Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
File: 323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier: Trj6p0Rlo/tfMth5LyvO1Kojs35zcKquO5MiMEWd1j8=
Subject key identifier: CC:8E:9D:4B:12:7B:ED:EA:C7:D1:54:BE:AF:EE:49:43:7B:C7:A7:70
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 487BD6ADAD3FFE8E4348DED4340568E8A70646C0
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
Signing time: Thu 04 Jul 2024 01:00:01 +0000
ROA not before: Thu 04 Jul 2024 00:55:01 +0000
ROA not after: Thu 03 Jul 2025 01:00:01 +0000
asID: 63501
IP address blocks: 2403:fc80:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7b:d6:ad:ad:3f:fe:8e:43:48:de:d4:34:05:68:e8:a7:06:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Jul 4 00:55:01 2024 GMT
Not After : Jul 3 01:00:01 2025 GMT
Subject: CN=CC8E9D4B127BEDEAC7D154BEAFEE49437BC7A770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:fb:25:19:61:47:f2:2e:83:f3:98:64:b6:
95:e9:00:e7:f1:84:f3:4e:43:71:5a:b4:f1:66:e7:
ff:d9:e3:38:a2:bb:50:a3:09:3e:1c:88:c9:23:4e:
5f:cb:22:3c:a0:06:7c:ec:7c:65:f2:9b:76:6b:f7:
da:62:a8:cf:82:ee:27:0d:29:a9:26:c6:76:77:a9:
2a:1d:f6:00:3f:8b:68:8e:3f:a9:ed:62:3f:ba:c7:
57:8a:f6:47:82:dd:ba:a7:38:d6:83:3e:0d:57:0c:
09:4c:ad:01:28:59:70:df:43:6f:f5:93:8c:88:8a:
8c:25:7a:4d:a5:a0:53:06:15:bd:b1:cb:42:f7:e6:
24:1a:44:9d:d4:09:60:16:d0:07:dd:5f:1a:d4:4d:
6e:dc:29:eb:6d:29:86:2f:4c:92:b1:20:c5:50:74:
9b:0a:79:59:ed:3e:ec:48:22:66:cf:07:13:3f:1b:
a1:44:4e:8a:91:bc:58:72:b3:2c:70:ca:75:a6:64:
83:ea:82:47:6c:88:c0:c8:2d:6e:2e:d5:af:99:69:
bb:4f:e5:68:a2:97:87:03:1f:f4:9d:e2:d5:d6:6d:
8e:e3:a1:fc:fb:e1:1b:c7:c1:c3:18:50:b5:5c:11:
c1:d3:75:b6:d6:32:c5:f6:5b:25:a2:a1:87:20:dc:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:9D:4B:12:7B:ED:EA:C7:D1:54:BE:AF:EE:49:43:7B:C7:A7:70
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fc80:8000::/34
Signature Algorithm: sha256WithRSAEncryption
27:99:e5:74:11:7a:d3:a0:18:7c:67:a5:db:fd:73:5a:cf:2e:
26:11:ae:3b:9e:3d:93:d8:87:a1:ae:e0:57:eb:ac:66:34:44:
14:30:44:72:a7:de:a4:55:8e:d7:9b:e9:30:d7:41:a9:63:89:
09:bf:df:fe:c7:d1:94:4a:5a:5e:17:5c:4a:61:bd:ea:36:80:
87:78:ca:12:2c:17:ee:23:a9:c3:71:c5:b6:15:59:94:58:ca:
7c:1d:e8:2d:ff:18:60:d3:44:1a:e3:2e:c8:f2:7d:11:5d:4d:
34:1f:07:ec:0c:cd:07:cc:6c:1e:93:be:3e:f2:12:ad:da:20:
55:2d:ea:57:4d:76:dc:b7:e3:93:36:c4:d6:7b:b3:ed:52:cc:
37:7d:2a:eb:d6:47:98:c1:d1:2f:d4:20:07:5d:b6:01:60:17:
a0:ac:f1:b3:a0:81:c4:ce:5b:9e:a3:5a:1c:cc:56:90:62:0d:
7d:be:07:2a:b7:d6:ac:1a:8a:46:0a:9d:46:e7:50:5e:e9:dd:
24:58:f3:fb:69:2f:29:88:71:77:81:d4:57:89:0c:e1:20:3c:
eb:18:97:03:70:11:de:c2:4d:79:2c:b5:45:0a:e2:00:67:28:
f6:35:9d:19:cc:51:fb:05:6e:ce:bf:7c:7e:89:f4:7d:d1:6a:
8b:64:aa:0f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSHvWra0//o5DSN7UNAVo6KcGRsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNDA3MDQwMDU1MDFaFw0yNTA3MDMwMTAwMDFaMDMxMTAvBgNV
BAMTKENDOEU5RDRCMTI3QkVERUFDN0QxNTRCRUFGRUU0OTQzN0JDN0E3NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2vslGWFH8i6D85hktpXpAOfx
hPNOQ3FatPFm5//Z4ziiu1CjCT4ciMkjTl/LIjygBnzsfGXym3Zr99piqM+C7icN
KakmxnZ3qSod9gA/i2iOP6ntYj+6x1eK9keC3bqnONaDPg1XDAlMrQEoWXDfQ2/1
k4yIiowlek2loFMGFb2xy0L35iQaRJ3UCWAW0AfdXxrUTW7cKettKYYvTJKxIMVQ
dJsKeVntPuxIImbPBxM/G6FEToqRvFhysyxwynWmZIPqgkdsiMDILW4u1a+ZabtP
5Wiil4cDH/Sd4tXWbY7jofz74RvHwcMYULVcEcHTdbbWMsX2WyWioYcg3Gy7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzI6dSxJ77erH0VS+r+5JQ3vHp3AwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMyMzQzMDMzM2E2NjYzMzgzMDNhMzgzMDMwMzAz
YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzNjMzMzUzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAP8
gIAwDQYJKoZIhvcNAQELBQADggEBACeZ5XQRetOgGHxnpdv9c1rPLiYRrjuePZPY
h6Gu4FfrrGY0RBQwRHKn3qRVjteb6TDXQaljiQm/3/7H0ZRKWl4XXEphveo2gId4
yhIsF+4jqcNxxbYVWZRYynwd6C3/GGDTRBrjLsjyfRFdTTQfB+wMzQfMbB6Tvj7y
Eq3aIFUt6ldNdty345M2xNZ7s+1SzDd9KuvWR5jB0S/UIAddtgFgF6Cs8bOggcTO
W56jWhzMVpBiDX2+Byq31qwaikYKnUbnUF7p3SRY8/tpLymIcXeB1FeJDOEgPOsY
lwNwEd7CTXkstUUK4gBnKPY1nRnMUfsFbs6/fH6J9H3Raotkqg8=
-----END CERTIFICATE-----
Generated at Fri May 2 01:20:08 2025 by rpki-client