Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: EJrsKErLGQEMzExC2rSvWWAXy+dGekjeSDzKn1Bg4sk=
Subject key identifier: E3:86:31:85:99:38:54:AE:9F:7D:1C:51:DB:E7:B4:78:61:81:E5:14
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 09D2AE5F088061F0746B31475A0272EACF280B15
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:01 +0000
ROA not before: Thu 09 May 2024 03:56:01 +0000
ROA not after: Thu 08 May 2025 04:01:01 +0000
asID: 55701
IP address blocks: 2405:b900:41::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d2:ae:5f:08:80:61:f0:74:6b:31:47:5a:02:72:ea:cf:28:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:01 2024 GMT
Not After : May 8 04:01:01 2025 GMT
Subject: CN=E3863185993854AE9F7D1C51DBE7B4786181E514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:93:17:35:cb:bd:44:ac:b6:5f:55:60:5f:
9a:d6:a8:95:3b:dc:67:f6:2d:d2:5a:d5:87:ff:a2:
ea:b7:dc:75:cd:a2:c4:cb:e5:b7:ae:6c:74:dc:f3:
d4:2f:74:c5:a8:71:7a:8f:af:d8:36:48:ab:3e:aa:
fd:d1:75:6a:bf:26:83:19:93:54:16:e2:95:3a:07:
a1:ae:9c:87:9e:a5:cd:71:55:e5:ec:5d:05:e4:ed:
ad:e6:40:c7:f1:d1:1d:2d:b9:b2:a3:3f:f2:2b:79:
93:cc:de:49:0c:2d:70:10:46:2a:85:62:14:3a:d0:
f2:db:fc:21:56:ac:ea:70:65:b5:c6:ba:07:f0:42:
2f:0e:cd:a3:28:a1:95:5e:6c:00:df:15:4f:85:64:
d1:89:b6:e6:8e:17:56:41:96:a8:33:2d:d7:a6:06:
0a:2b:d6:34:1d:24:ae:b9:ed:cd:18:2d:82:61:3b:
db:d0:04:95:34:fb:3b:6f:08:bf:e8:36:fe:74:05:
a0:96:c7:01:a9:3c:f0:bc:a3:e5:29:96:12:95:1e:
d9:82:c7:ab:5a:aa:ed:07:1b:b9:8c:c4:b4:1e:4b:
99:69:39:27:27:19:c3:68:66:cd:23:83:e7:f3:77:
41:7e:0b:76:04:5e:3c:2b:25:42:78:20:63:af:52:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:31:85:99:38:54:AE:9F:7D:1C:51:DB:E7:B4:78:61:81:E5:14
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:41::/48
Signature Algorithm: sha256WithRSAEncryption
49:4c:33:96:83:aa:94:07:e4:64:f7:c1:fe:64:e2:13:d9:09:
ae:17:ea:31:02:dd:73:5a:21:68:b4:b8:bd:5e:61:6f:99:8c:
8d:02:6d:04:97:7d:fb:25:f3:c8:01:e1:31:9a:94:7b:4e:43:
71:ed:82:23:2e:32:40:b8:87:6c:4b:b7:97:08:d8:2b:25:c5:
5b:81:fc:11:09:99:8c:a0:de:1f:54:0d:78:1d:0a:ae:95:7a:
11:af:8c:17:b2:4a:df:b2:ed:42:03:36:46:3a:5b:37:6f:e0:
f4:06:18:7c:2f:af:dd:70:b4:79:72:42:02:34:ce:76:ca:08:
5a:9f:3d:f2:e7:d2:7c:b8:7b:87:ee:8b:79:2a:06:cd:23:d3:
29:ba:10:31:58:b0:e4:76:49:b1:5a:c5:35:02:0f:b2:4b:0e:
48:5a:74:8a:9b:d4:f9:cc:8d:8f:c3:4b:b0:6e:2f:1a:08:3d:
42:60:71:e5:e4:84:7b:ac:3f:ca:19:d6:71:0a:68:2d:dc:9e:
3d:ff:74:f3:43:12:ec:19:43:9b:d2:0c:ed:ca:0d:54:8a:9c:
27:0c:41:8e:b2:b3:1b:0f:fb:da:ca:25:eb:14:dd:2a:d8:36:
45:70:11:94:3e:c5:86:03:1a:01:57:d3:e2:ed:2e:c0:db:c4:
be:87:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:18 2025 by rpki-client