Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: h8mEQq3kqk+hGiDA9a7xST4dIFFDUZqT0VFMLSnhq0U=
Subject key identifier: 85:40:90:67:63:FB:D6:94:12:CA:D7:DA:1D:48:41:33:A6:E8:B5:3B
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 2DB65E9F35203A242A1E0B24CE8FAD4F35C15621
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:00 +0000
ROA not before: Thu 09 May 2024 03:56:00 +0000
ROA not after: Thu 08 May 2025 04:01:00 +0000
asID: 55701
IP address blocks: 2405:b900:32::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b6:5e:9f:35:20:3a:24:2a:1e:0b:24:ce:8f:ad:4f:35:c1:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:00 2024 GMT
Not After : May 8 04:01:00 2025 GMT
Subject: CN=8540906763FBD69412CAD7DA1D484133A6E8B53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:4d:67:00:4f:5c:8a:19:4a:60:e3:cd:19:
07:7b:8a:94:3b:07:ab:3b:f7:99:db:48:7a:6b:b9:
9d:51:6a:27:c8:48:e5:da:b0:9e:15:2f:dc:d2:51:
d3:ec:0f:02:9f:4b:21:90:90:b4:19:9d:eb:1a:54:
70:84:d7:36:41:80:e7:9c:51:02:f2:df:08:c3:db:
85:f9:30:69:e5:f8:93:ad:fd:8c:b8:9c:b0:29:86:
49:09:ac:1e:ba:b4:ef:81:c1:57:43:83:ae:a6:b3:
b1:43:cc:b0:44:e5:e1:1d:30:8b:ca:22:b8:7e:ba:
65:bb:19:52:c6:04:66:fe:87:15:4f:20:0b:da:11:
61:98:a2:a3:df:26:c4:d2:a1:92:fd:d8:f1:46:94:
36:c5:0b:6a:f3:f9:2a:b4:85:bf:50:65:83:8f:61:
e3:f0:1c:eb:69:55:53:7c:76:db:14:5a:ba:1c:2a:
0b:b0:fd:bb:7c:45:5a:da:d4:95:ae:4e:de:4e:f1:
07:90:1e:2b:64:5e:70:6f:9b:14:4d:84:07:ec:5c:
09:17:47:9b:41:dc:55:f0:50:c2:d0:55:bc:4a:25:
79:42:93:22:6f:f2:a2:d1:90:23:42:80:c3:8d:d8:
c3:33:7d:06:ac:f8:04:0f:5c:22:37:ad:f2:41:7e:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:40:90:67:63:FB:D6:94:12:CA:D7:DA:1D:48:41:33:A6:E8:B5:3B
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:32::/48
Signature Algorithm: sha256WithRSAEncryption
9f:61:9c:90:fb:81:ba:34:2a:69:89:63:2e:34:1b:6a:d2:db:
88:1d:a6:3f:0c:55:29:e8:f9:59:a3:e9:fc:69:ab:4d:9e:dc:
38:5c:c7:cc:e9:d8:8b:e4:9a:35:5a:c8:de:ab:dc:95:7d:86:
a6:f1:ce:1b:6f:0b:76:ba:60:c4:e7:27:b6:df:5b:7f:c3:3f:
4e:99:d4:09:d9:d9:db:2f:91:a9:5f:98:b5:05:0a:ff:75:61:
3a:79:78:3b:70:23:71:1d:4d:ca:43:c0:a7:73:c7:f1:8f:87:
ef:e9:59:a5:f0:d4:02:f9:39:77:fe:12:c4:9a:43:31:d8:43:
b4:5d:02:07:dc:f7:2d:61:ab:06:99:f3:cf:f3:32:52:79:1e:
89:d8:57:c9:6a:dd:75:6e:8a:20:99:25:a7:e3:22:7e:2c:30:
ee:67:5d:99:2c:df:7b:16:b3:57:ca:37:63:ce:4b:3b:b1:ba:
d4:51:bb:21:72:b1:a2:df:36:a4:d1:b7:2e:5e:ac:74:7c:b4:
28:3f:45:3e:26:c2:fb:b4:2c:8f:95:cf:14:90:88:ea:68:8c:
9e:91:d0:68:4f:42:87:84:09:bd:dc:66:75:48:23:07:67:23:
95:ee:12:d9:47:e5:1e:59:7d:2c:a8:23:9a:e9:b6:43:e0:6d:
b5:03:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:28 2025 by rpki-client