Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa
File: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (raw, json)
Hash identifier: oTf+Eqxxrg0C7eWejuIjxaoc4JqS5/m4GGFT+fKHFXc=
Subject key identifier: AD:36:64:F7:AE:63:AB:7E:F4:C4:90:A7:12:A6:09:58:C6:13:7D:E7
Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial: 01CD1C6417EA82D9A6F825C6D9F1D0A956116A33
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa
Signing time: Mon 01 Jul 2024 01:02:29 +0000
ROA not before: Mon 01 Jul 2024 00:57:29 +0000
ROA not after: Mon 30 Jun 2025 01:02:29 +0000
asID: 136868
IP address blocks: 2001:df3:7100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cd:1c:64:17:ea:82:d9:a6:f8:25:c6:d9:f1:d0:a9:56:11:6a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Validity
Not Before: Jul 1 00:57:29 2024 GMT
Not After : Jun 30 01:02:29 2025 GMT
Subject: CN=AD3664F7AE63AB7EF4C490A712A60958C6137DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:75:56:d6:19:ca:10:23:c7:68:bf:4e:1e:
35:9c:cf:d2:67:89:47:1e:ba:20:ac:fa:9b:e2:c0:
06:17:75:df:49:d7:ce:0e:6a:a6:c9:38:38:e0:79:
a3:3c:4d:c9:d4:80:d9:36:6b:87:33:c4:35:d0:2b:
1e:2c:23:43:58:af:c4:bb:e8:5b:85:cd:62:e6:3d:
16:1c:58:e6:06:c7:9a:e2:4a:70:9a:b4:66:82:48:
31:d5:d8:0f:e9:60:f7:dd:ea:d2:50:a3:37:4b:58:
63:2c:1c:f4:09:1e:4c:d9:46:5b:ee:8f:67:07:8e:
bc:5c:c8:db:49:ad:52:bc:98:44:35:d9:d9:0b:06:
b2:1e:07:b6:5f:4c:bb:25:1a:76:34:fc:b3:91:da:
23:32:88:72:5a:a4:4a:73:17:0f:78:63:e3:0f:d6:
b7:7d:11:83:d6:03:bb:f3:51:0c:43:4b:28:36:10:
55:55:2f:9d:f2:23:5e:f2:09:5a:f1:23:f2:36:bd:
db:78:6b:8c:ed:1a:88:4a:77:3c:0a:04:5c:2f:0c:
6d:fa:1d:d9:a3:89:a8:05:f2:c9:20:f1:96:a2:08:
94:3b:ba:fe:43:5c:93:a5:61:97:bf:01:42:27:cb:
a6:72:85:a2:d2:25:fa:27:c6:99:aa:e8:b7:1a:1a:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:64:F7:AE:63:AB:7E:F4:C4:90:A7:12:A6:09:58:C6:13:7D:E7
X509v3 Authority Key Identifier:
keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7100::/48
Signature Algorithm: sha256WithRSAEncryption
90:f3:01:a6:08:28:72:01:3a:b1:88:d3:42:aa:fa:69:f3:27:
6b:35:60:0a:ea:37:28:0e:7a:86:b7:24:34:ce:d8:0b:99:4e:
27:b9:ee:14:7c:60:63:5a:8a:03:0b:4a:01:ab:f6:87:d9:bf:
13:1f:a4:93:74:a2:a0:04:a3:e1:fa:ae:44:56:d0:80:67:f7:
6b:15:20:56:b7:be:6e:d5:85:b4:8c:2f:7d:61:51:94:ff:61:
b6:0f:55:58:14:f4:b6:d7:1f:9a:50:17:16:98:ad:00:9d:72:
fc:3f:b6:02:96:33:87:55:f0:89:9f:7b:4e:00:03:ae:50:4f:
c1:5c:1a:e9:61:7d:93:f8:74:3d:9a:42:dc:05:a5:24:3f:09:
67:34:f2:8b:6f:ff:98:a6:da:c5:14:31:7b:c0:ca:a3:dd:88:
ad:36:45:67:d5:e5:49:f8:6e:95:91:5e:2f:c7:20:f5:f3:c9:
f8:3d:b4:e5:ce:e3:75:05:b4:49:c7:0c:d9:b1:fb:ab:c1:64:
1a:a7:47:9b:fd:0c:e0:e8:48:0d:0c:3d:40:93:14:8b:fc:c9:
8b:ff:82:2f:9b:56:89:af:6d:57:2e:f7:dc:47:f2:3b:d2:ad:
40:04:86:1d:dd:20:13:eb:20:a6:22:a9:c5:dd:0b:a9:2d:1e:
94:61:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:05 2025 by rpki-client