Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa
File: 323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier: Bd5TUQGDq1I9uMo5xUTF3mxCM7PYpTwuXK97Uy71jVU=
Subject key identifier: F2:3F:92:16:3D:F4:C4:FF:01:25:26:34:75:AB:CD:0B:CE:72:C5:0B
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 1438523A3F7B9B47894A6AF208FEF071413D5DD1
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa
Signing time: Thu 09 May 2024 04:01:01 +0000
ROA not before: Thu 09 May 2024 03:56:01 +0000
ROA not after: Thu 08 May 2025 04:01:01 +0000
asID: 141892
IP address blocks: 2405:b900:65::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:38:52:3a:3f:7b:9b:47:89:4a:6a:f2:08:fe:f0:71:41:3d:5d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:01 2024 GMT
Not After : May 8 04:01:01 2025 GMT
Subject: CN=F23F92163DF4C4FF0125263475ABCD0BCE72C50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:45:a0:c1:14:e4:16:37:03:14:dd:38:e1:
90:b8:a3:3a:1d:49:cb:35:a6:2f:09:e5:28:ec:3a:
2e:c7:b6:f6:5d:9f:40:06:1a:43:a1:2d:72:e5:fd:
dd:e3:16:ad:56:ee:5c:36:27:3f:38:e6:50:2b:b6:
7d:75:6f:56:6a:af:6c:77:62:9b:41:12:0c:58:3f:
7d:fd:59:5d:76:80:b9:e8:be:b4:40:48:bf:59:9e:
91:a0:67:a2:6e:1f:5f:a7:3b:3d:cd:35:d0:ad:05:
be:66:87:4f:8c:f3:61:92:b6:5d:e7:33:fc:37:55:
86:5a:b7:39:f4:27:ea:cf:1a:e0:6c:ea:1b:8a:f6:
c0:6b:98:24:ad:f2:0b:bf:33:cf:0e:2b:c1:1c:5e:
67:06:f7:46:8d:74:50:bc:5d:96:48:a7:4c:52:55:
6f:e9:e4:96:76:ef:fe:91:07:b0:37:81:51:53:8f:
42:f7:1f:55:11:28:8d:54:89:b2:9c:d1:88:67:24:
cb:d5:8b:b2:96:2c:7b:40:84:27:38:77:2d:3c:09:
47:e1:e9:81:f7:da:2c:06:8e:c5:1c:2a:b2:aa:07:
02:44:c0:cc:f4:b8:94:ab:0c:ff:29:d7:a9:3e:be:
5d:ce:08:31:df:f0:92:81:46:d4:cf:ba:bc:d0:08:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:92:16:3D:F4:C4:FF:01:25:26:34:75:AB:CD:0B:CE:72:C5:0B
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:65::/48
Signature Algorithm: sha256WithRSAEncryption
3f:0d:df:1c:5f:27:62:4e:7f:aa:4e:e0:97:3b:9f:78:b3:ed:
dd:e2:cd:c0:3c:bd:b3:21:f9:74:3c:5b:43:a1:d3:cd:2e:c2:
08:a1:0e:1d:2a:5c:81:19:75:2e:c2:dc:d1:03:2d:c9:41:a1:
b2:64:44:8e:4d:17:ef:90:f6:54:63:1a:8c:20:e1:df:a0:a4:
e9:96:70:74:7a:ac:21:c4:09:ee:89:03:5b:1c:e8:a3:4d:1c:
5f:a2:ff:27:ca:0c:d3:5e:43:02:77:89:41:73:23:54:c9:7e:
e5:3c:12:80:93:e5:61:47:53:34:b3:44:c8:3f:95:26:b0:78:
08:e4:30:32:f4:aa:1f:1f:d8:ec:82:6a:6f:f8:2b:23:a5:47:
16:90:2f:f2:a2:e0:53:48:ed:b0:0e:7b:91:ec:de:b1:9f:bf:
29:b0:af:91:3f:47:39:7c:b3:3e:19:5b:27:d8:67:2d:66:06:
9f:d2:3b:46:bd:65:6a:b9:d2:b5:0e:32:cd:b6:b8:ec:d6:a6:
6e:5f:54:80:8e:f5:d0:e9:12:ca:48:13:23:82:50:bd:b4:b4:
76:4c:3f:54:25:8b:f9:38:6c:4f:94:77:00:92:d3:e7:07:69:
4c:08:f3:59:bc:ca:a1:5f:fe:13:1d:f8:d3:0e:ee:18:38:79:
08:a6:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:19 2025 by rpki-client