Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
File: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (raw, json)
Hash identifier: YKtgnb5kKX8bPRqoLdO+lXtvjcZUmkJ3dEdtuow//ZM=
Subject key identifier: 51:8A:B3:69:AB:D6:20:D6:7A:15:D9:BB:0E:CC:C1:7C:88:EE:CE:EC
Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial: 6B30B904D8B843B17F2C0FAB0F8450A563DDA7BA
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
Signing time: Tue 07 May 2024 03:02:30 +0000
ROA not before: Tue 07 May 2024 02:57:30 +0000
ROA not after: Tue 06 May 2025 03:02:30 +0000
asID: 63490
IP address blocks: 2401:3240::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:30:b9:04:d8:b8:43:b1:7f:2c:0f:ab:0f:84:50:a5:63:dd:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Validity
Not Before: May 7 02:57:30 2024 GMT
Not After : May 6 03:02:30 2025 GMT
Subject: CN=518AB369ABD620D67A15D9BB0ECCC17C88EECEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:87:86:5e:e4:01:fd:8e:8d:a2:85:1f:b7:
12:e7:c3:0b:69:51:45:9b:4b:21:86:c6:3c:dc:5d:
98:37:89:79:2d:d5:45:08:62:27:c5:f8:e0:c8:88:
f6:e9:ff:48:33:53:19:59:2b:1f:b0:c1:10:45:b3:
95:ac:9d:3a:bf:15:b4:9d:49:13:2d:9a:af:dc:91:
d3:11:99:45:d3:ed:81:40:4a:e7:01:2b:75:13:4e:
8f:a3:b4:b0:b4:e2:10:ac:06:b5:1f:41:5c:09:ea:
2a:8a:4f:6c:33:fa:5c:0c:7c:dc:9d:7c:76:1a:96:
58:55:3b:47:88:c4:78:10:6d:22:8c:03:ba:21:6c:
55:1a:f8:78:a7:93:6b:e6:6b:7c:a6:3f:70:1f:50:
fc:68:2f:82:76:a4:c9:66:d0:58:0d:8b:df:79:19:
57:6b:1b:d5:13:68:a8:2f:3f:40:de:e6:e4:3e:db:
08:81:9f:92:7e:4a:18:45:1d:8a:d2:58:36:cf:ee:
50:be:d0:9f:e6:e1:aa:61:e6:f1:32:a1:90:d0:9e:
10:5f:ca:fe:ee:e2:eb:3f:66:fe:e5:8b:55:5d:af:
5e:af:da:3e:36:40:5f:31:3a:1c:09:c1:3a:2f:c1:
1c:1d:77:dd:4d:f3:6d:b2:f2:f5:a7:c3:eb:bf:b0:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:B3:69:AB:D6:20:D6:7A:15:D9:BB:0E:CC:C1:7C:88:EE:CE:EC
X509v3 Authority Key Identifier:
keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:3240::/32
Signature Algorithm: sha256WithRSAEncryption
11:a8:0d:2b:85:15:85:c0:d3:c2:f3:99:d6:94:9e:a5:00:38:
40:27:01:1e:6f:74:c2:3a:06:e2:da:9d:fe:41:4c:3b:73:77:
65:77:d7:c7:e8:34:08:45:1a:48:69:05:4d:f4:48:d8:ba:d6:
51:57:74:85:82:16:95:7f:38:5c:03:5d:05:6f:45:79:41:b2:
f8:c3:d7:5e:d8:93:e3:7c:4d:37:05:ab:50:b3:6f:6b:21:6a:
2a:a4:93:60:24:f2:7d:ec:8e:16:67:e7:2c:63:2e:0d:71:f1:
76:66:5c:b1:eb:b2:f9:88:82:a0:59:d6:e0:c3:3f:e7:d5:2c:
04:f7:5d:bb:e0:1e:07:da:f2:be:15:e7:91:d1:13:34:d1:ea:
8e:d8:78:e7:c2:36:f5:86:75:94:f6:07:44:46:44:8a:b4:f2:
d1:9f:e5:bd:9d:db:e6:dd:87:84:a4:91:4f:73:fb:fa:a2:c0:
8c:b7:ec:a6:44:a6:6f:94:59:62:13:bf:31:80:4f:73:44:de:
9a:f7:9c:bb:67:a2:20:72:04:83:71:1d:c1:01:17:a6:c8:78:
1a:65:9a:d7:57:ef:3c:f7:4d:34:cf:c8:56:49:40:7c:74:f7:
1a:25:59:d2:eb:eb:4e:5c:e2:d8:bb:c5:0a:f1:2e:85:eb:e9:
a6:9d:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:41 2025 by rpki-client