Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: /A+CRb1aSSoAW61E3NZHxoxAGDMLdErGWFDI1GfaVt8=
Subject key identifier: B0:46:FA:32:A0:0B:8E:7D:DA:0D:71:03:CC:20:27:9D:C7:41:58:03
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 587493C49CC4DDC2BC0F1939890D4DAE87522033
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:03 +0000
ROA not before: Thu 09 May 2024 03:56:03 +0000
ROA not after: Thu 08 May 2025 04:01:03 +0000
asID: 55701
IP address blocks: 2405:b900:45::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:74:93:c4:9c:c4:dd:c2:bc:0f:19:39:89:0d:4d:ae:87:52:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:03 2024 GMT
Not After : May 8 04:01:03 2025 GMT
Subject: CN=B046FA32A00B8E7DDA0D7103CC20279DC7415803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:29:95:eb:b2:a1:e1:ff:2b:95:9e:12:54:
a3:08:fd:58:04:35:50:46:8c:b9:f8:64:51:39:b3:
0e:0f:72:e3:b0:00:8f:c1:35:aa:2f:71:89:a0:5f:
59:97:85:58:45:09:12:a9:df:00:ea:db:eb:ea:ba:
f2:dc:67:98:5f:95:6d:81:79:1f:15:f6:de:cd:0c:
44:39:d5:3c:1f:12:81:d3:e2:d7:bf:fe:f7:39:0a:
78:ba:39:29:74:e0:35:0c:bb:a9:ac:24:30:d2:2a:
18:60:d5:a9:e1:7f:4d:6e:db:01:1c:b2:d5:0a:02:
ad:fd:02:f0:01:ae:17:1f:5a:7f:72:fc:5e:e9:80:
96:d2:30:ec:ac:13:cc:3c:67:ce:a9:52:eb:e2:92:
4a:c8:4b:bf:c4:11:01:5e:2d:ec:e2:ad:7f:42:a4:
5a:a5:bf:70:89:25:5a:63:60:d8:dc:d3:0c:32:10:
65:32:03:3d:67:9d:8d:d5:0e:f9:b4:15:1b:a3:e6:
b9:60:c8:03:65:1c:19:52:3b:1e:96:5f:d6:9e:23:
24:15:6c:5f:63:de:dd:ec:25:85:d2:c2:de:29:5f:
55:80:52:42:7f:8d:80:83:e6:8e:48:b4:cc:7a:75:
72:ff:1a:d9:2f:09:4f:3a:be:ad:23:4b:ae:5d:47:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:FA:32:A0:0B:8E:7D:DA:0D:71:03:CC:20:27:9D:C7:41:58:03
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:45::/48
Signature Algorithm: sha256WithRSAEncryption
74:af:05:01:f2:2e:ed:5c:e6:6d:ff:d0:5a:40:74:31:7c:bd:
e1:c0:46:e8:5c:45:92:05:4d:c6:f1:7b:b8:a4:ff:f1:81:9a:
1c:19:ff:49:e6:0c:db:00:6c:71:f9:fa:91:d9:b1:c4:dd:02:
72:86:34:4f:d7:5a:60:93:e1:5d:ee:d0:a5:9d:cd:32:f2:ae:
7b:05:96:ff:e7:e4:12:d0:fe:9e:ee:47:35:a3:6a:e3:70:74:
31:4e:9b:38:6b:80:ee:da:66:cd:d4:69:11:df:9d:2f:68:e2:
b2:d1:dc:84:1f:e3:67:88:53:23:3d:ec:10:95:35:b2:7e:a2:
02:8d:1e:23:0f:68:26:80:00:d8:7b:e6:7a:f3:0d:80:dc:2f:
ce:52:43:ee:52:20:f5:5f:5f:2e:3b:18:91:2f:89:57:45:31:
d9:88:1d:c5:ca:7c:79:53:06:0d:32:4d:4f:d3:50:6e:04:91:
50:8c:3f:f1:d2:df:d7:eb:fb:52:d0:e8:47:f6:70:fc:fc:64:
e4:20:99:53:b6:c6:f7:62:fc:dd:fb:41:4f:71:ef:66:28:7e:
ed:28:4b:2a:05:2d:48:60:a0:c7:6a:2e:10:83:55:15:56:47:
c8:7d:1b:4b:ae:ef:b0:44:21:40:2c:98:75:46:b4:45:f8:36:
cd:c1:5e:f1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWHSTxJzE3cK8Dxk5iQ1NrodSIDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDNaFw0yNTA1MDgwNDAxMDNaMDMxMTAvBgNV
BAMTKEIwNDZGQTMyQTAwQjhFN0REQTBENzEwM0NDMjAyNzlEQzc0MTU4MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXymV67Kh4f8rlZ4SVKMI/VgE
NVBGjLn4ZFE5sw4PcuOwAI/BNaovcYmgX1mXhVhFCRKp3wDq2+vquvLcZ5hflW2B
eR8V9t7NDEQ51TwfEoHT4te//vc5Cni6OSl04DUMu6msJDDSKhhg1anhf01u2wEc
stUKAq39AvABrhcfWn9y/F7pgJbSMOysE8w8Z86pUuvikkrIS7/EEQFeLezirX9C
pFqlv3CJJVpjYNjc0wwyEGUyAz1nnY3VDvm0FRuj5rlgyANlHBlSOx6WX9aeIyQV
bF9j3t3sJYXSwt4pX1WAUkJ/jYCD5o5ItMx6dXL/GtkvCU86vq0jS65dR0BbAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUsEb6MqALjn3aDXEDzCAnncdBWAMwHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEUw
DQYJKoZIhvcNAQELBQADggEBAHSvBQHyLu1c5m3/0FpAdDF8veHARuhcRZIFTcbx
e7ik//GBmhwZ/0nmDNsAbHH5+pHZscTdAnKGNE/XWmCT4V3u0KWdzTLyrnsFlv/n
5BLQ/p7uRzWjauNwdDFOmzhrgO7aZs3UaRHfnS9o4rLR3IQf42eIUyM97BCVNbJ+
ogKNHiMPaCaAANh75nrzDYDcL85SQ+5SIPVfXy47GJEviVdFMdmIHcXKfHlTBg0y
TU/TUG4EkVCMP/HS39fr+1LQ6Ef2cPz8ZOQgmVO2xvdi/N37QU9x72Yofu0oSyoF
LUhgoMdqLhCDVRVWR8h9G0uu77BEIUAsmHVGtEX4Ns3BXvE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:47 2025 by rpki-client