Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
File: 323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier: SFgaSXtlzfcPkOhaCV8MWQWhz4xZCkoZejyEImjp0hg=
Subject key identifier: F3:73:DE:29:39:6F:47:24:96:54:CF:FC:E7:55:A6:DE:DB:D0:F1:8A
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 72BE482FC6C5AF9E0CC1031B6565A35FC40C3795
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
Signing time: Tue 23 Apr 2024 07:00:34 +0000
ROA not before: Tue 23 Apr 2024 06:55:34 +0000
ROA not after: Tue 22 Apr 2025 07:00:34 +0000
asID: 133840
IP address blocks: 2404:e100:3008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:be:48:2f:c6:c5:af:9e:0c:c1:03:1b:65:65:a3:5f:c4:0c:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Apr 23 06:55:34 2024 GMT
Not After : Apr 22 07:00:34 2025 GMT
Subject: CN=F373DE29396F47249654CFFCE755A6DEDBD0F18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:aa:89:4d:01:0d:1b:f2:77:52:28:79:d3:
70:3a:ae:5c:b7:b3:cc:0a:2c:7d:6d:47:e1:b3:cc:
c2:a5:d8:13:19:28:b1:a2:e0:42:26:b4:8a:8a:2e:
9e:6c:1f:37:e0:de:82:e1:3a:f6:c7:24:85:73:72:
ca:0a:f3:ba:f5:32:7e:db:1f:d4:20:17:6a:0d:e8:
fe:c6:d7:1a:30:a2:d0:a3:b2:71:e6:45:86:de:69:
01:6c:cb:0e:f4:a1:6c:b6:42:96:bd:45:ee:b0:cf:
21:2a:97:17:51:b4:ff:7b:13:78:93:b5:96:5f:25:
ea:16:90:a4:98:9e:53:3f:4a:18:e8:d5:ca:35:f5:
19:e5:a1:b2:bd:51:32:6a:54:85:6f:dd:e8:a6:24:
25:a9:f6:94:da:12:86:9d:91:58:dd:1c:c8:51:28:
46:a5:68:c2:e9:92:11:8a:34:54:8e:00:57:11:40:
41:b2:b4:ff:30:98:d1:60:8a:fa:19:3f:b3:7f:a0:
af:5e:33:0a:40:2c:a0:ba:52:f7:31:bd:8c:f2:89:
91:96:7a:dc:9a:9b:50:70:86:bd:76:7a:d5:1f:45:
cd:03:47:67:a0:91:1d:23:96:c0:7e:b1:2d:dc:73:
41:a4:42:c4:3c:eb:84:1e:6e:45:6f:97:dc:f1:91:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:DE:29:39:6F:47:24:96:54:CF:FC:E7:55:A6:DE:DB:D0:F1:8A
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3008::/48
Signature Algorithm: sha256WithRSAEncryption
31:b2:93:8e:e6:68:ac:8a:bb:74:72:ea:d8:2e:5e:cc:44:d9:
51:3a:9d:77:26:c8:a6:bd:a7:4b:ce:f3:3b:d0:97:53:ea:6b:
98:28:05:7f:9a:52:ce:e2:8a:de:87:ce:06:dc:2c:cb:6b:5a:
02:97:6d:70:07:70:cd:cb:f8:e1:84:22:03:6a:83:0d:aa:cf:
da:c6:e7:9c:0c:2f:8c:6b:3a:b4:4a:1b:c5:b1:fe:25:a3:ee:
5f:6d:f0:55:76:52:8a:90:7e:fc:99:df:05:1a:e2:3f:6c:ae:
5b:81:2e:1f:28:17:fe:67:f0:8c:e6:00:64:e9:fe:27:97:00:
3d:04:52:bd:05:cc:4b:f8:85:f4:1b:85:e5:b6:25:a4:98:1e:
44:53:34:61:7f:ff:89:d0:15:72:34:16:00:7f:8c:b6:ca:97:
06:ba:d8:4e:33:0c:83:16:35:9e:40:05:7a:ad:ed:72:9d:19:
d4:e4:be:f3:12:9b:66:58:db:13:62:c2:14:bf:0e:fa:b8:95:
c9:e4:20:68:2c:8b:b7:a6:90:3f:31:04:1b:5d:4f:94:e8:4a:
69:17:4c:43:f2:5f:27:b4:2e:41:79:28:ae:ce:91:b3:04:09:
62:90:c5:e4:37:b0:ba:0c:f9:e0:bf:3b:08:50:81:ad:62:0b:
87:31:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:27 2025 by rpki-client