Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: qkKXujpDA6a+smkuJJHIRI/Q2BLkvO0hnfs/j6BuSnw=
Subject key identifier: B8:8A:7E:7D:E2:06:50:55:A1:2D:88:A1:91:86:D5:40:B6:08:EC:50
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 4112E0E230EB63E18646214F88B021A0F70306B9
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:00:58 +0000
ROA not before: Thu 09 May 2024 03:55:58 +0000
ROA not after: Thu 08 May 2025 04:00:58 +0000
asID: 55701
IP address blocks: 2405:b900:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:12:e0:e2:30:eb:63:e1:86:46:21:4f:88:b0:21:a0:f7:03:06:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:55:58 2024 GMT
Not After : May 8 04:00:58 2025 GMT
Subject: CN=B88A7E7DE2065055A12D88A19186D540B608EC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:2d:3b:c8:29:09:40:50:df:02:97:87:8c:
b1:60:6e:25:b8:13:12:31:fe:fb:ac:be:b0:85:0e:
65:23:fe:8e:9b:bd:ed:d6:02:af:f9:76:34:df:95:
03:08:31:03:14:44:1d:55:ce:78:f3:05:6c:fb:14:
43:7d:2d:69:2e:77:f5:f4:70:f5:d4:bb:3f:2a:0c:
79:71:c8:83:01:cc:18:83:3d:a5:e0:e1:10:c2:58:
49:1e:53:01:7d:bc:61:d1:e7:42:19:83:c4:0e:58:
81:10:e6:80:8e:9a:57:e5:aa:df:28:51:70:ea:de:
16:bc:5e:5a:d0:29:e3:d0:4a:3d:20:55:07:e2:4c:
c6:35:96:d1:c8:57:50:fa:d8:56:f8:0e:23:30:f5:
aa:8d:e9:61:0e:f4:ae:ee:8d:1d:95:29:d3:d8:ff:
50:d0:06:4d:b9:c6:98:c1:88:30:cb:e4:33:e8:db:
88:28:77:52:32:7b:27:8f:a2:3f:30:38:01:6b:43:
17:a9:98:cc:8b:ee:0b:a9:1d:82:8e:a2:b2:d6:4a:
9a:20:e9:fa:2e:17:c4:86:7f:57:fe:8a:f3:65:84:
49:3b:29:ff:7f:e1:ed:46:e5:25:cd:52:71:b5:7e:
cb:1e:b6:cf:af:b0:32:32:01:49:e6:48:8d:ba:ed:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:7E:7D:E2:06:50:55:A1:2D:88:A1:91:86:D5:40:B6:08:EC:50
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:12::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a8:6f:83:3d:3d:05:dd:01:79:25:d0:da:c5:e0:ed:64:7d:
0c:52:71:a9:60:51:dc:ed:40:c6:1a:89:92:00:41:6a:b2:bf:
a8:4c:35:0a:b2:11:31:2e:c9:bc:5f:f7:8f:41:b2:ae:b8:aa:
49:9f:c5:90:4c:fd:f7:af:ee:a2:51:9d:28:cf:5b:ec:93:d9:
0f:0c:ad:e4:55:74:13:df:a2:cf:2d:47:5c:3e:da:5f:00:94:
c2:73:b0:93:0e:b7:4b:09:3e:15:5d:50:e6:5a:d7:9c:f3:53:
be:ac:77:93:09:fe:4e:1c:a7:df:02:1f:89:e0:06:4c:2d:f8:
fc:19:27:8f:d3:f3:b4:a6:bb:fe:d0:99:01:a1:33:09:35:30:
28:c8:be:20:45:bc:00:64:30:2b:76:40:5d:1e:89:25:88:37:
61:1e:12:b4:3d:37:c8:0b:85:50:22:72:a1:10:96:dd:9a:ea:
05:d6:f4:31:9d:60:9d:5c:6c:10:5b:ca:43:c0:ed:8c:56:2a:
db:75:9f:34:ce:eb:4c:23:e4:91:54:9a:5e:1b:47:f4:51:5b:
58:cd:f1:a7:e3:23:ca:62:84:30:8e:ed:b2:9d:0f:3f:1f:c7:
9b:91:a6:77:0e:fd:8a:f0:9d:d7:85:ce:05:22:96:bb:6b:e7:
63:27:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:41 2025 by rpki-client