Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File: 323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier: vIksVMDmUp5AXo2GgDgyWcfxwYLInynbGr+iFnM1cvk=
Subject key identifier: 96:32:43:1D:0C:D3:BA:26:42:EA:02:BC:22:D8:92:E0:21:D4:D7:07
Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial: 73072271BA2AFB943B803AFC4CB647B57684D004
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time: Tue 09 Apr 2024 16:00:01 +0000
ROA not before: Tue 09 Apr 2024 15:55:01 +0000
ROA not after: Tue 08 Apr 2025 16:00:01 +0000
asID: 137329
IP address blocks: 2402:4840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:07:22:71:ba:2a:fb:94:3b:80:3a:fc:4c:b6:47:b5:76:84:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
Validity
Not Before: Apr 9 15:55:01 2024 GMT
Not After : Apr 8 16:00:01 2025 GMT
Subject: CN=9632431D0CD3BA2642EA02BC22D892E021D4D707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:af:b8:97:11:60:3a:5c:e1:4b:7b:ff:4a:
02:5b:02:73:c2:dd:3d:52:0f:4a:3d:dc:cc:41:7b:
ff:05:3b:44:ce:e8:c4:3b:9b:25:1b:62:6a:4d:11:
c8:98:eb:cf:43:1f:f3:b7:15:60:61:d2:72:8d:72:
51:7d:fd:ad:79:de:05:4d:d1:f2:2d:ff:0a:dd:1d:
1b:24:56:17:93:2f:01:ab:14:85:91:81:47:25:80:
62:4b:58:dd:32:62:36:67:b6:07:0f:71:8a:29:68:
cb:22:21:36:d8:a0:60:c0:55:8f:39:3d:25:55:77:
9b:49:96:96:b5:ba:d5:a4:67:1b:33:47:6b:e9:5c:
b2:eb:70:73:78:a0:6a:17:cb:9b:63:c5:6e:f6:77:
55:f1:f5:97:49:49:77:42:21:93:dc:0b:d9:22:be:
12:32:2b:14:1d:3a:06:bb:f6:c7:1b:f6:65:55:12:
5a:76:57:be:6e:fb:0d:b9:f7:37:76:05:f9:3f:2f:
78:d3:28:64:80:c2:bc:69:3e:73:ad:f8:3f:65:df:
56:9f:fb:18:e6:35:46:9c:1a:50:c2:f9:a0:e9:6a:
4c:17:f3:1e:f9:21:3c:ff:54:ec:dc:2a:b1:60:0b:
75:7d:e7:85:0f:f9:d3:ee:0f:8b:a2:56:3e:8e:20:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:43:1D:0C:D3:BA:26:42:EA:02:BC:22:D8:92:E0:21:D4:D7:07
X509v3 Authority Key Identifier:
keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4840::/32
Signature Algorithm: sha256WithRSAEncryption
5c:aa:2d:21:b7:94:7f:77:84:8f:82:70:71:27:8d:2a:8b:4a:
8a:65:ea:f1:ba:28:f1:5b:53:1e:6f:ee:16:5b:69:69:84:44:
23:00:56:d3:fb:b0:f6:09:c9:64:0a:fa:cd:69:2e:bf:0c:fe:
b4:63:4f:d2:99:58:5f:2f:64:04:68:62:a1:e9:15:2e:9a:a1:
63:3e:4d:26:c9:35:ed:48:c2:56:7c:79:ed:28:70:20:2d:c4:
d5:67:38:94:51:6f:55:0f:c9:51:ce:68:1e:3d:ec:85:99:66:
03:25:2f:a3:5a:11:ef:b2:ef:e5:68:14:8c:e5:ed:d1:c3:64:
ec:19:41:67:fe:22:cf:1e:e5:34:69:24:c1:d4:91:b6:9b:7d:
81:a8:2d:56:ce:25:4d:52:cd:a1:cd:99:62:aa:9d:e6:72:39:
59:7b:a3:98:33:70:4e:20:e3:40:71:8e:9b:c4:e8:e0:24:44:
1b:45:93:04:26:54:12:22:65:62:77:99:9f:ef:e3:2f:2e:00:
6c:34:b1:90:a4:2b:ed:2f:26:0d:4d:4f:5e:10:b8:af:ce:94:
6e:40:31:83:ee:dd:7a:82:3c:4d:bd:8c:10:8d:18:91:da:76:
42:a5:23:6c:33:98:6c:59:00:64:91:68:48:bb:8d:1b:fa:c7:
39:b3:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:39 2025 by rpki-client