Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa
File: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (raw, json)
Hash identifier: 990T31GrQi0zN/yw56QbCuzg7CmXBM17dQEUhL4iSL4=
Subject key identifier: CC:25:DD:9B:CD:58:FA:A1:EE:88:43:2F:17:43:78:14:88:0A:A9:D6
Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial: 75F4A64EC4B4CB10EC01126D4FE57145FDFB4525
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa
Signing time: Thu 30 May 2024 11:00:00 +0000
ROA not before: Thu 30 May 2024 10:55:00 +0000
ROA not after: Thu 29 May 2025 11:00:00 +0000
asID: 138887
IP address blocks: 2405:c40::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f4:a6:4e:c4:b4:cb:10:ec:01:12:6d:4f:e5:71:45:fd:fb:45:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Validity
Not Before: May 30 10:55:00 2024 GMT
Not After : May 29 11:00:00 2025 GMT
Subject: CN=CC25DD9BCD58FAA1EE88432F17437814880AA9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:40:68:cf:cd:1a:25:3c:a2:64:d6:a5:3c:
8d:f3:0c:92:27:29:a2:8f:b4:f8:0f:6c:7a:57:f7:
31:a8:04:5a:d2:54:29:7c:21:d4:a8:94:21:4a:40:
a5:32:f2:82:8e:99:a5:f7:2a:bb:21:83:0c:6a:2d:
89:82:97:74:3a:8b:f9:ae:97:fb:b4:24:c8:be:67:
c3:d0:05:61:8f:5d:53:5e:92:2a:0d:72:d1:53:97:
58:af:66:c0:e5:7c:3e:80:a9:83:46:c1:f9:cb:38:
cb:e8:8a:31:9d:c4:df:1b:43:f3:64:7b:ae:84:d8:
97:90:9f:03:75:01:00:ef:d9:09:d0:40:cc:d0:e2:
d5:dc:22:e4:d9:de:fd:d5:13:73:28:b1:28:e3:7e:
f0:5d:59:34:f5:54:9d:06:6d:d4:54:b1:7e:fd:87:
58:43:e4:60:9f:96:7b:66:74:92:b9:dc:98:82:06:
6d:69:b6:04:1e:35:50:0c:41:eb:2b:f0:65:33:b2:
38:d7:b7:b2:40:78:dd:8b:5b:0e:11:65:9c:bc:f2:
66:a9:95:14:b0:7b:bc:66:c6:f2:66:20:f6:52:52:
e0:63:d3:1f:ea:ba:33:3a:a0:4a:35:47:fe:29:aa:
cc:b9:48:89:ef:0e:37:e3:6e:a9:ee:30:dd:be:49:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:DD:9B:CD:58:FA:A1:EE:88:43:2F:17:43:78:14:88:0A:A9:D6
X509v3 Authority Key Identifier:
keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40::/33
Signature Algorithm: sha256WithRSAEncryption
16:cf:c4:52:1a:f3:21:c8:03:f9:20:58:02:07:95:65:60:19:
41:4c:d1:da:ed:ba:f3:2b:51:da:c7:8b:e6:6f:01:77:6a:ef:
25:f1:e7:f5:d8:f6:d3:2b:a9:02:b2:ad:1d:57:53:7a:f3:be:
37:63:5a:f0:cd:58:fe:5a:34:e1:ca:2b:15:be:f2:f4:c8:1c:
3d:4e:95:d9:8b:df:99:d5:b8:88:00:6d:5a:57:3a:ea:62:62:
f0:21:c7:70:0e:27:bb:a0:a8:0c:f8:a3:7c:c2:3f:10:5e:8c:
8d:9a:44:76:d4:93:69:66:b6:3b:d1:f2:63:2b:29:12:c7:68:
8f:3f:a3:4c:88:88:15:34:3a:93:02:99:9f:8d:b9:9f:4b:e8:
23:7a:04:1e:c7:84:57:fe:2f:7a:c1:6c:40:23:21:ee:7d:90:
c0:e2:9d:1a:26:91:97:ae:1d:c1:09:66:f9:aa:a4:a7:23:3c:
ca:dd:4b:16:6e:02:4e:db:08:b6:07:6d:36:70:91:35:1d:13:
63:9a:53:b6:27:51:8a:7d:f0:c7:9e:4f:36:7d:44:e7:fb:25:
f3:ee:35:29:2a:5f:e4:7f:29:59:71:6e:55:4b:b2:89:87:8f:
87:49:7f:69:8d:00:ac:05:c0:59:8b:36:75:36:f6:70:24:7d:
4b:d1:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:56 2025 by rpki-client