Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa
File: 323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier: WJ9TZ0emUeBtAxElH+LguKD+2A9zer3ozc3W36Kx1Rw=
Subject key identifier: 88:BD:9E:83:76:73:64:4F:CF:45:39:F9:09:6C:96:CA:C6:48:A3:67
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 5861356EB67AB1D3C7C68DB9AB8C35408964DEBE
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa
Signing time: Fri 25 Oct 2024 13:01:05 +0000
ROA not before: Fri 25 Oct 2024 12:56:05 +0000
ROA not after: Fri 24 Oct 2025 13:01:05 +0000
asID: 55685
IP address blocks: 2404:e100:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:61:35:6e:b6:7a:b1:d3:c7:c6:8d:b9:ab:8c:35:40:89:64:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Oct 25 12:56:05 2024 GMT
Not After : Oct 24 13:01:05 2025 GMT
Subject: CN=88BD9E837673644FCF4539F9096C96CAC648A367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:d7:a0:e5:57:c7:8f:83:12:8a:ce:1b:fb:
e4:67:ef:a4:91:62:27:9e:44:3e:c0:cf:e0:e9:ae:
6a:93:e2:96:6a:06:74:67:81:79:e1:40:64:82:79:
83:07:0a:1e:a9:3a:62:a5:ac:1d:cb:52:8c:dc:2c:
c2:ab:44:13:0f:76:55:25:ce:09:a2:06:6e:be:28:
6f:7e:e4:09:fa:0b:54:5f:44:cb:58:07:06:c0:14:
97:94:75:9d:71:24:49:32:63:62:29:93:1c:1e:88:
d6:b2:14:0f:90:45:5c:86:05:d8:ac:c0:50:01:de:
0f:44:0a:5f:b3:c2:e0:95:60:88:ec:09:bf:17:50:
66:ce:99:3f:f7:56:5f:8a:b2:77:26:d4:33:ea:81:
4d:82:6e:a9:2c:54:eb:21:1a:43:97:d2:38:48:41:
73:38:52:13:a0:88:1d:ad:c2:39:63:65:8d:f6:e5:
25:97:e8:0c:a3:03:a1:a9:42:ee:b3:cf:cb:c8:29:
4d:3f:38:86:1e:29:70:09:8b:d9:34:43:07:9e:34:
c4:28:28:22:d9:51:78:fa:27:f8:92:96:db:24:4b:
91:b8:b8:b0:73:cd:f0:0b:24:78:7c:bd:0f:a3:45:
02:a1:09:9a:86:11:3f:cf:0a:e2:9d:08:3d:48:1c:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BD:9E:83:76:73:64:4F:CF:45:39:F9:09:6C:96:CA:C6:48:A3:67
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:6::/48
Signature Algorithm: sha256WithRSAEncryption
32:e4:f0:4b:ec:9e:fe:da:a8:f7:a3:e1:72:e5:f0:4a:a6:1c:
2b:e4:4b:05:b1:df:84:f3:32:2c:62:59:1a:5f:aa:ab:dc:61:
35:9b:1f:7e:8a:01:15:bd:3e:81:62:1d:e7:3a:9e:dc:75:a1:
b2:0e:6a:2c:dd:51:b4:6e:53:01:a0:8a:7f:cb:2e:5d:3f:2f:
a2:55:e8:95:ab:74:47:32:8e:8a:ea:7f:d6:69:3c:68:ca:ca:
0d:be:33:bb:73:a1:95:f2:b2:3e:3f:9d:b2:f9:ba:a3:dc:52:
09:7a:7c:c6:46:90:c4:65:9e:3e:b0:34:0d:66:bc:a6:1f:b1:
89:31:62:4d:bd:d2:49:4f:b1:c0:51:7b:02:40:c5:76:f0:84:
1c:50:24:53:3c:2d:cd:43:ad:56:90:70:56:02:ab:34:e2:36:
66:43:3d:2b:cd:e0:14:28:29:29:3d:19:df:ab:0a:9f:d3:b2:
62:0e:23:cd:7f:ac:0b:fe:28:20:d8:82:cf:c1:17:05:57:ea:
b0:9a:2e:13:4b:c3:68:00:1a:e0:f9:6b:73:5e:b7:99:57:38:
7c:e1:a0:49:c8:be:19:72:56:a3:52:8d:04:98:91:d7:d1:57:
e7:aa:dc:95:85:1c:8a:22:63:a7:db:73:74:80:07:19:61:16:
cc:47:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:00 2025 by rpki-client