Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
File: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (raw, json)
Hash identifier: aeTPtHLhzRmIJCPnkVEtuuu/KSO4LYDua/qaGvh3JI8=
Subject key identifier: 69:0E:10:71:DB:90:AC:78:30:7F:A1:70:0F:5D:D3:0D:AD:E6:E0:FE
Certificate issuer: /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial: 4E7AFBA65F2BD9321F705CA7164D2EFBC388EFCB
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
Signing time: Wed 22 May 2024 08:00:00 +0000
ROA not before: Wed 22 May 2024 07:55:00 +0000
ROA not after: Wed 21 May 2025 08:00:00 +0000
asID: 64315
IP address blocks: 2001:df7:1a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7a:fb:a6:5f:2b:d9:32:1f:70:5c:a7:16:4d:2e:fb:c3:88:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Validity
Not Before: May 22 07:55:00 2024 GMT
Not After : May 21 08:00:00 2025 GMT
Subject: CN=690E1071DB90AC78307FA1700F5DD30DADE6E0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:cd:7a:f4:88:7d:70:5a:e1:ec:9b:07:04:
75:bf:ee:8e:6c:e1:86:a2:46:5c:6a:6b:ad:5d:37:
29:0c:e1:f2:9c:af:74:e2:0b:3b:94:ac:14:1f:72:
90:13:12:06:bf:a3:b3:f4:8a:d2:04:a9:f7:fe:60:
5e:5b:c1:7d:2f:df:93:d2:da:bc:fe:ab:66:78:e8:
a6:42:aa:70:44:6f:0b:11:28:45:56:80:d7:86:1d:
b3:e4:c1:1e:6d:69:99:27:83:44:46:76:17:33:a7:
2d:9c:a3:fc:0d:b3:3a:a6:30:30:1d:72:f6:02:63:
18:ff:34:79:92:5b:2a:46:92:c6:c0:6a:5c:f1:13:
12:83:cc:21:ce:6c:a3:2f:98:72:45:3f:0b:54:a9:
c3:f3:ad:e8:eb:a9:7d:47:b3:2d:df:1c:9a:19:85:
ce:7b:4c:c9:51:f3:87:3d:5d:84:bc:f3:2d:3a:c5:
49:4d:12:fd:13:6f:35:2a:de:15:d0:1a:4d:58:e8:
fd:37:49:46:24:08:82:fa:17:fe:73:6f:46:f3:cc:
5f:21:b8:d6:7a:b7:63:69:23:be:72:6b:10:b4:fe:
77:cd:5f:94:46:ad:91:ba:9a:91:73:33:01:c7:b4:
33:5e:74:93:1d:ae:4b:bb:c0:4c:ec:76:58:02:cb:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:10:71:DB:90:AC:78:30:7F:A1:70:0F:5D:D3:0D:AD:E6:E0:FE
X509v3 Authority Key Identifier:
keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:1a00::/48
Signature Algorithm: sha256WithRSAEncryption
51:ee:08:9e:f0:b0:b5:bc:59:80:92:51:75:1e:3a:b6:20:cf:
cd:77:43:81:fb:29:63:3f:f2:cb:ba:5f:4c:df:e9:9c:49:5b:
90:57:3d:07:4f:4e:e9:a6:75:3b:8e:f6:02:e1:ba:2d:fd:b6:
55:3d:bf:db:24:ec:18:76:ec:2d:5e:09:ad:3e:d7:f8:44:4f:
18:a2:5e:9c:9f:6d:42:bc:7f:f0:a1:60:18:a0:54:26:9f:d8:
2c:f3:54:3d:a3:96:b5:68:15:ec:1e:b2:26:9a:13:94:0e:4f:
08:d2:b0:bc:69:0c:77:18:64:dc:bd:72:73:b4:18:7e:2d:ee:
18:1e:7a:98:3d:d0:3c:00:48:24:33:7c:d9:c8:c0:89:12:36:
e9:b0:a2:de:cf:db:95:57:14:0e:b2:68:e2:a2:69:40:8a:d8:
60:8a:7c:7f:22:e6:94:d7:83:a2:9c:61:f3:c9:ba:f8:89:ca:
a1:fc:77:a3:4f:2e:7d:b9:24:97:b0:0b:1b:85:c4:48:f6:99:
d6:c7:3d:7c:0d:bd:35:ce:91:43:37:0d:d6:8a:a4:53:44:93:
ef:b4:8b:5a:fd:f0:ed:39:cb:05:94:8c:f6:1a:39:bf:0e:ea:
e6:04:ef:99:b7:29:49:97:e4:f9:89:8e:c8:10:98:a5:6a:ff:
f9:5b:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:11 2025 by rpki-client