Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa
File: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (raw, json)
Hash identifier: EdYd7IGuHyCu/cThwtshNLf7zxuRmElBhySIxR+qG6g=
Subject key identifier: B8:56:75:DB:DC:54:A2:1C:D8:AA:25:37:1E:7E:6F:85:6E:93:B6:BC
Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial: 0B31E2CA409D01DABD9DFBD8CCD106FBEC5CA296
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa
Signing time: Sat 19 Oct 2024 20:00:00 +0000
ROA not before: Sat 19 Oct 2024 19:55:00 +0000
ROA not after: Sat 18 Oct 2025 20:00:00 +0000
asID: 139949
IP address blocks: 2405:aac0:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:31:e2:ca:40:9d:01:da:bd:9d:fb:d8:cc:d1:06:fb:ec:5c:a2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Validity
Not Before: Oct 19 19:55:00 2024 GMT
Not After : Oct 18 20:00:00 2025 GMT
Subject: CN=B85675DBDC54A21CD8AA25371E7E6F856E93B6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:bf:24:75:c6:fa:2b:74:0a:0e:7c:d9:49:
13:dd:3b:f5:4f:3a:03:28:83:12:0a:35:cc:60:7c:
48:15:0a:54:61:aa:a4:9c:15:32:a8:1c:5d:ad:88:
0b:01:5a:d4:0e:f6:b6:e6:28:f4:71:6b:8d:06:7f:
bd:39:56:8a:40:58:e4:9a:e4:3f:ed:e1:3f:d8:2c:
0a:d5:47:c8:c6:7b:ba:1f:3a:d2:03:6d:94:20:7d:
a7:e8:91:1a:6a:ab:a8:91:eb:31:5d:db:dc:f2:7e:
e5:8e:d0:61:e9:4b:25:a0:09:22:4c:ef:bc:c0:6c:
1e:1e:c3:2c:c2:b1:1e:7f:9f:b4:81:6b:d1:5d:ea:
06:a1:6a:d2:32:5a:78:fd:26:3e:9c:1d:00:dc:49:
b6:ea:58:c5:e1:cd:b9:ba:3b:d7:83:6f:e6:b7:5f:
e2:f8:58:34:52:b7:58:12:14:01:f5:84:16:7e:9e:
c9:60:6c:c2:1a:e8:71:8c:5a:5c:c7:89:ee:4f:21:
e7:6e:e6:ed:a1:b8:c4:48:76:1e:78:a1:c8:57:3f:
62:6f:cc:c0:95:4d:be:0b:c1:57:15:b6:25:c9:17:
6e:33:42:c6:49:52:0e:47:ef:35:bd:8c:a3:9d:fb:
a4:5e:39:08:57:68:66:05:2c:7f:e2:b1:6f:81:a7:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:75:DB:DC:54:A2:1C:D8:AA:25:37:1E:7E:6F:85:6E:93:B6:BC
X509v3 Authority Key Identifier:
keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:400::/40
Signature Algorithm: sha256WithRSAEncryption
ed:72:77:58:8b:b0:13:09:18:21:76:43:89:37:85:64:d8:9b:
14:b0:c2:90:ab:a6:30:e1:37:31:72:9a:9c:ca:45:3c:95:88:
c2:9d:d0:fb:2f:30:3a:1a:08:37:7a:bc:4e:9f:b8:a4:d4:9d:
4d:32:6d:17:d2:44:b3:94:86:2c:32:f5:31:ee:43:96:aa:e6:
33:96:b5:21:e4:9e:35:d1:b4:fb:01:c2:e7:2c:d3:7b:a1:32:
95:26:7c:4d:e0:c7:94:d9:7b:f1:a7:bd:5a:46:99:af:91:c8:
67:dd:5c:d1:35:bb:ef:27:59:ba:a4:7d:c8:50:c6:ea:31:05:
15:35:0c:24:1a:52:b3:99:be:06:6a:d5:63:e4:f7:79:a3:52:
63:de:34:a6:30:b7:7f:4d:3b:ba:28:e5:ca:28:fd:fd:b3:3b:
a9:0d:a4:14:db:8c:c7:a1:b8:6e:ba:ea:42:94:60:b0:ff:a8:
94:89:7b:31:84:92:a6:44:36:34:c1:34:9a:14:e8:c6:da:5a:
e3:f6:b0:a5:a7:bc:e5:05:a1:be:f5:f4:5e:15:a2:66:bd:54:
08:df:8b:8d:fb:7f:7c:8c:31:c5:84:c5:08:e4:51:95:f4:59:
6d:a2:4c:09:63:f0:67:0d:37:24:72:e0:0a:2c:38:44:1d:a2:
26:7f:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:43 2025 by rpki-client