Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
File: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (raw, json)
Hash identifier: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=
Subject key identifier: 98:88:47:7C:DB:C4:0F:F3:8C:BF:96:2D:A1:87:FE:86:B6:E0:7D:DF
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 2FAED040A4B533D86D892D2076503130EC76B72E
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
Signing time: Mon 01 Jul 2024 01:03:48 +0000
ROA not before: Mon 01 Jul 2024 00:58:48 +0000
ROA not after: Mon 30 Jun 2025 01:03:48 +0000
asID: 45722
IP address blocks: 2401:3340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ae:d0:40:a4:b5:33:d8:6d:89:2d:20:76:50:31:30:ec:76:b7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Jul 1 00:58:48 2024 GMT
Not After : Jun 30 01:03:48 2025 GMT
Subject: CN=9888477CDBC40FF38CBF962DA187FE86B6E07DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:54:ec:16:6e:4f:87:8e:b0:68:3f:23:41:
9a:2f:f5:39:fd:c9:48:10:de:0a:f2:8c:a0:29:c7:
77:f3:44:71:67:84:a3:0a:91:df:60:79:0a:9e:1f:
f7:2f:1d:b1:24:89:0e:c1:49:66:de:78:5b:4d:a3:
4e:a9:e3:91:69:a9:fd:73:38:4b:b5:c3:58:b8:f4:
75:c4:b5:52:9d:b1:86:23:41:94:88:19:b8:63:82:
cb:b0:fc:64:da:09:94:6a:6d:89:7e:a2:2d:38:16:
62:84:c0:b5:bd:61:97:31:7c:f5:c9:49:e0:95:00:
63:7e:b4:7d:c6:0c:0e:a9:d9:ab:00:39:9d:b6:08:
e4:90:5f:6a:bf:98:24:88:9e:0f:27:aa:8a:1d:3a:
33:89:7e:1d:d9:0b:cc:33:a6:ff:8c:ae:d6:5e:7e:
77:5d:df:46:d9:75:d6:3c:c3:e2:fc:29:0d:67:07:
32:03:5e:1e:d4:c6:54:e6:1b:75:d5:4a:f8:86:56:
43:62:f2:3a:5f:5c:5c:4f:2b:c8:2c:dd:b5:d6:22:
41:b0:19:fe:66:f7:33:d9:19:4f:ea:aa:01:61:7a:
f3:6d:45:9e:ef:43:44:47:c9:73:6c:0b:7a:98:91:
74:d1:18:71:9e:a7:30:49:00:82:d3:73:e2:e6:63:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:47:7C:DB:C4:0F:F3:8C:BF:96:2D:A1:87:FE:86:B6:E0:7D:DF
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:3340::/32
Signature Algorithm: sha256WithRSAEncryption
88:b0:f4:da:80:84:09:a5:17:94:08:5f:ca:c5:90:96:36:ea:
97:c1:68:f1:f9:29:05:7f:c7:00:ff:15:a2:01:18:54:e0:89:
cc:80:e8:24:67:3e:ee:d0:e4:6c:3f:5e:e4:de:a0:47:aa:91:
81:a9:43:32:cc:8c:71:fa:11:20:b1:ff:95:5f:1a:05:15:fc:
4d:a4:b7:2e:f4:c9:b0:c9:06:4e:d8:3c:7f:09:9c:24:b9:f4:
4e:11:67:b8:0c:8f:87:aa:79:87:37:da:62:52:ef:c2:5b:f0:
29:14:4e:c6:65:d4:c5:00:7b:d7:03:cc:8e:5d:29:52:d9:b6:
81:e0:1b:16:05:a8:83:6e:14:41:c3:51:9f:56:81:c5:b8:ce:
2d:0c:86:fb:4b:6f:08:62:b4:13:d9:d5:b2:ea:91:3c:3a:b0:
fd:54:bd:64:f8:ca:1a:de:e2:4c:01:ad:49:5d:d7:78:1f:06:
f6:f4:76:ee:c9:82:80:1c:8f:e5:8a:a5:57:5a:77:5c:b9:8a:
a9:50:11:46:e5:ff:96:fa:fe:66:5b:4c:67:73:e0:20:e4:53:
9d:b1:f2:a9:55:1f:b2:37:4b:df:ca:05:91:fa:4d:2b:e5:06:
ff:72:1f:34:cb:c6:f5:5d:dd:86:15:5a:41:39:f8:de:ca:78:
47:57:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:11 2025 by rpki-client