Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa
File: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (raw, json)
Hash identifier: /XG+lytKF9G+VA2amT+fC00B7QHTsK+t9xE6Tjsy41A=
Subject key identifier: F6:C1:6F:11:B0:94:59:DB:BA:EA:25:6D:1D:B6:1A:05:80:14:77:12
Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Certificate serial: 5F816A01309038EAD1DACC3C8E58AFC26FE6F5E3
Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa
Signing time: Mon 01 Jul 2024 01:03:42 +0000
ROA not before: Mon 01 Jul 2024 00:58:42 +0000
ROA not after: Mon 30 Jun 2025 01:03:42 +0000
asID: 9657
IP address blocks: 2403:9500::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:81:6a:01:30:90:38:ea:d1:da:cc:3c:8e:58:af:c2:6f:e6:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Validity
Not Before: Jul 1 00:58:42 2024 GMT
Not After : Jun 30 01:03:42 2025 GMT
Subject: CN=F6C16F11B09459DBBAEA256D1DB61A0580147712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:d9:89:3c:cc:a1:0f:54:2c:65:17:5b:2a:
74:0e:96:96:35:f2:99:24:cf:45:67:0f:2a:b2:d2:
fe:16:b6:22:53:de:c7:2b:14:b1:a7:29:ca:cd:d8:
ed:99:a1:6e:9e:48:f8:83:39:39:aa:f4:c1:e8:75:
a5:9b:1e:72:43:3b:34:93:e7:8f:5f:92:3b:aa:d2:
05:22:ca:2e:ef:20:c0:c1:dd:31:27:f5:b6:02:06:
2f:7b:74:ca:af:50:fb:d8:bf:47:67:a1:5e:9e:7a:
21:d2:79:b5:ab:36:77:4d:15:1b:c1:68:89:27:91:
29:c2:1b:0f:3a:81:20:0a:64:2d:96:42:31:0e:f4:
14:d3:4f:24:77:c0:45:4c:29:4c:67:80:42:cb:6d:
af:ae:00:e6:ae:73:f7:1e:47:eb:d0:af:04:8c:75:
cb:36:87:e4:fd:de:37:e3:e0:90:28:1a:bc:dc:2b:
3e:71:17:13:15:f5:3c:1d:68:ac:67:09:7c:7d:74:
ad:99:f7:c1:84:8e:3c:c2:5f:fe:1a:9f:93:27:7a:
17:b4:8a:8d:de:b7:0f:47:84:bd:98:a2:5b:d0:e4:
8d:3a:6f:e6:34:db:1b:a1:aa:19:98:e6:12:85:37:
fc:01:05:40:6e:81:aa:ef:0f:a6:0f:20:70:3f:86:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C1:6F:11:B0:94:59:DB:BA:EA:25:6D:1D:B6:1A:05:80:14:77:12
X509v3 Authority Key Identifier:
keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:9500::/32
Signature Algorithm: sha256WithRSAEncryption
77:b4:55:0b:7c:7a:95:9a:70:83:d1:1a:38:42:4e:a3:e4:a9:
1c:75:c1:23:c6:82:ae:b5:1d:d2:37:28:0d:37:69:3c:81:af:
54:43:16:e7:ba:2a:41:3d:ef:0f:15:a7:8e:9f:96:32:e0:d4:
40:02:1a:c2:4e:93:bb:53:9e:b7:e5:bd:d9:c0:68:8f:c8:0a:
07:d6:8f:f4:e2:8d:37:96:b9:63:be:ab:4e:2e:20:4e:90:28:
17:f7:a9:1c:f8:aa:d5:00:dc:4a:2b:bf:e9:02:e4:69:aa:ca:
1f:0d:cc:5a:53:59:da:48:bd:3d:61:89:7c:f2:62:b0:62:f0:
5e:31:93:ca:42:e6:10:53:c2:bf:91:f6:3c:d4:5c:78:a2:eb:
55:5d:b2:f6:5b:12:63:9a:87:ef:31:8c:f0:c5:2e:b1:5d:3c:
4e:f7:6a:ca:44:b6:4c:a6:c6:a9:43:e1:b3:fd:05:66:bd:bc:
f7:30:b9:aa:87:1c:fc:c5:84:b2:95:91:28:64:e6:33:fe:76:
13:b5:18:30:c0:b9:77:ae:26:e1:27:94:20:32:c0:e2:19:a1:
e0:d5:13:89:b5:85:3c:3b:0c:3d:2f:95:b7:d5:2c:13:c4:e6:
8b:54:da:67:2b:74:cf:e2:6c:62:e7:25:72:34:7b:b5:08:4c:
1b:69:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:25 2025 by rpki-client