Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
File: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier: GZ3/V+zqcDIloNwLRDncl8p22SXMpal1fQkO46P1elU=
Subject key identifier: 6F:A1:4A:5A:F9:C7:D6:F4:1D:27:34:39:83:F3:1C:83:54:1A:5E:D0
Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial: 62BFADD562D13931C19D5D79CFD14BC1CAE5ECBC
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
Signing time: Tue 13 Aug 2024 01:22:59 +0000
ROA not before: Tue 13 Aug 2024 01:17:59 +0000
ROA not after: Tue 12 Aug 2025 01:22:59 +0000
asID: 136079
IP address blocks: 2405:2cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bf:ad:d5:62:d1:39:31:c1:9d:5d:79:cf:d1:4b:c1:ca:e5:ec:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Validity
Not Before: Aug 13 01:17:59 2024 GMT
Not After : Aug 12 01:22:59 2025 GMT
Subject: CN=6FA14A5AF9C7D6F41D27343983F31C83541A5ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:e3:b2:38:6c:6d:dc:6a:79:ad:36:6e:44:
e1:2b:8b:af:a4:f6:99:25:21:87:bf:ca:f5:a5:7a:
c4:e6:48:a3:e6:67:00:fc:6d:b7:80:c0:28:8d:ab:
03:55:bf:71:a6:83:a3:0c:f4:77:02:2e:a7:df:90:
4d:d9:10:b0:42:68:7c:7a:8d:73:11:d8:2d:61:d8:
56:7f:8a:39:69:8e:73:1e:0d:86:ad:39:50:38:26:
1c:27:11:88:2e:0c:57:c0:1b:29:1e:ad:97:47:ba:
6e:97:ad:bc:47:05:2b:28:0b:7b:ce:c4:fc:49:27:
26:74:7e:89:90:9d:cf:f2:a5:fe:23:b7:5c:13:0a:
53:26:88:6c:a4:59:42:80:9e:eb:f5:a9:f3:7e:87:
b1:11:d4:2e:5b:23:0e:3c:e4:28:90:b3:a2:b3:bb:
2e:48:7a:84:d7:a1:20:b8:03:88:33:da:44:09:db:
7f:84:e4:9d:c8:11:e3:05:3f:85:01:9d:c2:dc:d7:
51:2f:b5:a0:04:3b:86:d9:b2:c7:f3:59:f5:ba:fb:
ba:78:ce:03:1f:2a:d7:de:ba:ec:19:14:5d:61:f7:
d1:39:f6:b5:a5:04:7e:9e:03:ac:f9:6f:2e:8c:4f:
88:6a:3a:92:44:60:5c:d6:7e:5d:90:31:c2:ba:e5:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:4A:5A:F9:C7:D6:F4:1D:27:34:39:83:F3:1C:83:54:1A:5E:D0
X509v3 Authority Key Identifier:
keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:2cc0::/48
Signature Algorithm: sha256WithRSAEncryption
37:16:70:06:c7:34:01:18:df:cb:58:8a:bb:f8:06:c0:b4:70:
3c:b8:80:27:ab:8e:19:7f:2e:b4:13:40:12:f7:09:36:55:84:
c4:eb:b6:a4:e0:f5:b1:eb:6f:3f:ef:bd:87:35:d5:63:f0:80:
c4:24:56:52:c0:ea:3b:e4:9f:b9:f4:fe:dd:ae:42:05:1e:15:
d4:d9:0f:25:de:8d:0c:b0:e6:07:fa:e8:ed:62:2d:45:b5:15:
6b:9b:a7:ad:a9:36:b1:b6:d2:10:75:cc:3c:0c:fb:55:b8:d4:
6d:08:6d:70:30:7e:da:9b:51:12:8b:da:4c:29:58:7d:64:44:
72:3c:95:d0:c2:6d:67:04:38:e9:5a:35:1d:a0:43:b7:79:13:
c6:2c:ac:19:cd:4f:92:49:79:0e:2b:ed:71:6c:d6:14:4f:47:
36:48:8e:ee:37:ce:a3:9f:07:90:6e:a0:ac:a5:1e:f1:d6:04:
30:f7:13:e2:9b:3d:fd:6f:9d:d0:c7:b8:64:fb:9b:58:08:9f:
57:a1:aa:51:b0:5d:4a:12:61:dc:8a:f8:28:29:d9:3d:df:3e:
95:39:e5:32:3b:b7:85:c8:aa:27:af:d6:27:a6:d9:6d:30:b6:
e6:d1:5b:1e:a7:1e:d3:94:85:9f:e4:c2:06:26:b4:46:cc:54:
32:31:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:21 2025 by rpki-client