Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa
File: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (raw, json)
Hash identifier: wsdClnmhfzvKBghPQdb/NtdMAZBgpQ1fjcmmcem5VyY=
Subject key identifier: B0:39:76:19:72:E2:99:32:25:FF:85:4E:4E:59:4E:42:01:7D:CC:C0
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 0BBE96BAE72108FF2345A191328CB91C73222835
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa
Signing time: Fri 21 Jun 2024 15:12:54 +0000
ROA not before: Fri 21 Jun 2024 15:07:54 +0000
ROA not after: Fri 20 Jun 2025 15:12:54 +0000
asID: 58396
IP address blocks: 2400:9c80:88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:be:96:ba:e7:21:08:ff:23:45:a1:91:32:8c:b9:1c:73:22:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jun 21 15:07:54 2024 GMT
Not After : Jun 20 15:12:54 2025 GMT
Subject: CN=B039761972E2993225FF854E4E594E42017DCCC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:17:21:1d:83:c2:e4:ef:b5:c5:a8:18:da:
3a:0a:d2:52:39:0f:97:ba:5d:55:f4:e8:ce:98:da:
8e:c2:df:b6:35:81:6b:d4:7a:f6:d7:68:20:7b:eb:
b8:34:82:e5:64:28:49:85:ee:63:6e:6c:fe:0a:6e:
bf:e7:59:ef:0e:58:f7:4b:e8:83:df:50:64:20:d9:
9e:83:3b:df:a7:0b:e5:e7:26:12:3f:c3:21:bd:c1:
63:62:35:91:ee:56:14:74:54:8a:24:8e:e4:7b:2a:
a6:f5:5d:f9:9a:17:1b:44:8c:21:43:5b:77:1d:bd:
67:d4:f2:25:66:52:1f:d3:0f:5f:dd:46:08:5d:ef:
73:0e:43:f0:7f:81:ad:48:48:eb:f4:ac:59:7f:61:
9a:eb:19:e6:48:92:32:bd:34:3d:c9:0f:20:49:77:
f2:11:6b:91:7a:fb:d9:09:64:9e:ae:5f:94:01:cf:
56:85:c7:10:c9:d6:8b:11:29:36:72:95:0e:9e:51:
af:40:3e:1e:e2:ce:7f:d0:2d:44:c5:50:78:bd:a2:
e4:d0:4e:d8:46:4f:af:15:3b:b7:26:d7:0a:16:c8:
70:d3:35:f3:3d:c8:28:a1:a6:2b:17:73:34:cd:4f:
cd:2c:45:e6:d8:ca:70:1e:a8:42:75:61:b5:77:70:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:76:19:72:E2:99:32:25:FF:85:4E:4E:59:4E:42:01:7D:CC:C0
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:9c80:88::/48
Signature Algorithm: sha256WithRSAEncryption
64:c1:07:d6:5a:c5:9a:0b:dd:c7:3c:b6:99:f7:ec:34:7e:80:
b0:e0:e3:61:bb:8b:d6:2b:5a:f1:82:dd:61:db:4a:a9:6f:04:
56:33:78:f5:6e:b6:59:4c:13:78:91:51:f5:67:6a:13:3d:1d:
00:10:8c:2c:34:c6:c6:da:7e:ca:19:4b:2a:b4:3a:3f:c6:89:
2c:15:d8:b9:75:69:3e:31:2b:5f:60:7e:5f:eb:0a:84:57:68:
15:37:f3:82:9d:81:a9:e3:08:e3:cf:94:eb:c2:38:a3:4e:80:
87:4b:70:98:4f:57:da:48:a2:b6:9f:cf:9d:b4:74:f4:83:29:
0b:5d:af:b0:9c:15:da:b3:e5:14:70:e6:d6:27:7d:78:e9:94:
25:6d:45:00:ba:8b:8e:33:d5:20:c1:35:4b:9c:0f:ec:34:c0:
8d:64:7f:5a:aa:a2:fc:82:fa:e4:2b:45:9c:4e:bc:2e:b1:74:
6e:d9:1d:ef:5f:a9:91:a7:04:bc:45:36:df:67:45:8a:74:b4:
ef:2a:fd:1c:a2:a8:04:ea:4f:71:15:e7:c2:f7:05:9b:91:99:
fa:7f:b5:80:af:d7:94:bd:fb:55:c1:f9:90:e4:8d:0d:b4:ce:
6b:74:d7:30:55:0a:f3:91:9d:1d:be:ba:06:41:cb:23:d0:37:
ac:47:4f:bf
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUC76WuuchCP8jRaGRMoy5HHMiKDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1
N0NFQUQ4QzAeFw0yNDA2MjExNTA3NTRaFw0yNTA2MjAxNTEyNTRaMDMxMTAvBgNV
BAMTKEIwMzk3NjE5NzJFMjk5MzIyNUZGODU0RTRFNTk0RTQyMDE3RENDQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhhchHYPC5O+1xagY2joK0lI5
D5e6XVX06M6Y2o7C37Y1gWvUevbXaCB767g0guVkKEmF7mNubP4Kbr/nWe8OWPdL
6IPfUGQg2Z6DO9+nC+XnJhI/wyG9wWNiNZHuVhR0VIokjuR7Kqb1XfmaFxtEjCFD
W3cdvWfU8iVmUh/TD1/dRghd73MOQ/B/ga1ISOv0rFl/YZrrGeZIkjK9ND3JDyBJ
d/IRa5F6+9kJZJ6uX5QBz1aFxxDJ1osRKTZylQ6eUa9APh7izn/QLUTFUHi9ouTQ
TthGT68VO7cm1woWyHDTNfM9yCihpisXczTNT80sRebYynAeqEJ1YbV3cGppAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUsDl2GXLimTIl/4VOTllOQgF9zMAwHwYDVR0j
BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF
QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF
QUQ4Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i
ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhMzgzODNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAJyAAIgw
DQYJKoZIhvcNAQELBQADggEBAGTBB9ZaxZoL3cc8tpn37DR+gLDg42G7i9YrWvGC
3WHbSqlvBFYzePVutllME3iRUfVnahM9HQAQjCw0xsbafsoZSyq0Oj/GiSwV2Ll1
aT4xK19gfl/rCoRXaBU384KdganjCOPPlOvCOKNOgIdLcJhPV9pIorafz520dPSD
KQtdr7CcFdqz5RRw5tYnfXjplCVtRQC6i44z1SDBNUucD+w0wI1kf1qqovyC+uQr
RZxOvC6xdG7ZHe9fqZGnBLxFNt9nRYp0tO8q/RyiqATqT3EV58L3BZuRmfp/tYCv
15S9+1XB+ZDkjQ20zmt01zBVCvORnR2+ugZByyPQN6xHT78=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:23 2025 by rpki-client