Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: sXeIAkQpiYFyjnrfznxJBQNjcgW5QvGs+GzUDfpsxzE=
Subject key identifier: FD:B0:9B:AB:EF:B4:6E:08:EF:4F:56:2B:FF:04:FE:2D:8C:46:3D:4D
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 3C76AD048D55AA4297C66B1C944849321E5484FC
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:09 +0000
ROA not before: Thu 09 May 2024 03:56:09 +0000
ROA not after: Thu 08 May 2025 04:01:09 +0000
asID: 55701
IP address blocks: 2405:b900:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:ad:04:8d:55:aa:42:97:c6:6b:1c:94:48:49:32:1e:54:84:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:09 2024 GMT
Not After : May 8 04:01:09 2025 GMT
Subject: CN=FDB09BABEFB46E08EF4F562BFF04FE2D8C463D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:11:26:57:d6:17:1c:6a:7f:67:77:e2:3a:
ea:ea:2c:e0:94:e0:8b:48:45:63:bc:33:a4:dd:76:
7b:b0:02:7d:3d:b1:5b:04:2d:aa:22:f9:28:51:12:
f9:bd:8b:67:f6:f7:18:54:4a:15:db:9b:d2:cc:63:
d3:f7:cc:1d:8d:9d:d5:6f:0b:56:a5:91:ac:d8:c5:
53:c4:b9:50:1b:e0:b9:02:21:a4:f9:af:5a:59:e6:
02:36:ff:b7:f8:de:4f:97:9c:22:e4:c3:9a:82:10:
24:6d:10:d9:3f:d6:ba:38:49:8b:c5:a5:39:f5:37:
d6:2f:cb:13:a6:43:6a:5d:fc:6b:05:2e:21:7a:b5:
a8:28:a1:78:88:dd:12:be:6c:cd:7d:81:38:de:c0:
5c:b3:17:46:ee:44:af:57:c5:ea:89:f3:ee:00:6c:
f9:cf:63:22:4b:6f:c4:15:e6:d1:5b:ae:d7:31:0c:
42:07:f2:f0:99:de:59:dc:5a:49:51:73:86:05:94:
86:57:e0:d4:9d:cc:fe:90:ac:5f:44:32:f6:ae:3e:
ca:29:b3:7a:db:94:8f:62:44:78:0c:cd:c6:17:eb:
c6:1a:25:4a:50:1a:44:cb:c0:dc:cb:fd:3d:29:53:
31:7d:62:b4:0b:6a:1b:69:f8:5a:d2:2a:08:64:b8:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:9B:AB:EF:B4:6E:08:EF:4F:56:2B:FF:04:FE:2D:8C:46:3D:4D
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:2000::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ac:ba:6e:62:d2:34:a7:e8:24:32:7d:11:2b:b0:fb:e9:ec:
96:eb:e9:27:ae:fe:25:af:da:ee:c0:0c:16:80:0e:30:27:fb:
8a:b6:05:53:c8:67:7a:15:56:e8:44:40:63:1c:e3:45:99:cb:
75:8f:6d:0a:48:3b:e4:ba:f3:07:3b:50:1f:d5:46:c8:d5:f8:
e8:fa:9f:54:cc:3e:c9:ab:ab:88:73:2c:3c:92:78:f0:75:79:
23:4e:d2:a8:10:3d:23:b6:ae:82:52:c3:31:db:16:50:cb:a8:
08:9f:98:b4:e6:a1:ec:92:f1:0d:f8:66:7c:f0:51:30:89:13:
c3:1f:32:ba:03:d2:dd:ee:ca:a4:30:6c:60:74:1f:b1:48:e9:
e8:41:cf:cf:f9:ee:6e:00:ab:e2:b5:16:a6:1b:13:34:bf:ff:
03:1d:f2:70:18:5b:f9:91:09:d4:64:b9:53:ae:41:2d:37:1d:
63:98:f2:4c:a1:02:ab:20:40:83:4f:c3:b1:d0:f7:ce:01:77:
98:37:73:ba:0b:58:f7:8d:a1:d0:2d:1d:ba:21:62:a2:4d:42:
d3:4b:c0:bf:f8:a4:e3:40:a9:7f:66:de:c4:c4:49:1c:66:a7:
d5:6a:50:bf:bb:4a:17:35:dd:fe:ba:c1:e0:76:65:d3:09:fa:
55:72:65:48
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPHatBI1VqkKXxmsclEhJMh5UhPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDlaFw0yNTA1MDgwNDAxMDlaMDMxMTAvBgNV
BAMTKEZEQjA5QkFCRUZCNDZFMDhFRjRGNTYyQkZGMDRGRTJEOEM0NjNENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvxEmV9YXHGp/Z3fiOurqLOCU
4ItIRWO8M6TddnuwAn09sVsELaoi+ShREvm9i2f29xhUShXbm9LMY9P3zB2NndVv
C1alkazYxVPEuVAb4LkCIaT5r1pZ5gI2/7f43k+XnCLkw5qCECRtENk/1ro4SYvF
pTn1N9YvyxOmQ2pd/GsFLiF6tagooXiI3RK+bM19gTjewFyzF0buRK9XxeqJ8+4A
bPnPYyJLb8QV5tFbrtcxDEIH8vCZ3lncWklRc4YFlIZX4NSdzP6QrF9EMvauPsop
s3rblI9iRHgMzcYX68YaJUpQGkTLwNzL/T0pUzF9YrQLahtp+FrSKghkuAzBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/bCbq++0bgjvT1Yr/wT+LYxGPU0wHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5
ACAAMA0GCSqGSIb3DQEBCwUAA4IBAQAPrLpuYtI0p+gkMn0RK7D76eyW6+knrv4l
r9ruwAwWgA4wJ/uKtgVTyGd6FVboREBjHONFmct1j20KSDvkuvMHO1Af1UbI1fjo
+p9UzD7Jq6uIcyw8knjwdXkjTtKoED0jtq6CUsMx2xZQy6gIn5i05qHskvEN+GZ8
8FEwiRPDHzK6A9Ld7sqkMGxgdB+xSOnoQc/P+e5uAKvitRamGxM0v/8DHfJwGFv5
kQnUZLlTrkEtNx1jmPJMoQKrIECDT8Ox0PfOAXeYN3O6C1j3jaHQLR26IWKiTULT
S8C/+KTjQKl/Zt7ExEkcZqfValC/u0oXNd3+usHgdmXTCfpVcmVI
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:50 2025 by rpki-client