Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: s9Z1/BGEffkge/QbQgbrTwJ2HT2WeMwQvbI0QxSubRs=
Subject key identifier: 61:DD:32:A2:17:D8:9E:30:5A:31:4C:44:FE:20:C0:9C:DD:22:F4:D4
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 19E45B9B72E287A3EB9052A595EE26ECFB4FC99B
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:01:02 +0000
ROA not before: Thu 09 May 2024 03:56:02 +0000
ROA not after: Thu 08 May 2025 04:01:02 +0000
asID: 55701
IP address blocks: 2405:b900:52::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e4:5b:9b:72:e2:87:a3:eb:90:52:a5:95:ee:26:ec:fb:4f:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:02 2024 GMT
Not After : May 8 04:01:02 2025 GMT
Subject: CN=61DD32A217D89E305A314C44FE20C09CDD22F4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:94:fa:33:29:24:8c:3e:ea:ca:f4:ef:e3:
a6:3c:e2:66:b1:16:a2:a2:9a:9f:17:98:ae:b9:7e:
62:bb:3f:71:ee:83:41:d1:7e:d4:38:67:49:97:29:
f6:8b:1b:be:c1:a7:c7:aa:78:ae:a4:db:7c:f6:20:
61:a1:32:6f:33:80:a0:37:dc:b6:6f:2d:e4:f4:8e:
5b:0d:f5:31:60:99:78:e2:e0:58:c7:8b:44:28:e4:
94:be:f7:e4:a8:fb:9c:4c:59:81:f1:b3:91:bb:51:
90:45:e9:4f:73:9b:1c:07:32:a0:5e:5f:bc:2e:77:
c4:9f:18:49:e8:78:44:a6:59:49:56:22:f1:fd:61:
37:6e:45:4a:a9:a6:85:24:1f:81:71:c8:98:c8:8d:
b7:de:d7:4b:03:41:06:e3:b8:5c:e1:c8:85:cd:83:
62:c6:1b:c3:6c:89:bc:dc:ba:0c:73:d3:76:04:d2:
49:09:0f:76:f6:cb:64:06:4d:21:36:44:ca:10:eb:
04:bb:ab:89:a6:8f:fa:19:a9:29:5c:48:ef:8a:d8:
6e:e9:a3:31:22:84:b9:19:db:13:64:42:90:30:fa:
4d:e9:33:22:57:6d:ad:de:b4:34:05:70:ed:00:ea:
b0:f7:9b:1c:25:48:7f:2f:93:eb:8c:37:af:5b:a0:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:32:A2:17:D8:9E:30:5A:31:4C:44:FE:20:C0:9C:DD:22:F4:D4
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:52::/48
Signature Algorithm: sha256WithRSAEncryption
2f:56:3c:61:be:ce:01:66:f5:0a:55:16:27:e8:e4:0b:b0:4a:
d3:09:78:c4:8c:d2:a8:db:d3:33:64:cd:61:cb:08:a8:b8:11:
c2:3f:7c:67:ab:65:7d:5a:0d:75:b7:46:13:89:28:2e:b9:46:
07:52:20:54:47:47:92:2c:39:7e:94:8c:a8:ed:79:ad:27:70:
fc:4e:35:fa:b6:5b:03:cb:39:bc:82:00:d9:23:f9:5b:2e:27:
10:91:5d:06:02:d7:bc:aa:db:32:b6:2c:15:79:08:ec:b0:d5:
21:83:00:01:54:b7:a0:61:8f:78:aa:70:1b:a9:57:32:10:92:
90:27:cd:76:58:65:01:c8:56:f7:60:32:fd:f1:39:b0:38:d7:
01:9e:a5:d0:86:7e:3a:8b:21:35:ee:b0:39:32:29:9f:c8:ba:
4a:76:14:a7:b8:10:4e:2e:c2:d2:3a:73:3f:5e:b5:8f:7c:8a:
61:d6:56:35:fe:aa:d8:ec:6d:68:38:df:e7:d0:58:13:2a:e7:
ed:a1:1a:cb:47:22:7d:29:e7:85:71:75:e7:66:98:d5:8e:fb:
9a:b2:37:ee:73:c7:ae:e1:e4:60:97:fb:d8:10:3f:a6:d7:e7:
ee:89:ab:7c:11:a9:f0:4e:1a:88:1c:48:b5:88:96:bb:c8:48:
e6:e0:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:39 2025 by rpki-client