Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: lgb678Zfh2u11uijM51hj3Qt5etoOJoo6gIt4JKO9Ww=
Subject key identifier: AA:12:89:9F:2A:F8:03:E6:2C:C9:81:37:A2:71:54:6F:72:AB:E2:40
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 1C32A71AB20A706578BAF7E8E5F61901966F92FB
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:09 +0000
ROA not before: Thu 09 May 2024 03:56:09 +0000
ROA not after: Thu 08 May 2025 04:01:09 +0000
asID: 55701
IP address blocks: 2405:b900:39::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:32:a7:1a:b2:0a:70:65:78:ba:f7:e8:e5:f6:19:01:96:6f:92:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:09 2024 GMT
Not After : May 8 04:01:09 2025 GMT
Subject: CN=AA12899F2AF803E62CC98137A271546F72ABE240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:09:8b:2e:ea:4c:df:63:1a:2e:13:69:ce:
75:54:aa:1e:19:24:ec:6c:42:82:84:ab:8f:c6:99:
e4:12:ac:2d:8f:6d:2b:b4:d8:4a:f9:59:61:f3:3f:
5d:01:c3:4f:d3:2e:f7:2e:ae:a0:ff:98:79:28:04:
3c:88:a2:da:ba:03:c0:5a:51:ab:ba:cf:8f:e0:72:
08:d0:25:32:9d:fe:7f:62:1c:d3:a7:18:91:57:67:
97:81:08:d0:f0:9e:01:56:32:0b:20:e0:f8:61:17:
69:ac:c5:9c:ad:01:b9:2e:2e:45:b0:5c:27:c4:f1:
c5:9e:28:58:24:2d:5c:74:fb:51:b1:67:b5:3a:93:
b6:7c:3c:59:e2:2f:2c:d6:4c:9a:8a:d3:ab:45:ba:
de:5d:62:00:9b:e6:f7:1a:d3:88:b8:87:28:b1:22:
56:33:7b:35:2f:4d:43:2a:6f:b7:c4:f5:96:b3:c0:
9b:d9:c8:6b:cf:f2:dd:a4:3f:bc:ce:90:77:73:b2:
36:52:8f:30:05:58:5d:24:d4:9d:06:95:6a:70:74:
27:14:0a:79:db:15:48:b7:6d:fe:de:6e:b6:57:e1:
cb:dc:f1:ff:d4:d5:bb:3c:52:f9:d3:c6:d6:d4:14:
5c:5c:2b:f7:8e:fd:3b:c7:e4:cc:87:0d:20:08:5c:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:12:89:9F:2A:F8:03:E6:2C:C9:81:37:A2:71:54:6F:72:AB:E2:40
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:39::/48
Signature Algorithm: sha256WithRSAEncryption
bf:75:1c:44:cc:a9:b4:38:60:6f:02:ad:88:45:19:17:fc:9a:
c7:7e:5c:2f:ea:48:f9:0a:fb:55:b0:9d:f8:0b:81:c2:0e:ed:
72:25:07:ff:06:12:55:4f:0d:d5:78:1e:c4:39:10:9b:fb:23:
ad:9b:b3:32:89:41:ab:db:1b:41:b4:d4:06:6a:68:21:dc:1d:
a7:20:15:1a:a9:c8:ca:34:7d:6b:fd:7e:df:5f:fa:b6:f6:5c:
e0:e2:8e:11:95:10:ea:93:55:e9:21:50:8a:d8:3b:1e:f7:fe:
91:9d:30:0d:04:7d:5d:fc:7a:d6:2d:ef:b3:95:97:b3:c9:20:
a9:1d:70:02:32:16:68:53:7c:83:78:72:60:c3:a9:25:2b:ff:
49:c2:04:4a:05:af:9f:08:36:f7:0e:19:03:fb:43:6b:fe:09:
92:d7:c3:f6:21:5d:08:7b:32:be:8b:7b:f0:2e:d2:71:51:04:
bc:e9:12:08:8c:82:ec:0a:6e:d8:93:08:fe:e7:23:64:31:ca:
30:d5:86:ac:a2:e5:06:d2:19:fa:25:47:6b:a0:c8:84:c5:63:
41:16:e4:60:b8:72:28:76:06:17:2f:7e:67:21:0e:2d:b3:59:
4b:3f:42:f7:e7:89:d8:30:91:28:f5:01:ae:58:8f:64:9e:6c:
5d:a5:0e:ce
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUHDKnGrIKcGV4uvfo5fYZAZZvkvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDlaFw0yNTA1MDgwNDAxMDlaMDMxMTAvBgNV
BAMTKEFBMTI4OTlGMkFGODAzRTYyQ0M5ODEzN0EyNzE1NDZGNzJBQkUyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zQmLLupM32MaLhNpznVUqh4Z
JOxsQoKEq4/GmeQSrC2PbSu02Er5WWHzP10Bw0/TLvcurqD/mHkoBDyIotq6A8Ba
Uau6z4/gcgjQJTKd/n9iHNOnGJFXZ5eBCNDwngFWMgsg4PhhF2msxZytAbkuLkWw
XCfE8cWeKFgkLVx0+1GxZ7U6k7Z8PFniLyzWTJqK06tFut5dYgCb5vca04i4hyix
IlYzezUvTUMqb7fE9ZazwJvZyGvP8t2kP7zOkHdzsjZSjzAFWF0k1J0GlWpwdCcU
CnnbFUi3bf7ebrZX4cvc8f/U1bs8UvnTxtbUFFxcK/eO/TvH5MyHDSAIXH5dAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUqhKJnyr4A+YsyYE3onFUb3Kr4kAwHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzOTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADkw
DQYJKoZIhvcNAQELBQADggEBAL91HETMqbQ4YG8CrYhFGRf8msd+XC/qSPkK+1Ww
nfgLgcIO7XIlB/8GElVPDdV4HsQ5EJv7I62bszKJQavbG0G01AZqaCHcHacgFRqp
yMo0fWv9ft9f+rb2XODijhGVEOqTVekhUIrYOx73/pGdMA0EfV38etYt77OVl7PJ
IKkdcAIyFmhTfIN4cmDDqSUr/0nCBEoFr58INvcOGQP7Q2v+CZLXw/YhXQh7Mr6L
e/Au0nFRBLzpEgiMguwKbtiTCP7nI2QxyjDVhqyi5QbSGfolR2ugyITFY0EW5GC4
cih2BhcvfmchDi2zWUs/QvfnidgwkSj1Aa5Yj2SebF2lDs4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:04 2025 by rpki-client