Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa
File: 323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier: lp8tkjNv2kpob2tSgzibRvAisIv/azcF4Q0sOq2Cq5E=
Subject key identifier: 00:8D:3F:83:18:E4:C1:10:9A:4F:79:F7:2D:5C:90:07:F0:D2:FD:4F
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 21633E2151BECCC59947EAC7A65EACDE62E2B9D8
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa
Signing time: Thu 09 May 2024 04:01:04 +0000
ROA not before: Thu 09 May 2024 03:56:04 +0000
ROA not after: Thu 08 May 2025 04:01:04 +0000
asID: 141892
IP address blocks: 2405:b900:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:63:3e:21:51:be:cc:c5:99:47:ea:c7:a6:5e:ac:de:62:e2:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:56:04 2024 GMT
Not After : May 8 04:01:04 2025 GMT
Subject: CN=008D3F8318E4C1109A4F79F72D5C9007F0D2FD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:4d:03:21:3d:8a:de:75:e7:1f:ea:01:f7:
1d:aa:8a:4c:22:69:31:25:70:af:53:35:1b:5c:c9:
47:43:58:6f:3a:2c:a7:5d:2d:79:fe:c1:53:a9:59:
76:1e:09:e2:5c:cc:91:21:53:7a:95:7b:32:a1:1e:
e5:87:b9:e4:bc:7f:3c:44:03:e1:fb:09:e6:bf:88:
9d:af:04:80:fa:42:8e:30:fc:7a:ff:9d:49:55:b5:
f8:20:42:b3:78:14:3a:05:e0:e9:ec:ab:02:4c:9d:
c8:6e:90:5c:7c:fb:ba:fe:b9:e7:f1:80:fe:d9:5f:
73:fc:ac:b1:3a:97:be:85:29:6a:ad:fc:a4:4f:8d:
58:db:09:35:72:ba:2c:e2:21:31:19:b6:0a:58:47:
b3:dd:30:76:3c:21:bd:71:da:7e:d2:b9:f8:e6:bf:
f2:56:ce:48:6c:9e:91:a2:43:4c:e2:29:0e:7b:f5:
dd:9f:ad:06:91:d6:be:7b:16:10:ed:34:a5:72:7f:
69:0f:74:53:71:ac:de:50:2a:15:f1:89:7d:86:b4:
04:d6:c3:c6:61:94:10:13:40:53:e4:cd:87:46:1d:
5b:47:1e:3f:e4:c2:4e:30:cf:65:21:c4:ad:b9:c2:
a9:cc:4c:84:39:32:4f:1d:22:0a:89:5c:7b:bb:2c:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:3F:83:18:E4:C1:10:9A:4F:79:F7:2D:5C:90:07:F0:D2:FD:4F
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:70::/48
Signature Algorithm: sha256WithRSAEncryption
af:39:cf:63:a4:89:00:9a:cc:a2:8d:65:a7:6b:27:02:a8:81:
24:ce:7e:bb:90:96:d8:dc:02:59:8d:50:6b:a5:0d:5b:48:fc:
0f:e6:5f:f9:15:90:a8:fe:89:a7:35:bf:23:42:7b:1e:51:81:
e3:b6:8d:c4:16:d6:11:69:42:05:46:b8:32:66:63:a7:29:28:
70:56:7d:39:31:18:77:b5:87:37:82:a1:0a:81:40:63:d0:35:
0f:8d:12:4e:81:7b:4e:f5:75:ef:98:58:1b:e7:f9:9c:5c:fd:
fb:e7:44:03:19:2c:2f:61:3e:12:90:ba:86:02:5f:54:b8:40:
00:a4:b7:10:fa:f5:0f:db:5c:c7:c5:e8:f8:cb:d1:8c:7d:9d:
03:9a:88:b0:79:14:55:5f:53:a1:e0:08:11:18:88:d8:18:04:
1f:14:b8:87:0d:0b:e6:52:66:90:94:cc:91:1f:f1:1a:9f:2e:
2a:a0:36:f0:e9:a5:05:3f:d3:b8:d9:0b:d7:37:4f:3b:3f:34:
1d:0e:17:77:50:ec:10:77:72:d2:27:8a:12:51:a2:63:69:9b:
94:05:81:07:cc:f9:2e:e6:74:47:f3:bf:e7:17:6d:90:37:42:
08:93:09:4c:c2:d7:2d:95:a3:0f:46:66:d3:06:16:e2:4a:17:
6f:e6:a7:2b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIWM+IVG+zMWZR+rHpl6s3mLiudgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDRaFw0yNTA1MDgwNDAxMDRaMDMxMTAvBgNV
BAMTKDAwOEQzRjgzMThFNEMxMTA5QTRGNzlGNzJENUM5MDA3RjBEMkZENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r00DIT2K3nXnH+oB9x2qikwi
aTElcK9TNRtcyUdDWG86LKddLXn+wVOpWXYeCeJczJEhU3qVezKhHuWHueS8fzxE
A+H7Cea/iJ2vBID6Qo4w/Hr/nUlVtfggQrN4FDoF4OnsqwJMnchukFx8+7r+uefx
gP7ZX3P8rLE6l76FKWqt/KRPjVjbCTVyuiziITEZtgpYR7PdMHY8Ib1x2n7Sufjm
v/JWzkhsnpGiQ0ziKQ579d2frQaR1r57FhDtNKVyf2kPdFNxrN5QKhXxiX2GtATW
w8ZhlBATQFPkzYdGHVtHHj/kwk4wz2UhxK25wqnMTIQ5Mk8dIgqJXHu7LPCjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUAI0/gxjkwRCaT3n3LVyQB/DS/U8wHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA
cDANBgkqhkiG9w0BAQsFAAOCAQEArznPY6SJAJrMoo1lp2snAqiBJM5+u5CW2NwC
WY1Qa6UNW0j8D+Zf+RWQqP6JpzW/I0J7HlGB47aNxBbWEWlCBUa4MmZjpykocFZ9
OTEYd7WHN4KhCoFAY9A1D40SToF7TvV175hYG+f5nFz9++dEAxksL2E+EpC6hgJf
VLhAAKS3EPr1D9tcx8Xo+MvRjH2dA5qIsHkUVV9ToeAIERiI2BgEHxS4hw0L5lJm
kJTMkR/xGp8uKqA28OmlBT/TuNkL1zdPOz80HQ4Xd1DsEHdy0ieKElGiY2mblAWB
B8z5LuZ0R/O/5xdtkDdCCJMJTMLXLZWjD0Zm0wYW4koXb+anKw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:39 2025 by rpki-client