Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa
File: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (raw, json)
Hash identifier: zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=
Subject key identifier: DA:38:1B:71:1A:03:CF:A8:A2:36:6E:DE:2F:97:AD:AF:BD:C7:44:C5
Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial: 4FAE4BE3334187A611760331964397BE6E9E2FDA
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa
Signing time: Tue 29 Oct 2024 07:31:44 +0000
ROA not before: Tue 29 Oct 2024 07:26:44 +0000
ROA not after: Tue 28 Oct 2025 07:31:44 +0000
asID: 153121
IP address blocks: 2001:df4:56c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ae:4b:e3:33:41:87:a6:11:76:03:31:96:43:97:be:6e:9e:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Validity
Not Before: Oct 29 07:26:44 2024 GMT
Not After : Oct 28 07:31:44 2025 GMT
Subject: CN=DA381B711A03CFA8A2366EDE2F97ADAFBDC744C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:13:ca:b8:d2:f1:66:ce:76:66:88:91:12:
d9:4a:bf:1d:78:2b:db:82:62:bf:b5:7a:eb:2b:e0:
6a:64:b0:9a:ee:bb:07:c3:74:0b:6f:04:e3:f7:05:
9e:60:dd:07:76:2c:82:78:05:38:a0:16:81:0c:cf:
cf:71:a9:c5:aa:24:c3:c6:71:2a:8b:4d:bb:39:c5:
e6:60:3a:a7:e3:bc:04:be:68:f2:66:3f:4e:95:26:
ca:31:1b:1d:ff:62:bb:08:c6:16:17:ed:07:c4:3b:
e6:87:db:f4:ab:e7:1e:0d:97:33:da:d1:ea:1e:e1:
ff:3f:b3:6a:2f:00:e8:2c:a9:cc:59:1f:12:ae:af:
ff:0a:43:89:8e:c8:a9:d8:b3:1f:47:8b:e1:dd:49:
03:cd:07:2c:62:9f:22:18:a1:66:95:7a:6b:a1:17:
31:56:37:61:b4:68:1e:0f:d5:f1:be:03:02:16:9c:
b0:29:f9:7e:c0:8d:fe:f9:2a:da:26:e9:e5:ba:37:
17:6e:09:e5:a4:93:58:80:e9:51:3b:e2:19:f9:34:
91:ff:4d:a7:6b:16:dc:20:1a:37:03:f5:0b:0e:0d:
5b:73:6a:1a:6b:04:2f:52:9f:92:39:ca:53:da:40:
27:cc:cd:0b:a3:49:9a:1d:d9:97:04:fb:a7:cf:74:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:1B:71:1A:03:CF:A8:A2:36:6E:DE:2F:97:AD:AF:BD:C7:44:C5
X509v3 Authority Key Identifier:
keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:56c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:44:c0:87:5f:2d:dc:72:ed:da:f5:06:2d:29:e4:4c:06:27:
b5:82:c4:b1:c5:5b:88:01:ce:98:54:f7:52:a0:1b:36:36:cc:
07:8d:67:9c:3e:a2:dc:da:12:09:16:50:8e:74:ea:b2:7b:44:
09:b1:45:d6:0b:d7:2e:ef:9d:35:cc:2d:00:83:16:2c:9f:cf:
5f:db:a9:f4:0c:d7:1f:d5:df:73:d2:cc:e4:73:6e:96:43:1b:
85:8a:84:c1:35:15:a2:8a:e7:35:5d:0a:16:92:c1:8e:1b:db:
68:ed:f5:0a:cf:b7:85:a4:50:ff:e3:68:ff:4a:ee:76:76:2f:
ed:ae:aa:07:e5:05:18:1e:2f:92:82:98:95:17:40:9e:3d:4c:
17:22:fc:bb:0e:e2:cf:70:1c:1f:a9:9b:d3:5d:3b:1f:d3:14:
9e:00:aa:b2:6a:bb:6a:e8:92:9b:a5:14:a8:82:3d:29:04:bf:
62:9b:e3:73:6e:20:66:4e:10:61:ae:e5:76:fc:fd:6a:cd:99:
96:e1:be:06:75:df:b7:cb:c7:0f:f6:bf:81:52:24:ea:9b:ea:
c1:e8:be:a3:f9:17:c8:49:5c:e2:66:40:88:ee:f2:64:f5:7d:
d4:7a:54:82:0f:4a:79:64:d2:dd:97:d4:fd:b8:00:fe:94:d7:
d3:0d:55:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:52:58 2025 by rpki-client