Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa
File: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (raw, json)
Hash identifier: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=
Subject key identifier: BD:48:77:E5:C4:9C:20:DA:2D:E7:D9:41:89:3D:F6:BA:12:D8:55:DE
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 0972780332131F53C4FC8CB1E34BF0309C8B2317
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa
Signing time: Fri 31 Jan 2025 12:00:01 +0000
ROA not before: Fri 31 Jan 2025 11:55:01 +0000
ROA not after: Fri 30 Jan 2026 12:00:01 +0000
asID: 9875
IP address blocks: 2001:f20:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:72:78:03:32:13:1f:53:c4:fc:8c:b1:e3:4b:f0:30:9c:8b:23:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Jan 31 11:55:01 2025 GMT
Not After : Jan 30 12:00:01 2026 GMT
Subject: CN=BD4877E5C49C20DA2DE7D941893DF6BA12D855DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:6e:2b:5f:70:1b:31:dd:1d:9d:9f:b8:60:
5f:fd:f9:98:19:61:09:5a:c9:8f:d6:c9:c7:1d:ac:
49:eb:cf:3e:78:b1:01:ec:2f:61:be:3d:bc:20:3f:
c1:f4:ab:a9:b5:61:b8:90:66:64:92:cf:88:b7:ec:
81:77:9a:69:1e:84:d9:23:e1:fa:a3:87:10:29:e3:
17:d1:ba:4b:06:d9:6f:df:f4:28:d5:77:67:b8:0d:
91:37:52:59:67:b3:88:6e:6b:f9:b8:1e:86:90:51:
28:bf:4f:73:34:b8:26:02:3d:0b:cc:95:3f:7c:b2:
73:43:1c:13:fc:a4:5e:30:56:69:8b:bc:0c:c9:2a:
07:bc:b1:47:22:23:ce:8c:62:79:39:a4:03:04:99:
09:96:33:e0:03:12:88:0a:c1:ee:3f:2b:d8:86:57:
fc:86:4d:db:32:09:04:d6:d7:12:cd:98:76:b3:d2:
0e:29:e3:f2:43:cb:90:ab:09:7c:37:c2:04:55:01:
a9:e8:9d:7e:db:eb:c0:33:8e:9a:7e:57:3f:6b:f3:
50:21:1d:a9:a8:0a:aa:06:55:25:79:c6:2c:f9:ca:
f2:6f:05:7d:46:9d:36:40:1f:02:b7:01:96:a2:d2:
51:a9:7d:56:56:32:90:c3:97:eb:ed:bb:f3:cf:4e:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:77:E5:C4:9C:20:DA:2D:E7:D9:41:89:3D:F6:BA:12:D8:55:DE
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:f20:1000::/36
Signature Algorithm: sha256WithRSAEncryption
08:fc:91:b0:2d:86:8e:f7:c5:2f:a8:1a:d6:8b:00:a5:bd:6f:
31:f1:93:0a:fc:75:ff:00:e1:3d:cb:01:99:d3:e1:22:6e:6a:
7d:3e:1c:cf:86:af:0f:d1:f1:8a:94:28:41:c6:82:69:dd:71:
21:96:78:93:ab:81:4f:0f:20:be:88:12:45:dc:7c:4b:e5:0d:
d5:c1:b7:60:6f:4f:54:27:c2:3e:22:1b:a0:d4:76:13:2d:b0:
9d:e6:51:29:64:67:58:48:72:c9:0b:83:61:f8:fe:d9:f6:f4:
2f:b0:47:ba:2b:90:b7:46:cb:a4:c3:b5:db:54:ce:c4:b5:80:
f0:b4:5b:c4:16:8f:61:66:ac:24:0b:48:a7:d1:f1:00:ac:03:
fd:78:3f:85:97:0c:09:fe:73:00:c7:8c:5e:94:f3:da:ca:5c:
bb:1b:de:35:f4:59:08:78:57:b3:a8:56:f0:f3:70:9a:33:1a:
d3:a0:04:dc:e8:9a:1a:d6:dc:59:7a:b9:b7:66:b5:84:61:d5:
47:fc:53:62:0b:02:e3:5c:ed:ab:e5:70:3d:63:13:3e:0b:e4:
88:9f:b7:96:6f:27:82:aa:39:e4:ec:c7:7e:f6:07:a4:ca:a8:
54:14:b0:91:05:47:0e:3d:c3:7c:11:de:d4:33:66:88:8d:6f:
a9:4d:d5:19
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUCXJ4AzITH1PE/Iyx40vwMJyLIxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG
MjhGODA2NjAeFw0yNTAxMzExMTU1MDFaFw0yNjAxMzAxMjAwMDFaMDMxMTAvBgNV
BAMTKEJENDg3N0U1QzQ5QzIwREEyREU3RDk0MTg5M0RGNkJBMTJEODU1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3K24rX3AbMd0dnZ+4YF/9+ZgZ
YQlayY/WyccdrEnrzz54sQHsL2G+PbwgP8H0q6m1YbiQZmSSz4i37IF3mmkehNkj
4fqjhxAp4xfRuksG2W/f9CjVd2e4DZE3Ullns4hua/m4HoaQUSi/T3M0uCYCPQvM
lT98snNDHBP8pF4wVmmLvAzJKge8sUciI86MYnk5pAMEmQmWM+ADEogKwe4/K9iG
V/yGTdsyCQTW1xLNmHaz0g4p4/JDy5CrCXw3wgRVAanonX7b68Azjpp+Vz9r81Ah
HamoCqoGVSV5xiz5yvJvBX1GnTZAHwK3AZai0lGpfVZWMpDDl+vtu/PPTkORAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUvUh35cScINot59lBiT32uhLYVd4wHwYDVR0j
BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1
MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG
ODA2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i
ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTMxMzAzMDMwM2Ez
YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gEDAN
BgkqhkiG9w0BAQsFAAOCAQEACPyRsC2GjvfFL6ga1osApb1vMfGTCvx1/wDhPcsB
mdPhIm5qfT4cz4avD9HxipQoQcaCad1xIZZ4k6uBTw8gvogSRdx8S+UN1cG3YG9P
VCfCPiIboNR2Ey2wneZRKWRnWEhyyQuDYfj+2fb0L7BHuiuQt0bLpMO121TOxLWA
8LRbxBaPYWasJAtIp9HxAKwD/Xg/hZcMCf5zAMeMXpTz2spcuxveNfRZCHhXs6hW
8PNwmjMa06AE3OiaGtbcWXq5t2a1hGHVR/xTYgsC41ztq+VwPWMTPgvkiJ+3lm8n
gqo55OzHfvYHpMqoVBSwkQVHDj3DfBHe1DNmiI1vqU3VGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:45 2025 by rpki-client