Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa
File: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (raw, json)
Hash identifier: Jn99cL4fgcEPbh24njIDYKuvldMIr2jNGSja0e4Hk1s=
Subject key identifier: AA:C4:9C:D9:AC:50:78:D6:7B:8A:99:50:39:C5:9E:84:27:6E:5B:8B
Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A
Certificate serial: 67FAF9FA15DC697B9BDD064CEA6C3BC55B3E8886
Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa
Signing time: Wed 24 Jul 2024 00:35:17 +0000
ROA not before: Wed 24 Jul 2024 00:30:17 +0000
ROA not after: Wed 23 Jul 2025 00:35:17 +0000
asID: 152841
IP address blocks: 2001:df4:cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fa:f9:fa:15:dc:69:7b:9b:dd:06:4c:ea:6c:3b:c5:5b:3e:88:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A
Validity
Not Before: Jul 24 00:30:17 2024 GMT
Not After : Jul 23 00:35:17 2025 GMT
Subject: CN=AAC49CD9AC5078D67B8A995039C59E84276E5B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:73:1b:ea:29:8f:24:b1:e9:d8:fa:6c:09:
5a:f1:91:04:7d:4e:6c:e5:cb:d1:82:03:b9:cc:bb:
13:c8:9b:88:7a:10:3f:7b:56:8e:2e:86:7b:ce:4d:
f9:a3:c1:97:8c:24:59:30:2c:7f:b6:8f:60:c8:7f:
84:84:1c:18:3c:25:33:ad:ea:33:aa:74:43:82:8e:
07:7f:80:ad:f5:68:7d:b4:18:af:1c:7a:c0:62:d2:
bf:3d:e4:6d:db:33:82:0f:57:3b:6b:43:f9:d6:cc:
47:80:f6:36:b7:37:85:85:dc:6e:8a:ae:36:ae:ac:
78:83:a4:e4:05:32:11:65:2c:54:dd:04:62:f5:45:
9e:11:d4:c7:3d:82:38:46:72:dd:63:e5:e9:53:ac:
e4:bf:8f:5d:2e:ea:46:d7:6f:44:64:45:d0:a9:3a:
0b:7b:d3:7d:2f:23:b6:24:b9:9d:d0:e2:76:6e:c5:
e9:31:0d:4c:c4:9d:90:08:9d:32:5f:b5:ee:a9:2b:
e1:e2:98:77:07:22:72:a1:7c:f8:5c:d0:43:7d:c6:
dc:8c:3c:d0:0d:90:df:13:dc:51:e9:0c:cc:54:59:
8b:56:5d:67:d9:a9:1b:89:b6:cf:71:e0:ad:f4:33:
8e:97:40:a2:47:1c:4c:27:e9:93:a9:08:66:a8:c7:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:9C:D9:AC:50:78:D6:7B:8A:99:50:39:C5:9E:84:27:6E:5B:8B
X509v3 Authority Key Identifier:
keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:cc0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:54:7c:01:46:48:01:fc:37:d8:c1:f9:03:f2:95:0b:a0:92:
3e:6a:f0:28:7d:e3:c4:f3:5e:8a:7f:25:9e:99:fd:34:ec:94:
74:1f:8c:d2:ec:b2:85:df:c2:57:3e:15:6d:53:88:73:d2:d0:
f8:aa:84:60:41:29:a4:cb:00:f4:09:25:2a:ab:f9:eb:5a:55:
45:1a:8b:6a:ec:0b:66:9f:9f:4e:0c:ea:e8:6f:70:cd:43:02:
ec:4a:4d:b4:16:85:4b:dc:f0:da:e8:44:10:fd:51:e8:67:d9:
76:dc:45:30:e7:20:a0:f2:fc:0a:09:d6:67:88:1b:fb:e6:3d:
6d:68:a1:4e:4a:fa:af:0e:56:c9:32:58:33:ca:1f:f0:02:dd:
54:a5:16:7f:06:ba:43:87:5a:c0:45:21:4d:89:ae:ec:db:83:
78:aa:fe:c1:60:d2:94:bf:9a:00:1a:32:83:fe:ef:37:38:9f:
82:a1:5c:a2:81:3e:f9:df:97:c8:f8:27:bf:74:e2:d3:8f:e2:
f7:04:d6:08:ee:1d:d7:91:b5:83:61:94:fe:d5:04:81:3b:99:
36:69:5b:b4:ce:56:90:e5:23:69:fb:ff:12:72:ce:5d:dc:b4:
fe:88:a9:7d:1d:88:1a:63:c6:2a:b1:5f:9f:fc:98:e2:f6:ca:
4d:8a:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:04:04 2025 by rpki-client