Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: dLo6/4a/xU6GBKOTvYzGKAh81iKGfcZp4BGavs8784o=
Subject key identifier: 95:40:3C:EE:DE:00:F5:06:1F:EB:E2:43:30:C7:87:48:A8:7B:1D:26
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 253C5BD45CCDAA4210A8A09167324A9F63EBA599
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:07 +0000
ROA not before: Thu 09 May 2024 03:56:07 +0000
ROA not after: Thu 08 May 2025 04:01:07 +0000
asID: 55701
IP address blocks: 2405:b900:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3c:5b:d4:5c:cd:aa:42:10:a8:a0:91:67:32:4a:9f:63:eb:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:07 2024 GMT
Not After : May 8 04:01:07 2025 GMT
Subject: CN=95403CEEDE00F5061FEBE24330C78748A87B1D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:f5:a2:43:16:14:0f:ee:1c:df:67:4c:1d:
d1:10:1f:c3:60:19:98:36:d8:8b:6d:be:d0:22:92:
91:d8:ac:5a:f3:54:83:14:93:21:77:ce:9a:bc:a3:
54:3f:dc:9c:f6:b5:c2:83:6c:f0:44:58:f5:fe:35:
20:a1:79:2f:bd:09:c3:8b:3e:24:91:4a:71:8a:ee:
31:39:9d:14:70:75:78:a1:a8:de:f6:5c:aa:fa:f3:
d5:7d:59:7b:23:a1:c3:9a:cc:9c:a3:86:b4:b1:ad:
b0:21:ca:af:54:9a:f6:33:d7:18:1d:6a:69:9d:19:
1a:5f:f5:fa:40:89:92:37:0f:2a:29:2f:14:b4:49:
87:fc:98:65:47:62:55:06:6a:59:3f:be:8d:84:3c:
85:8c:83:8e:79:32:e6:1d:b1:f7:5f:61:a0:aa:62:
33:87:58:8f:e4:9f:0e:cd:08:a6:ad:21:13:7e:81:
46:63:81:d6:4b:fc:de:db:6b:a0:85:66:89:9b:ca:
51:e8:35:aa:7b:b7:52:7e:31:16:4c:ef:68:60:c2:
0d:6c:65:ad:c8:c9:f0:e7:52:0f:88:79:7b:13:77:
f6:e0:fb:a4:c2:eb:31:0e:f7:c5:47:df:a1:6e:4a:
b4:75:28:fc:c1:5b:08:4f:89:44:3b:12:c6:86:74:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:3C:EE:DE:00:F5:06:1F:EB:E2:43:30:C7:87:48:A8:7B:1D:26
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:24::/48
Signature Algorithm: sha256WithRSAEncryption
b4:65:d4:b4:22:24:06:2f:3d:8b:4d:71:a2:e0:7f:cf:12:1e:
31:93:1b:59:49:37:cb:39:56:30:29:a6:44:de:7d:ca:73:1c:
07:78:cc:de:83:ff:48:c1:65:06:c5:ce:a6:ee:30:d5:6d:42:
e4:65:da:06:11:07:6e:7f:d5:3c:82:62:bd:de:99:95:9f:4d:
47:19:e4:0e:24:4c:23:60:d2:3a:09:e9:af:a9:f4:74:6c:de:
88:b2:73:4a:68:50:7e:ab:d3:bc:42:5f:52:fc:ec:f5:45:9e:
dc:8e:7f:02:67:10:be:3b:48:73:bb:53:53:8b:5d:e0:65:4d:
fd:a5:c6:01:77:a4:7b:f1:ab:ed:7e:db:da:12:00:71:f6:ab:
bd:6e:f6:9c:85:8c:6f:eb:79:c1:36:72:e7:58:85:93:d8:1e:
cb:ff:b8:5d:dc:66:e7:e9:b1:5d:aa:95:e8:85:06:89:fe:13:
b2:f6:08:96:e4:94:a3:21:00:04:e0:9b:48:31:7f:5a:39:76:
e3:c5:e4:30:5e:01:fb:4e:08:e2:7e:63:a7:bb:ee:a7:93:37:
83:7a:f8:63:3e:f6:7d:08:b1:3e:43:b9:3c:42:93:84:0a:fd:
c4:e1:f8:bc:fc:f9:c6:e5:c1:f3:f8:c4:03:07:3c:ae:1a:e3:
65:98:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:24 2025 by rpki-client