Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
File: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (raw, json)
Hash identifier: O3osoqSALgy9N+p0Rmg0e4ZPj2EyrgRcwmVuTtoTV+o=
Subject key identifier: 37:CB:90:51:83:62:A4:9C:69:3D:94:5F:72:80:07:38:DA:13:38:57
Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Certificate serial: 4E3540778096D08677080B36DFE1DC6D13419AB2
Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
Signing time: Fri 24 May 2024 16:38:44 +0000
ROA not before: Fri 24 May 2024 16:33:44 +0000
ROA not after: Fri 23 May 2025 16:38:44 +0000
asID: 152756
IP address blocks: 2001:df3:cf40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:35:40:77:80:96:d0:86:77:08:0b:36:df:e1:dc:6d:13:41:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Validity
Not Before: May 24 16:33:44 2024 GMT
Not After : May 23 16:38:44 2025 GMT
Subject: CN=37CB90518362A49C693D945F72800738DA133857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:10:ff:3f:ca:d8:19:34:1b:21:34:e1:46:
3e:4e:29:c9:72:a6:f8:c0:d5:df:d1:a3:b1:5e:51:
f8:7c:76:a4:2b:b1:17:4f:44:d5:d3:df:3e:ee:af:
a5:4a:a9:b6:c9:da:7c:67:cd:fb:e9:e4:c7:08:81:
ec:bc:29:a5:71:6b:0c:12:97:99:5e:df:b1:c7:30:
59:cf:0f:99:d0:ba:33:38:f3:1f:5f:fa:be:eb:65:
37:e1:f8:ae:55:42:e3:92:0f:52:a7:b5:4f:b8:a3:
df:d9:ad:4d:2b:c4:55:15:e3:cb:52:31:59:aa:64:
e2:af:41:b0:cc:0e:ae:f1:a7:76:a4:79:ab:d4:2b:
96:ae:86:69:80:35:a7:a7:a7:c7:1d:4d:fe:46:88:
b0:5a:7b:27:ac:0d:46:cf:fd:97:63:19:7f:97:af:
39:cb:e0:aa:64:d2:35:a8:a7:c6:2f:0c:99:56:6c:
93:e1:a0:af:63:d4:ed:ef:72:27:58:dd:65:90:52:
53:63:3a:79:35:2f:36:1b:4e:56:28:cc:73:2d:43:
21:7c:6b:28:80:07:48:f8:15:92:d7:99:f1:e7:4d:
8d:95:5a:be:b3:62:e4:f1:76:3b:6c:03:3a:ff:3d:
57:1d:54:55:9f:ed:e4:71:37:21:46:d9:7e:c4:a8:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:90:51:83:62:A4:9C:69:3D:94:5F:72:80:07:38:DA:13:38:57
X509v3 Authority Key Identifier:
keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
55:6a:be:ea:8f:0e:0e:da:84:e1:de:76:6a:7b:a4:62:00:77:
0d:d4:2c:e0:3f:1b:2b:8b:6a:83:e1:3b:b0:bf:45:85:c6:e3:
41:b7:9f:2c:cd:9e:14:16:bc:bd:3e:ab:54:dc:d1:0f:a2:f1:
1b:6a:e6:49:f0:b1:ea:80:1e:49:a3:fc:28:ee:fc:ed:f4:c8:
1e:04:e8:f1:8c:fc:72:15:a4:51:9f:e5:60:b2:3e:60:67:db:
c5:e4:70:5b:6e:07:da:84:74:36:e0:40:79:ca:94:84:02:e7:
2f:67:6f:02:98:98:2f:ff:5c:f5:c2:e3:5f:1c:eb:f2:7b:02:
f8:8a:22:85:22:35:14:3a:cd:7c:5b:49:84:05:2a:fa:1a:37:
24:45:01:6c:f5:d3:8f:be:18:5e:cc:32:a8:46:17:d3:11:09:
85:81:78:2e:cf:32:16:5a:03:da:21:86:89:79:63:1e:f8:e7:
4d:33:a0:ce:c1:6c:67:41:8f:2e:66:1e:78:5f:2d:69:11:1b:
0d:81:b1:a9:cf:e8:bf:e3:9d:09:38:8c:30:eb:71:d0:ec:53:
63:6c:19:d4:57:a3:66:06:09:3d:c9:d4:94:4b:06:39:40:dc:
54:2e:55:cb:21:14:16:04:a5:a1:fb:0d:44:f2:cf:54:e4:53:
7b:ff:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:26 2025 by rpki-client