Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
File: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (raw, json)
Hash identifier: mBlqjGl9dwK44fL9A0EbXx+b7lY36Zw+A0Eca+sI0yw=
Subject key identifier: 4D:AC:01:1C:FD:4D:68:79:66:76:10:C3:AB:0A:6D:1F:9F:63:D1:B0
Certificate issuer: /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial: 0F61DBB770DAFA6D2409C3602FA7069325ACC18F
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
Signing time: Mon 01 Jul 2024 01:04:53 +0000
ROA not before: Mon 01 Jul 2024 00:59:53 +0000
ROA not after: Mon 30 Jun 2025 01:04:53 +0000
asID: 136106
IP address blocks: 2400:d740::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:61:db:b7:70:da:fa:6d:24:09:c3:60:2f:a7:06:93:25:ac:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Validity
Not Before: Jul 1 00:59:53 2024 GMT
Not After : Jun 30 01:04:53 2025 GMT
Subject: CN=4DAC011CFD4D6879667610C3AB0A6D1F9F63D1B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:4e:da:e1:a8:66:7a:5a:43:43:29:63:a3:
d3:d2:58:05:36:9d:bc:38:72:a2:ab:54:4a:95:23:
37:87:50:86:80:a6:f9:03:b0:64:45:72:37:96:90:
92:72:d9:6b:93:8e:33:72:94:fd:03:76:28:0c:0c:
5e:33:93:46:f4:12:57:91:51:14:0b:1c:db:48:6d:
e3:b9:89:b3:66:2f:88:5c:1d:ee:a0:cd:5a:c0:5c:
53:05:e8:47:3c:81:c6:40:94:49:7a:39:1c:1a:cc:
6f:50:62:0b:e1:b3:7b:b9:78:90:6b:ca:e0:6a:4d:
bd:49:12:ec:77:47:71:59:ac:50:93:31:37:ce:6b:
72:9b:7e:cd:93:5d:9c:d7:51:b4:2a:98:f3:a3:37:
ab:77:6d:4a:d4:4b:d9:4e:2a:9f:8e:e1:41:da:8e:
82:ee:7b:fb:dc:ba:76:20:32:f7:24:40:d7:d2:25:
a0:df:c7:e1:f4:a7:a3:ca:68:c2:1a:c3:52:7e:bb:
0d:ab:21:bc:61:10:51:fd:c5:7d:71:e8:17:29:7d:
f3:1b:88:33:eb:83:20:e8:a2:09:17:9e:66:09:34:
2b:b5:a8:ae:b2:55:7d:fb:51:cd:22:db:9a:35:f9:
b3:91:a2:ec:ce:9a:0f:31:49:d4:4e:b3:6d:87:61:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AC:01:1C:FD:4D:68:79:66:76:10:C3:AB:0A:6D:1F:9F:63:D1:B0
X509v3 Authority Key Identifier:
keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d740::/32
Signature Algorithm: sha256WithRSAEncryption
36:b1:9e:5d:1e:08:e6:5f:de:32:d0:c1:92:8b:0f:10:d9:2e:
39:10:6c:25:22:e5:88:b4:eb:c2:6e:cf:1c:11:4e:25:a2:df:
34:f2:90:d8:0d:fb:70:22:95:fa:b4:2a:40:56:1f:ff:68:2c:
aa:ac:a1:17:d0:86:14:24:97:02:47:83:f7:94:ad:d5:5b:9a:
8a:83:5b:63:5c:74:c6:5e:9e:70:fc:57:55:72:54:34:ca:ca:
f9:45:76:e6:23:55:24:71:2c:5e:45:17:ae:b2:96:33:23:82:
94:61:cf:e3:94:58:f4:5b:b5:9c:37:9a:f9:ef:e6:74:91:59:
ed:f0:e9:14:e6:c7:cf:6b:cf:c7:19:5e:cc:5f:fe:c6:20:b5:
29:1c:e2:b3:d5:6e:a2:2b:60:0a:65:f3:bf:58:c5:81:b1:7d:
07:93:34:31:2e:1f:16:ef:05:50:ad:2b:92:50:1d:9a:04:ce:
88:b7:63:b3:7f:34:34:71:68:ba:62:c2:6c:9b:a6:95:21:a3:
1e:f3:56:cd:30:52:16:e9:27:ff:e4:1f:36:14:9f:82:05:6d:
a8:08:8f:f9:c8:ce:cb:74:c1:d0:49:04:81:c1:73:cc:52:25:
c5:43:58:d1:45:24:ad:ad:09:11:16:ef:79:e1:37:07:f7:39:
f2:c0:bf:90
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUD2Hbt3Da+m0kCcNgL6cGkyWswY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJB
RkY2MzRDQzAeFw0yNDA3MDEwMDU5NTNaFw0yNTA2MzAwMTA0NTNaMDMxMTAvBgNV
BAMTKDREQUMwMTFDRkQ0RDY4Nzk2Njc2MTBDM0FCMEE2RDFGOUY2M0QxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpT07a4ahmelpDQyljo9PSWAU2
nbw4cqKrVEqVIzeHUIaApvkDsGRFcjeWkJJy2WuTjjNylP0DdigMDF4zk0b0EleR
URQLHNtIbeO5ibNmL4hcHe6gzVrAXFMF6Ec8gcZAlEl6ORwazG9QYgvhs3u5eJBr
yuBqTb1JEux3R3FZrFCTMTfOa3Kbfs2TXZzXUbQqmPOjN6t3bUrUS9lOKp+O4UHa
joLue/vcunYgMvckQNfSJaDfx+H0p6PKaMIaw1J+uw2rIbxhEFH9xX1x6BcpffMb
iDPrgyDoogkXnmYJNCu1qK6yVX37Uc0i25o1+bORouzOmg8xSdROs22HYTazAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUTawBHP1NaHlmdhDDqwptH59j0bAwHwYDVR0j
BBgwFoAUVf6Snz3xjktbxDCXaapscq/2NMwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Yzk3NmVjNS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC81NUZFOTI5RjNE
RjE4RTRCNUJDNDMwOTc2OUFBNkM3MkFGRjYzNENDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJBRkY2
MzRDQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04
NmRhLWQ1NTdmODRhMjM2NC8wLzMyMzQzMDMwM2E2NDM3MzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA10AwDQYJKoZI
hvcNAQELBQADggEBADaxnl0eCOZf3jLQwZKLDxDZLjkQbCUi5Yi068JuzxwRTiWi
3zTykNgN+3Ailfq0KkBWH/9oLKqsoRfQhhQklwJHg/eUrdVbmoqDW2NcdMZennD8
V1VyVDTKyvlFduYjVSRxLF5FF66yljMjgpRhz+OUWPRbtZw3mvnv5nSRWe3w6RTm
x89rz8cZXsxf/sYgtSkc4rPVbqIrYApl879YxYGxfQeTNDEuHxbvBVCtK5JQHZoE
zoi3Y7N/NDRxaLpiwmybppUhox7zVs0wUhbpJ//kHzYUn4IFbagIj/nIzst0wdBJ
BIHBc8xSJcVDWNFFJK2tCREW73nhNwf3OfLAv5A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:14 2025 by rpki-client