Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: yfK5tcxLmkBKPrtVwqrZP7HQWXIVQHCnpXKuGTbT4MM=
Subject key identifier: CC:69:F9:B6:A5:A2:F1:DE:5B:8E:AD:C6:11:E4:E0:26:03:89:70:BE
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 2FFDACCDBA5369128AA02C975D4756646E61F686
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 02 Jun 2024 14:00:01 +0000
ROA not before: Sun 02 Jun 2024 13:55:01 +0000
ROA not after: Sun 01 Jun 2025 14:00:01 +0000
asID: 140413
IP address blocks: 2406:13c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fd:ac:cd:ba:53:69:12:8a:a0:2c:97:5d:47:56:64:6e:61:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Jun 2 13:55:01 2024 GMT
Not After : Jun 1 14:00:01 2025 GMT
Subject: CN=CC69F9B6A5A2F1DE5B8EADC611E4E026038970BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:c8:55:a0:10:c8:8f:70:4d:94:00:7d:65:
ef:4d:b1:e4:83:bc:0b:c7:4f:cd:66:26:61:27:de:
76:93:cf:65:e8:e9:d8:f9:62:3a:47:1a:85:ac:b4:
5c:02:1a:1e:c5:c4:53:5a:a0:ae:05:b2:00:f7:51:
6d:17:6e:6f:08:64:9c:b0:65:7d:9d:da:ca:c6:21:
69:0b:32:e9:b3:0c:ed:e0:9b:e6:e4:77:e3:a3:d7:
9c:8e:46:96:a9:2c:df:2c:c3:70:a4:43:9b:d1:b9:
79:09:00:f9:52:94:a5:5a:6d:a4:d6:94:11:8c:5b:
dc:b3:ab:76:9d:29:a9:1c:98:4f:e7:fe:3d:75:7e:
b6:99:eb:72:6e:9a:3c:83:c8:7b:27:21:1a:70:0a:
3f:eb:ba:97:a0:f0:7a:31:ad:8d:dc:08:21:77:c9:
47:06:20:11:66:16:13:ad:cf:af:0a:b1:9a:69:45:
90:d0:8f:c0:5a:bd:16:bc:6d:96:cb:a2:06:24:2b:
20:12:9e:5d:0d:74:de:26:74:86:9d:96:76:50:13:
11:49:94:1c:a1:72:3d:0f:16:d6:b3:16:1e:70:4f:
a9:84:31:6d:01:43:cd:39:3f:37:fe:05:a1:60:95:
e0:c8:7b:a8:2e:30:84:ef:08:65:1a:b5:cc:d4:d0:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:F9:B6:A5:A2:F1:DE:5B:8E:AD:C6:11:E4:E0:26:03:89:70:BE
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
3d:93:63:b4:8e:22:cf:7e:e1:44:25:a9:08:18:f8:a6:1c:04:
f8:f2:75:06:4d:9a:49:f0:b4:0b:87:62:81:c2:72:9e:01:70:
40:12:93:41:2a:07:6e:d2:a9:2d:b6:92:ad:a8:a1:5c:6b:70:
91:15:05:4b:37:9e:e7:21:68:d4:bb:17:3e:99:69:31:f8:6c:
f9:f7:cc:f2:c6:2d:98:60:b6:f6:18:c8:81:83:b5:21:29:16:
af:5d:60:9f:0b:69:ca:e3:74:a2:44:62:a1:51:f0:c7:70:f9:
5c:f8:ea:eb:76:29:7e:4e:29:5b:14:3e:ba:ce:58:be:cf:f8:
af:ec:cd:3d:d0:5a:70:87:5b:b5:27:8b:6d:68:1c:62:87:9b:
89:84:97:14:24:b9:c5:b3:55:cc:f2:f4:b3:ad:39:7a:66:72:
f8:60:5c:b1:a7:4d:80:4a:47:d0:8c:ee:70:e7:71:6b:35:1f:
1c:60:60:fd:43:09:7a:89:d1:2e:b8:28:c1:7c:6f:4b:f1:aa:
8b:ee:b4:92:4a:3a:03:de:f3:1f:7b:5b:b4:11:15:3f:8f:84:
77:86:da:03:04:74:44:fc:75:65:ad:98:16:8f:73:7c:16:97:
b1:a4:f7:8d:ee:c3:74:ce:29:95:26:35:84:3d:74:74:96:15:
aa:09:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:29 2025 by rpki-client