Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa
File: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier: ZVwqs5atZNSyunZh+HrM7SScrdgcaV2KLIwtY2wsIjQ=
Subject key identifier: E3:A0:13:AC:39:14:6D:A9:69:5E:4D:C7:9D:F5:EE:4F:FB:D5:A0:AA
Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial: 0892E4A2B59215BAF3DCCF92683E21C53EA327B7
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa
Signing time: Thu 30 May 2024 11:00:01 +0000
ROA not before: Thu 30 May 2024 10:55:01 +0000
ROA not after: Thu 29 May 2025 11:00:01 +0000
asID: 138887
IP address blocks: 2405:c40:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:92:e4:a2:b5:92:15:ba:f3:dc:cf:92:68:3e:21:c5:3e:a3:27:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Validity
Not Before: May 30 10:55:01 2024 GMT
Not After : May 29 11:00:01 2025 GMT
Subject: CN=E3A013AC39146DA9695E4DC79DF5EE4FFBD5A0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:84:82:de:65:26:eb:92:0a:0b:08:be:8b:
1e:99:d0:d3:9f:84:3e:03:cd:78:18:5b:c8:ef:6e:
89:5d:38:bd:b8:4d:e2:e6:fa:87:ba:db:ca:56:fd:
8a:54:ab:d1:29:b9:62:06:0a:05:5a:61:47:8f:4b:
d5:36:f7:03:57:b4:2a:ea:59:1e:69:ef:c8:2c:f3:
83:31:2e:55:6a:ba:a8:6f:07:6a:9e:35:fc:d9:e1:
05:8e:9d:1c:29:32:bd:0f:0c:01:b4:e6:dc:dc:1c:
0c:c0:b1:c5:8a:dc:a9:04:93:2e:9d:df:ac:36:e8:
ed:19:99:3c:b3:9c:c4:58:cd:22:a1:95:72:aa:42:
55:b9:c2:18:1c:84:84:bf:14:57:76:6c:6a:29:14:
6c:59:8b:dc:4e:80:00:3c:30:05:ac:31:a8:80:f6:
19:21:3b:98:9f:e7:9f:2c:5a:5b:40:79:b8:b9:c8:
47:ed:79:c6:9a:40:7e:40:0a:67:49:92:81:1e:b0:
cd:0a:ab:52:c7:47:fa:8d:fc:d5:ea:23:bf:39:bc:
10:73:37:4d:22:6d:79:56:10:eb:46:00:cd:19:9c:
f1:90:50:5b:50:47:c0:bb:6c:69:fa:b8:c9:1c:44:
09:6f:b4:d3:fd:c5:be:cb:5b:fc:04:d8:5d:fb:c2:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:13:AC:39:14:6D:A9:69:5E:4D:C7:9D:F5:EE:4F:FB:D5:A0:AA
X509v3 Authority Key Identifier:
keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40:4000::/36
Signature Algorithm: sha256WithRSAEncryption
6b:a4:8f:8e:f2:0a:8b:56:65:f8:98:55:62:f3:21:85:c5:02:
a3:49:d5:a1:5b:85:86:4c:fb:0a:9b:84:b4:e5:71:84:4b:01:
4f:ee:2e:21:e7:08:38:27:d5:d2:bd:2e:48:90:b3:d1:2a:9f:
30:c2:be:b2:c5:73:76:60:59:c9:e7:78:40:7d:b5:94:ec:26:
2e:51:c6:5c:a1:a4:c2:a2:9e:a1:47:33:64:a5:90:2d:02:3e:
43:35:d2:8a:26:e9:00:3f:0f:67:01:90:52:b5:23:b4:30:d3:
6e:61:95:0b:b5:19:82:4c:d7:1c:b5:d9:34:80:de:de:ca:11:
c0:6d:fb:32:74:fc:57:12:4d:ca:67:17:ec:2a:ff:9a:08:0a:
92:c9:a5:c7:34:69:37:ab:e8:87:69:54:d7:44:b7:e2:b9:61:
f7:e5:b7:f3:bc:3f:fd:d0:e3:a2:50:79:2b:7e:b4:2a:19:e2:
23:8c:4c:42:dc:84:e7:5f:8d:f8:b9:9a:81:5a:d6:b0:d0:56:
60:9a:aa:67:2d:75:e4:a8:a6:cb:75:5c:a5:19:d9:4f:07:7c:
93:39:1e:31:ce:da:c6:d7:a8:66:c3:30:59:f4:87:54:c1:35:
5e:02:c0:3f:95:54:6c:33:09:e4:ff:7c:84:14:df:32:0a:b8:
e9:9e:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:03 2025 by rpki-client