Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa
File: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (raw, json)
Hash identifier: eg/kuFURTauzqaIiXDQltLDj/rnBGgJRXcTpo0DqSLs=
Subject key identifier: C7:5E:87:7E:1D:A1:AC:CA:AA:15:A0:D7:AA:E6:8F:45:EE:AC:A0:91
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 08DA926697776E4B0967EA9969139C1952378182
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa
Signing time: Wed 04 Dec 2024 09:03:11 +0000
ROA not before: Wed 04 Dec 2024 08:58:11 +0000
ROA not after: Wed 03 Dec 2025 09:03:11 +0000
asID: 58396
IP address blocks: 2400:9c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:da:92:66:97:77:6e:4b:09:67:ea:99:69:13:9c:19:52:37:81:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Dec 4 08:58:11 2024 GMT
Not After : Dec 3 09:03:11 2025 GMT
Subject: CN=C75E877E1DA1ACCAAA15A0D7AAE68F45EEACA091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:3f:73:a4:d6:91:bc:41:a4:47:5e:6a:a3:
24:7a:43:e5:b8:36:48:48:96:81:0e:6d:c6:7a:7b:
48:e3:3d:ff:11:81:fa:f4:a9:9b:58:0d:cd:5d:82:
26:44:90:4b:0a:c3:c2:e2:b6:9d:e0:f1:ee:88:0d:
e2:29:78:ec:27:84:06:dc:48:8f:1f:76:c4:ed:07:
0c:60:47:68:e5:0d:fb:70:c2:e4:05:91:5f:1b:7e:
f5:c2:4d:0e:17:a3:91:3b:28:eb:ff:d9:11:58:46:
2c:c9:7b:7b:18:ef:89:f9:73:1a:6a:e2:eb:9c:a9:
15:cb:83:51:ab:39:94:41:3b:a0:50:64:c2:37:1e:
32:13:76:00:08:ff:52:81:21:3b:70:2b:36:c6:6e:
8a:b1:72:e0:20:e7:5d:5c:78:7a:5f:19:76:6c:e8:
f7:08:a7:a0:8d:96:7e:37:49:78:89:4c:d8:09:f8:
a7:ec:e6:f5:f8:1e:3d:03:58:f2:a9:af:4e:7a:40:
83:ee:74:d9:84:01:19:e8:ad:05:ff:3a:e0:f4:20:
28:26:76:33:74:c7:4c:07:51:c7:91:a3:b1:9a:fb:
7b:02:d0:77:7e:d7:b5:3b:67:58:40:0c:a6:a1:04:
d8:7d:7f:32:b1:77:53:62:09:4b:9d:5c:c4:bb:e9:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:87:7E:1D:A1:AC:CA:AA:15:A0:D7:AA:E6:8F:45:EE:AC:A0:91
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:9c80::/48
Signature Algorithm: sha256WithRSAEncryption
07:98:fe:e4:5a:0b:06:1b:cd:bf:ee:15:b6:1f:4c:73:46:6d:
84:0e:5e:1e:41:8b:01:7c:81:46:ec:67:96:e7:e3:b4:5f:96:
97:73:56:1a:85:5b:38:27:ec:f1:59:a5:3c:55:e6:67:a7:7b:
38:75:85:70:7d:60:e8:78:d2:13:48:63:5f:09:b6:b5:ce:cd:
bf:72:73:7b:60:7b:f8:24:3b:de:66:0d:29:4b:56:ad:17:31:
68:e8:6d:e0:2e:a0:64:d2:3e:53:c9:84:21:5d:c0:da:4c:36:
91:3a:ea:15:c8:da:fa:aa:ac:f3:7e:dd:b1:7b:93:0c:4e:ad:
7d:0c:89:bc:a5:d9:d0:5e:d2:7a:ef:6b:06:6c:d0:c4:42:27:
be:e0:cb:a5:97:30:81:c3:94:2a:69:41:56:bf:4d:f2:26:98:
da:93:83:9a:d4:21:18:3a:fa:d9:c5:58:52:95:83:2a:d5:85:
d7:64:15:e2:d9:00:1c:4c:51:9d:2c:d3:10:bb:38:a7:94:e5:
f9:6c:07:43:65:1a:6d:cc:35:e8:26:db:db:26:ee:8a:64:29:
94:7c:b8:cd:7c:d6:04:17:21:c1:80:1a:9a:37:44:5d:07:80:
0b:50:51:51:ae:3d:0f:0b:b0:ca:64:c2:59:f9:57:97:ba:cf:
da:81:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:11 2025 by rpki-client