Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa
File: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (raw, json)
Hash identifier: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=
Subject key identifier: 95:78:0D:E4:40:C6:28:DB:52:70:A7:A5:36:F3:1B:9A:CB:03:D1:2F
Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
Certificate serial: 4709B2433CCA7D82BE94093DEA5A8202A9F9ADE5
Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa
Signing time: Sat 14 Sep 2024 18:00:02 +0000
ROA not before: Sat 14 Sep 2024 17:55:02 +0000
ROA not after: Sat 13 Sep 2025 18:00:02 +0000
asID: 138884
IP address blocks: 2404:ce40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:09:b2:43:3c:ca:7d:82:be:94:09:3d:ea:5a:82:02:a9:f9:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
Validity
Not Before: Sep 14 17:55:02 2024 GMT
Not After : Sep 13 18:00:02 2025 GMT
Subject: CN=95780DE440C628DB5270A7A536F31B9ACB03D12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:70:a9:e6:49:6d:a7:e8:c6:2f:2c:13:f4:
20:87:2f:3d:55:ca:28:2e:ab:f4:89:35:4b:45:96:
bb:89:a6:5c:69:55:53:36:a8:08:3e:d6:52:26:6d:
30:70:82:45:1c:17:2a:b3:78:12:4a:a1:f8:34:4d:
5a:f8:f3:38:12:85:7c:17:fb:b6:1e:86:9d:a7:c0:
ea:e7:a8:9b:63:ab:ee:8a:82:1b:f2:8e:b5:31:2b:
28:f1:32:ed:eb:07:dc:ed:06:7c:40:ff:fa:7a:53:
88:e7:5b:ee:47:11:48:86:bb:85:90:1d:e3:0e:7e:
46:6b:f9:b2:88:e1:40:56:18:91:f6:f8:bd:ad:ac:
a9:cc:2f:f6:78:41:8e:a1:0e:65:d2:1b:d1:ae:07:
a6:67:c5:16:cf:8a:8d:a7:8a:7e:08:38:03:ea:49:
77:40:96:4b:9b:82:0a:f2:14:f0:20:6f:26:4c:73:
21:2f:65:8b:03:12:8c:bc:60:70:01:5d:f9:62:7a:
0b:30:dc:7d:43:32:83:5e:a5:b4:bb:e5:15:c9:86:
a7:c6:88:23:8c:f3:04:4b:bf:6a:ef:f1:cb:eb:78:
17:d9:9e:34:6a:4a:76:90:c6:66:3f:3f:da:0d:91:
0b:7c:a2:fe:05:56:25:03:a2:23:48:19:d2:25:ea:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:0D:E4:40:C6:28:DB:52:70:A7:A5:36:F3:1B:9A:CB:03:D1:2F
X509v3 Authority Key Identifier:
keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:ce40:1::/48
Signature Algorithm: sha256WithRSAEncryption
41:59:8c:8b:ce:1e:b1:bd:31:c6:b0:23:f3:56:9f:e4:c4:eb:
eb:6a:f1:d5:85:50:51:cd:6f:59:bf:5a:e3:87:a5:0e:73:7f:
3c:48:d2:a6:7c:0a:c6:22:bd:98:c4:f1:60:dd:ae:f4:37:96:
d9:06:10:d4:7e:77:18:f6:1a:73:3f:2a:32:9d:61:36:19:73:
a4:35:3a:45:63:8d:cd:b1:39:0b:23:10:aa:47:8e:25:69:0f:
58:47:c4:8c:1a:e0:10:be:75:e4:3d:af:67:b6:5a:d0:64:c3:
ae:94:21:b1:ca:09:76:28:66:39:35:f6:76:cd:d2:e3:9f:e6:
42:a9:70:d2:55:34:1f:bb:3e:f5:dc:e7:a9:d0:a0:08:0d:af:
5a:ae:87:dc:a9:57:ad:90:5b:55:11:2b:77:08:9a:0e:a0:f3:
0e:29:4c:93:e9:1a:e6:54:14:a9:f0:87:39:fb:04:86:db:20:
68:9c:7e:39:c2:ae:b6:04:35:f4:5c:e5:ed:3d:de:45:80:82:
ac:46:fa:29:bf:88:32:70:d3:34:2c:ae:a4:54:c9:f3:32:f1:
f5:bd:97:11:ec:39:ac:a0:ff:6c:27:ba:02:1a:01:7d:7d:a4:
7a:6c:87:c1:8e:0b:b8:38:11:76:ad:99:78:7b:37:48:87:91:
fa:65:c9:2a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURwmyQzzKfYK+lAk96lqCAqn5reUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1
MjI0OUIzRTAeFw0yNDA5MTQxNzU1MDJaFw0yNTA5MTMxODAwMDJaMDMxMTAvBgNV
BAMTKDk1NzgwREU0NDBDNjI4REI1MjcwQTdBNTM2RjMxQjlBQ0IwM0QxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe33Cp5kltp+jGLywT9CCHLz1V
yiguq/SJNUtFlruJplxpVVM2qAg+1lImbTBwgkUcFyqzeBJKofg0TVr48zgShXwX
+7Yehp2nwOrnqJtjq+6KghvyjrUxKyjxMu3rB9ztBnxA//p6U4jnW+5HEUiGu4WQ
HeMOfkZr+bKI4UBWGJH2+L2trKnML/Z4QY6hDmXSG9GuB6ZnxRbPio2nin4IOAPq
SXdAlkubggryFPAgbyZMcyEvZYsDEoy8YHABXfliegsw3H1DMoNepbS75RXJhqfG
iCOM8wRLv2rv8cvreBfZnjRqSnaQxmY/P9oNkQt8ov4FViUDoiNIGdIl6hThAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUlXgN5EDGKNtScKelNvMbmssD0S8wHwYDVR0j
BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx
NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0
OUIzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h
ODRlLWQyODljNmU5M2E3My8wLzMyMzQzMDM0M2E2MzY1MzQzMDNhMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBM5AAAEw
DQYJKoZIhvcNAQELBQADggEBAEFZjIvOHrG9McawI/NWn+TE6+tq8dWFUFHNb1m/
WuOHpQ5zfzxI0qZ8CsYivZjE8WDdrvQ3ltkGENR+dxj2GnM/KjKdYTYZc6Q1OkVj
jc2xOQsjEKpHjiVpD1hHxIwa4BC+deQ9r2e2WtBkw66UIbHKCXYoZjk19nbN0uOf
5kKpcNJVNB+7PvXc56nQoAgNr1quh9ypV62QW1URK3cImg6g8w4pTJPpGuZUFKnw
hzn7BIbbIGicfjnCrrYENfRc5e093kWAgqxG+im/iDJw0zQsrqRUyfMy8fW9lxHs
Oayg/2wnugIaAX19pHpsh8GOC7g4EXatmXh7N0iHkfplySo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:32 2025 by rpki-client