Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa
File: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (raw, json)
Hash identifier: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=
Subject key identifier: 4C:20:F8:10:F1:D7:AC:F4:88:3F:5A:1A:32:41:0C:4F:96:E4:D0:62
Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
Certificate serial: 4F12A2166A9E3A65B706D666B177285288693F81
Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa
Signing time: Sat 28 Sep 2024 14:00:02 +0000
ROA not before: Sat 28 Sep 2024 13:55:02 +0000
ROA not after: Sat 27 Sep 2025 14:00:02 +0000
asID: 59278
IP address blocks: 2402:6980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:12:a2:16:6a:9e:3a:65:b7:06:d6:66:b1:77:28:52:88:69:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
Validity
Not Before: Sep 28 13:55:02 2024 GMT
Not After : Sep 27 14:00:02 2025 GMT
Subject: CN=4C20F810F1D7ACF4883F5A1A32410C4F96E4D062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:b2:30:ec:fa:d1:0d:ba:f6:d6:a8:60:df:
46:05:bd:08:7b:cc:45:fe:d3:f1:77:b2:9b:c9:62:
3f:ef:c8:4e:26:33:c3:6e:80:a9:02:3a:a6:de:b1:
3e:75:e6:f3:15:58:c0:4e:a4:ba:3d:74:24:3a:10:
24:fd:4e:a7:21:c9:30:93:bb:26:5d:3b:b4:3e:43:
4e:7f:ef:6a:a2:35:9a:91:6e:ca:d1:04:f1:a6:2b:
22:a1:0c:ef:dc:50:90:bd:df:50:29:e7:8c:97:31:
6e:63:62:55:7b:a1:7d:4c:1c:0d:90:c8:19:31:b1:
ab:d0:19:9a:a8:95:18:e7:93:4b:74:44:5a:32:5d:
85:5a:23:12:28:dc:b3:95:44:78:21:53:e2:43:53:
df:76:35:1d:c4:86:9d:cb:55:58:24:c9:43:0f:73:
c7:fa:1e:d7:42:67:39:07:ad:bd:9e:aa:ef:40:e5:
ad:90:09:13:55:c0:bf:6e:70:e4:24:d8:7f:cf:f1:
d2:89:7e:b9:68:aa:70:46:dd:16:d6:e2:43:4f:1b:
e1:50:4e:54:45:79:82:41:70:1a:66:63:2c:f9:1a:
f5:e1:b8:da:78:7b:85:bd:04:30:fa:0b:03:d0:f2:
2f:37:2e:cb:f7:fa:ac:43:3c:72:55:1c:aa:e5:0f:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:20:F8:10:F1:D7:AC:F4:88:3F:5A:1A:32:41:0C:4F:96:E4:D0:62
X509v3 Authority Key Identifier:
keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:6980::/32
Signature Algorithm: sha256WithRSAEncryption
93:6a:67:cb:3d:ae:04:c3:da:79:8f:15:fb:a9:db:78:3a:a7:
72:21:4c:62:e9:cc:45:b6:77:9c:75:4e:77:58:d6:0a:25:d5:
95:a6:a5:17:d9:1d:d6:05:92:c2:3a:b8:f2:36:72:19:df:18:
ee:5f:ad:52:24:89:e3:31:41:60:91:e1:85:12:f6:74:e9:e3:
ba:ff:6f:9b:69:68:f8:04:49:c1:82:c2:64:6e:06:6d:b1:28:
c3:5a:ce:d3:a7:50:aa:41:ea:b6:ff:32:86:6b:a6:3f:fc:69:
b6:26:7b:cd:bc:03:7e:53:7f:31:89:01:8a:db:58:36:23:f1:
08:10:bf:50:b5:80:fd:b1:ed:f2:ec:84:ba:99:6e:50:bb:4f:
86:2a:8f:a1:84:cb:72:f4:b5:02:57:0f:0b:85:7d:a9:20:a7:
25:da:c8:f9:fe:c7:ed:8d:10:05:f9:3d:27:92:f8:68:5e:a7:
a3:32:23:b7:c5:61:77:6e:cf:f8:cb:01:03:b7:b2:67:78:cd:
0b:1b:0b:2b:40:98:5d:39:d9:5c:d9:78:f1:22:34:2f:d3:dd:
d7:ef:ea:ff:6a:9e:6a:32:88:c9:c9:b9:1e:24:ae:a3:6e:ca:
fb:ca:d3:8a:33:93:e2:9e:de:82:26:a1:cb:61:fd:3f:66:90:
a9:76:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:13 2025 by rpki-client