Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa
File: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (raw, json)
Hash identifier: hf05sx3KHiq0EmV0xomKGB6bGQWNqcACIyo69C+x6+4=
Subject key identifier: B6:8E:E3:60:D6:2A:2B:E5:9F:00:DC:CD:15:90:6E:A9:64:8F:88:8F
Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial: 0746D44A14B2CAD2B93CD056258C11ED2F43BB91
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa
Signing time: Wed 26 Jun 2024 12:00:01 +0000
ROA not before: Wed 26 Jun 2024 11:55:01 +0000
ROA not after: Wed 25 Jun 2025 12:00:01 +0000
asID: 142366
IP address blocks: 2407:b4c0:dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:d4:4a:14:b2:ca:d2:b9:3c:d0:56:25:8c:11:ed:2f:43:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Validity
Not Before: Jun 26 11:55:01 2024 GMT
Not After : Jun 25 12:00:01 2025 GMT
Subject: CN=B68EE360D62A2BE59F00DCCD15906EA9648F888F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:0f:84:15:68:58:17:4a:05:e6:cc:b0:04:
c6:71:c5:94:1c:6c:4d:24:51:c7:77:e7:4c:dd:6f:
b7:50:0f:e1:61:50:84:5b:f1:2b:58:3e:08:24:ad:
1d:87:56:b5:6c:76:a6:bb:50:23:a2:98:48:2c:85:
ea:45:4b:4c:96:02:bb:0e:bb:b7:04:d7:04:a3:48:
ea:0f:96:9c:75:1e:5b:ae:ac:37:87:28:9c:d8:39:
a0:a4:54:64:74:9b:e1:79:de:8a:72:ca:40:e8:4c:
cb:9b:59:b0:2d:dd:47:45:3b:8b:da:c3:cc:17:46:
93:bf:30:d7:8e:3f:83:e0:0b:98:23:0b:7b:70:f2:
14:a1:e6:a2:d3:1c:b4:76:f4:a0:fb:47:87:77:b7:
88:23:91:0a:da:69:03:2f:f0:a9:36:e1:99:04:d5:
fd:1f:50:cb:62:8f:9b:52:d8:45:a2:80:79:81:f5:
f6:7f:de:81:6a:8a:37:78:c8:e5:3e:6f:99:02:c6:
83:78:1f:be:7b:d4:ea:39:95:70:ee:50:a5:f6:24:
6d:32:e5:3e:b2:89:96:a6:91:14:09:33:af:08:c6:
28:fb:08:ea:98:eb:45:1e:7b:fb:5f:04:fc:ff:84:
24:3a:f3:f0:d6:88:ea:8e:29:c7:49:f6:a5:c7:c5:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:E3:60:D6:2A:2B:E5:9F:00:DC:CD:15:90:6E:A9:64:8F:88:8F
X509v3 Authority Key Identifier:
keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:b4c0:dd::/48
Signature Algorithm: sha256WithRSAEncryption
02:b7:48:13:25:b4:95:ff:af:48:c2:ab:93:73:71:22:9a:42:
9d:20:fc:d4:e0:fb:97:fa:1a:31:fb:b3:53:e4:4f:5f:a4:57:
54:7d:04:5c:9f:64:c1:43:32:0c:77:45:67:0f:47:49:60:08:
03:b4:3f:85:9b:42:1f:2c:0f:d2:53:83:cb:b0:a4:6c:c8:fd:
25:84:fb:e9:9a:b4:a4:5e:51:db:05:95:5b:5b:8d:aa:8b:c3:
a9:ff:71:29:4a:51:b4:7c:89:37:3e:27:84:33:e9:97:13:2c:
cd:63:6a:6c:ef:f5:67:01:ac:da:bd:3d:4a:f7:42:b5:6e:fa:
62:73:58:3c:e5:0b:16:7e:c3:39:ac:ec:21:87:93:e3:dc:9b:
ff:4e:77:a4:e0:d6:a4:9a:fe:44:79:32:1d:fb:83:12:e3:05:
0e:2f:4c:af:3e:0c:f8:38:c7:28:00:e6:ab:08:3c:f7:88:ed:
2d:28:62:ea:74:36:2b:9c:fc:a5:f3:11:ac:19:77:a5:0b:9f:
b5:40:ff:29:bc:3a:6a:cf:fa:7a:53:57:16:28:e7:4e:06:5e:
ff:a7:2a:ea:cf:c2:b7:b1:0c:f0:55:7a:b5:1c:34:e1:98:52:
c3:22:62:07:d0:a9:c9:7b:27:1e:29:29:b6:d3:1f:b9:5f:2e:
ae:f8:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:35 2025 by rpki-client