Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
File: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (raw, json)
Hash identifier: IUCIEqlw0aDxkN2SzZcyuNx63dxpSrTdRJT5NURSO24=
Subject key identifier: 0C:90:29:9F:A0:04:4E:BC:D0:71:CB:81:62:47:F4:95:AF:F8:71:11
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 0632750D8D7CAE127C91BBE2A8F9497F3E93A648
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
Signing time: Mon 01 Jul 2024 01:02:18 +0000
ROA not before: Mon 01 Jul 2024 00:57:18 +0000
ROA not after: Mon 30 Jun 2025 01:02:18 +0000
asID: 4787
IP address blocks: 2001:d10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:32:75:0d:8d:7c:ae:12:7c:91:bb:e2:a8:f9:49:7f:3e:93:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:18 2024 GMT
Not After : Jun 30 01:02:18 2025 GMT
Subject: CN=0C90299FA0044EBCD071CB816247F495AFF87111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:e9:82:98:f5:ff:b3:5b:0d:50:6c:de:d7:
10:98:dd:ff:b3:d5:16:9e:26:92:b3:b1:df:51:44:
2d:96:64:dc:03:a7:e9:7d:27:62:36:9d:7c:e1:ae:
df:62:09:50:18:86:d5:8d:0c:7e:42:5f:76:7f:2f:
56:60:ed:30:5b:a6:27:b8:cc:64:23:80:bf:39:49:
9a:6a:3c:cc:e6:ce:0d:53:a9:82:b8:23:ef:37:29:
8d:d7:a9:63:13:e9:ef:7d:25:ce:cd:70:d4:91:b4:
78:61:9b:96:d0:52:60:31:a0:8b:83:0f:42:ba:d1:
1a:d8:bc:03:3f:00:7f:97:71:84:a4:37:85:ac:c3:
77:d9:47:5e:90:3e:39:6b:98:ce:09:79:4d:0d:0b:
13:b1:cd:0e:d2:3e:fa:1a:a5:af:ac:14:fc:77:5b:
b4:25:c7:84:93:3b:86:db:81:89:03:5c:cd:05:ff:
4b:23:7f:38:9e:43:56:40:97:df:bd:39:31:3b:0e:
de:63:6d:39:e4:a5:45:1e:d3:08:e2:be:44:de:e5:
55:4f:ac:61:b7:a5:ef:d9:a4:fe:55:d5:23:67:2e:
33:e8:ea:2b:a9:0d:a3:24:f3:40:6d:48:fc:08:a5:
4d:82:f5:c5:b8:e3:11:d8:e8:bf:54:89:e0:2a:9e:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:29:9F:A0:04:4E:BC:D0:71:CB:81:62:47:F4:95:AF:F8:71:11
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:d10::/32
Signature Algorithm: sha256WithRSAEncryption
67:d4:65:b0:9d:fa:3c:38:32:5a:52:fa:35:d5:28:5d:2b:67:
1f:4d:42:48:b3:b7:a5:64:34:5f:54:63:f3:fc:e6:2d:31:20:
62:44:1d:7f:52:f6:1e:54:41:fd:a5:3f:69:f3:9b:ce:31:01:
f3:db:5b:71:a9:9a:2f:ec:06:3f:43:2c:07:33:4e:17:06:34:
18:15:4b:78:9f:7b:09:5f:1f:d2:5a:49:3a:58:03:5a:c8:42:
db:c1:39:88:e5:fd:a2:3c:fb:7c:0e:aa:aa:ec:06:80:e1:e9:
04:38:99:e0:f4:c0:cd:ff:d6:29:26:32:16:2f:b2:05:85:cc:
b7:71:c1:f3:72:ea:ac:04:cb:2b:6c:21:41:28:cd:e7:b4:47:
62:24:9d:dc:b6:1e:bf:a8:8c:fc:93:9c:6f:99:39:87:67:47:
8b:ce:e7:a1:50:19:2e:e6:c9:7c:ac:a4:3e:12:f6:59:08:f2:
3b:15:ef:5c:70:26:63:0d:ee:9d:1c:80:6e:ee:e5:33:46:19:
f2:47:36:1f:08:3d:f5:e1:9e:dc:d0:81:7a:a2:b5:53:0c:62:
6b:0f:78:4a:bd:e9:ea:ab:29:81:95:32:d2:85:5b:64:a2:c6:
f5:3c:ae:f9:7c:66:4e:c6:79:ee:af:18:d7:ad:7f:6e:a3:88:
7e:14:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:55 2025 by rpki-client