Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
File: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (raw, json)
Hash identifier: vwG6rdNeDAh4jG1/O0P49gXsPwynq5he4dtgM3d7KkM=
Subject key identifier: 8C:DD:B5:61:0B:58:60:1E:AC:D8:D5:41:C3:C2:A6:95:12:9B:54:2E
Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
Certificate serial: 202862E6D5883E117FD948B65DA172865DCF5A67
Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
Signing time: Fri 05 Jul 2024 04:00:01 +0000
ROA not before: Fri 05 Jul 2024 03:55:01 +0000
ROA not after: Fri 04 Jul 2025 04:00:01 +0000
asID: 55674
IP address blocks: 2405:b40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:28:62:e6:d5:88:3e:11:7f:d9:48:b6:5d:a1:72:86:5d:cf:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
Validity
Not Before: Jul 5 03:55:01 2024 GMT
Not After : Jul 4 04:00:01 2025 GMT
Subject: CN=8CDDB5610B58601EACD8D541C3C2A695129B542E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:79:bb:d0:44:31:f7:32:c5:46:1b:3e:6d:
fe:f4:e7:46:0a:f7:37:94:80:cd:d0:96:e2:c4:8e:
d5:25:c2:92:aa:49:a8:56:13:dc:11:cc:b8:72:12:
ea:98:8d:5c:3b:2e:0c:1a:55:b2:5f:19:c7:4e:65:
78:12:a2:a8:cf:9d:23:85:d7:de:28:49:6c:05:7f:
b7:3d:2a:12:cb:4d:72:0c:43:a6:83:ff:12:bd:5e:
87:9c:d9:58:90:1f:19:54:4c:77:a2:9d:e3:01:ce:
7e:75:c1:be:c4:a2:24:f5:13:16:45:80:f9:a4:1a:
f9:8c:ea:f7:b6:8a:4f:88:0d:fa:5a:24:dd:ea:91:
36:9a:65:44:bf:fb:b2:16:ca:cf:54:94:e4:3d:a1:
02:09:39:54:33:ab:14:a1:9f:e2:bf:9d:50:76:9d:
31:68:cc:6f:e5:fa:e7:e4:1d:e3:61:30:d0:23:58:
bb:a8:b0:41:aa:e6:c9:12:d5:33:cc:03:46:9b:ab:
c8:cc:c9:9a:bf:64:de:bc:5b:d3:77:f7:45:3a:12:
85:90:84:c6:dc:57:6d:8e:73:29:e3:a4:95:54:d3:
43:70:20:23:74:24:e0:3e:98:00:ad:b8:37:3d:40:
f3:28:9b:78:9d:41:12:6d:19:6f:9c:49:c0:7f:4c:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:B5:61:0B:58:60:1E:AC:D8:D5:41:C3:C2:A6:95:12:9B:54:2E
X509v3 Authority Key Identifier:
keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:cb:d1:e7:f4:13:4e:1f:62:67:6f:bb:33:65:8d:cc:7b:21:
56:d4:87:0d:c9:06:4e:6b:f5:12:eb:e6:5e:d2:84:41:a8:1a:
0f:29:3a:04:2b:6a:56:16:a6:6a:a7:bd:d7:e1:e2:b8:4d:94:
2d:b7:a0:2a:fe:da:0d:cc:5a:c9:04:4b:b3:15:ab:c8:a6:d5:
c1:49:65:08:11:6c:00:e4:68:21:2a:15:b2:45:f5:5e:0c:13:
6c:9a:15:16:9b:19:c5:d0:fa:eb:f1:6b:d1:64:ad:62:91:cd:
b4:94:52:87:c9:cb:9e:25:13:c0:66:5b:86:33:73:bb:a9:06:
23:53:4f:ff:f1:9c:28:6b:1a:70:f3:f9:fd:c6:e4:f6:c5:24:
11:6d:06:61:0f:d2:e1:05:89:08:6a:6d:eb:8b:3a:19:a7:1c:
8a:8d:11:de:bf:62:d0:6c:02:e1:ea:6a:f0:83:46:9d:e7:45:
1e:e1:33:72:05:fe:23:29:43:00:af:79:d1:c0:c4:9b:dd:62:
85:d0:8e:5e:2c:ab:f5:b2:e6:b4:19:84:56:c8:64:93:7f:6d:
59:f5:53:1d:3f:b6:3a:a7:5a:0e:53:3c:ac:9e:b1:c5:da:d3:
8b:d9:bb:e8:55:13:f7:60:00:4e:8e:fd:52:56:c6:52:e0:ac:
81:81:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:14:01 2025 by rpki-client