9d:22:24:c6:f6:f8:16:
df:9a:90:6b:7e:38:96:2b:a6:d2:c7:3b:0a:d6:62:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C
X509v3 Authority Key Identifier:
keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:3c:cb:cb:0b:ff:8b:5b:91:d6:c1:86:f9:4e:ec:7e:9a:a2:
aa:75:b6:c5:bf:34:a5:66:94:52:83:67:16:62:8b:56:2c:bb:
5d:b3:62:f2:ef:ea:50:b8:f9:86:50:bf:a2:6b:d5:7c:a5:b2:
09:02:7d:d2:db:fb:32:27:7f:ee:1a:8d:af:84:6d:f6:c3:ea:
b7:db:72:ee:8e:5c:fe:d7:c8:3b:2f:24:e7:13:94:5b:c8:55:
28:70:4e:0e:5e:d1:d9:7c:6e:75:eb:77:1b:f7:20:4e:ca:28:
b5:fc:b6:53:45:b1:ba:64:8c:b0:6b:ff:24:2d:99:84:a0:09:
ab:79:87:cd:c4:b9:3f:70:a5:ce:23:95:47:66:ab:5d:41:11:
60:f3:e1:44:44:32:97:5d:b3:3f:52:58:33:ef:23:0d:e8:05:
73:4c:19:ec:4a:18:e5:1f:43:4f:6c:bd:fe:70:25:49:f6:69:
e5:92:9a:7f:10:08:dc:42:a9:8f:b9:88:70:4a:5e:0a:9f:b2:
77:cb:b8:90:0a:e6:97:92:e1:d2:9b:24:f7:0f:44:bb:0b:6b:
a6:2f:e6:41:9f:ce:18:0e:a6:5b:a4:97:5c:5e:a7:6a:fd:71:
59:9f:3f:6e:1f:2a:e4:7c:bc:07:bf:02:c2:9c:21:1c:d9:5c:
a8:7b:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:00 2025 by rpki-client