Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: 5HN8pX8IzyWHafPLHjt4mGx4viLItPmwjjhib49JtCY=
Subject key identifier: AC:BB:4D:F0:8F:A4:77:38:9C:C5:D9:E0:B9:78:79:EA:B6:EE:B8:05
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 54BAC9761995580E9E502F6AC3F59B167AF89F1B
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:00:57 +0000
ROA not before: Thu 09 May 2024 03:55:57 +0000
ROA not after: Thu 08 May 2025 04:00:57 +0000
asID: 55701
IP address blocks: 2405:b900:5570::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ba:c9:76:19:95:58:0e:9e:50:2f:6a:c3:f5:9b:16:7a:f8:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:55:57 2024 GMT
Not After : May 8 04:00:57 2025 GMT
Subject: CN=ACBB4DF08FA477389CC5D9E0B97879EAB6EEB805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:74:73:12:c5:10:12:60:77:cd:76:2c:3b:
b4:bd:3b:9b:60:01:72:fe:5f:12:15:67:b0:40:16:
c9:c9:3f:70:d7:7a:b7:cc:b1:80:2a:b9:c5:22:a0:
b5:76:de:f0:64:3b:a0:3d:2f:64:98:9f:14:44:94:
34:ed:6a:c1:bc:3a:91:13:84:5f:f8:b7:0e:24:d3:
8f:bd:75:44:5b:e6:c9:74:ee:ba:81:24:45:c4:eb:
57:c4:16:6b:83:59:09:38:72:11:1c:82:c1:6e:51:
db:9e:60:0f:0d:f4:17:cc:cd:80:80:0b:9b:f5:76:
70:24:9f:cf:0b:db:7d:91:0f:26:4b:5d:1d:65:a0:
6b:21:c6:74:d7:a6:0f:e8:05:40:77:fc:28:6f:6a:
aa:09:9f:e2:d0:6b:b9:60:40:c6:68:da:5a:0c:63:
12:ce:5e:ef:ce:c6:1d:aa:e1:6c:fe:c7:6e:7c:4f:
eb:11:d0:f3:c6:85:58:6f:2c:63:ac:69:73:16:31:
d5:73:85:fc:ca:ef:2a:bd:c0:f9:f4:e8:e6:16:9b:
6b:9f:e6:4b:d6:66:49:df:7f:94:77:f7:95:47:8d:
e3:3d:e7:bf:47:87:2d:f4:b7:a1:9a:28:8b:09:57:
1d:20:48:f8:d8:97:bd:cc:ef:ce:c2:57:47:f4:9b:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BB:4D:F0:8F:A4:77:38:9C:C5:D9:E0:B9:78:79:EA:B6:EE:B8:05
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:5570::/48
Signature Algorithm: sha256WithRSAEncryption
18:94:be:2f:31:3c:5b:b3:b8:c1:52:09:df:d2:36:10:c6:ea:
ed:96:bc:a5:58:44:bc:44:17:aa:bc:7d:a4:4e:cd:81:c0:8f:
82:6a:1d:9d:1a:ea:10:bc:7b:8e:54:83:c9:96:f0:15:43:57:
4d:46:56:3b:25:58:f5:30:51:93:d7:69:a5:6f:e7:05:e5:f9:
b6:c8:fb:d1:88:ca:3e:a3:d0:af:ae:be:5d:fb:54:7d:d0:db:
77:b6:8f:f5:9e:5d:c5:94:49:71:e6:98:76:56:16:93:4d:64:
9c:f8:cd:70:c8:15:e1:ef:b4:01:da:5c:51:c8:ed:8c:1c:a4:
3f:84:1f:47:67:90:ac:ba:68:b8:48:58:76:4f:24:56:69:29:
70:66:a7:21:db:ba:a8:65:e9:ef:31:54:6c:ec:68:a6:e0:ee:
79:31:27:9c:8b:cf:18:b0:bf:fe:72:64:93:57:2a:20:bf:d4:
f7:66:39:41:05:d2:48:89:7d:2d:c6:f9:d1:56:ac:8c:de:cf:
9c:fa:70:8a:f8:0f:7c:7d:eb:5f:32:0b:e4:06:f2:8b:31:07:
10:f7:62:ca:df:cb:6a:2e:54:0a:7d:6b:e7:5b:b3:24:c8:18:
b7:64:9a:86:02:5d:8f:4c:0c:1d:8f:40:e6:f8:d6:5e:49:36:
da:d0:49:dd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVLrJdhmVWA6eUC9qw/WbFnr4nxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV
BAMTKEFDQkI0REYwOEZBNDc3Mzg5Q0M1RDlFMEI5Nzg3OUVBQjZFRUI4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCHRzEsUQEmB3zXYsO7S9O5tg
AXL+XxIVZ7BAFsnJP3DXerfMsYAqucUioLV23vBkO6A9L2SYnxRElDTtasG8OpET
hF/4tw4k04+9dURb5sl07rqBJEXE61fEFmuDWQk4chEcgsFuUdueYA8N9BfMzYCA
C5v1dnAkn88L232RDyZLXR1loGshxnTXpg/oBUB3/ChvaqoJn+LQa7lgQMZo2loM
YxLOXu/Oxh2q4Wz+x258T+sR0PPGhVhvLGOsaXMWMdVzhfzK7yq9wPn06OYWm2uf
5kvWZknff5R395VHjeM9579Hhy30t6GaKIsJVx0gSPjYl73M787CV0f0m1NDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrLtN8I+kdzicxdnguXh56rbuuAUwHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzNTM3MzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5
AFVwMA0GCSqGSIb3DQEBCwUAA4IBAQAYlL4vMTxbs7jBUgnf0jYQxurtlrylWES8
RBeqvH2kTs2BwI+Cah2dGuoQvHuOVIPJlvAVQ1dNRlY7JVj1MFGT12mlb+cF5fm2
yPvRiMo+o9Cvrr5d+1R90Nt3to/1nl3FlElx5ph2VhaTTWSc+M1wyBXh77QB2lxR
yO2MHKQ/hB9HZ5Csumi4SFh2TyRWaSlwZqch27qoZenvMVRs7Gim4O55MSeci88Y
sL/+cmSTVyogv9T3ZjlBBdJIiX0txvnRVqyM3s+c+nCK+A98fetfMgvkBvKLMQcQ
92LK38tqLlQKfWvnW7MkyBi3ZJqGAl2PTAwdj0Dm+NZeSTba0End
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:49 2025 by rpki-client