Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa
File: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (raw, json)
Hash identifier: 8y+XoYezcam62FJiVxsj4m8iAkEJZIBTdapyJ5XUNwk=
Subject key identifier: FC:9A:0B:CA:36:CD:B6:E3:43:CD:2A:8E:C8:DE:09:44:98:4E:F9:9B
Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial: 0DDBAE805184ED02ACC1F7168BEF275F94D85DFD
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa
Signing time: Thu 04 Jul 2024 14:00:01 +0000
ROA not before: Thu 04 Jul 2024 13:55:01 +0000
ROA not after: Thu 03 Jul 2025 14:00:01 +0000
asID: 138887
IP address blocks: 2405:c40:f000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:db:ae:80:51:84:ed:02:ac:c1:f7:16:8b:ef:27:5f:94:d8:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Validity
Not Before: Jul 4 13:55:01 2024 GMT
Not After : Jul 3 14:00:01 2025 GMT
Subject: CN=FC9A0BCA36CDB6E343CD2A8EC8DE0944984EF99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:2a:00:dd:a4:58:6a:51:81:e0:1c:9f:8d:
a2:23:07:be:86:18:c5:cf:cd:1f:9c:c7:e0:ff:4c:
6b:65:60:c1:ec:a5:db:22:e1:ef:70:6b:4c:ce:92:
11:04:a3:42:70:a7:52:5d:c4:17:b3:84:aa:d6:ef:
50:71:51:ce:32:a2:cb:89:93:d0:b9:8d:b5:78:57:
ca:93:fc:b5:83:d1:f9:4e:b8:6f:be:b6:61:6e:d2:
40:15:86:d2:fd:e0:09:23:75:33:70:81:f7:8a:75:
3a:d7:d5:8f:3f:8d:e7:69:cc:35:2e:81:15:17:31:
47:c1:5f:4d:76:98:36:1a:4d:6c:ca:ca:7b:71:a8:
7b:a4:f8:c7:43:59:c1:43:09:56:23:e9:ec:a9:3b:
89:8d:9e:7b:84:45:36:de:8c:af:eb:83:d7:d9:b8:
f5:14:9d:86:4b:6a:5a:e0:81:2a:9e:5b:02:b7:96:
61:64:64:c3:ce:36:fa:c4:69:7c:e5:45:97:e3:7e:
e7:8e:f1:99:70:b5:68:3f:f8:0a:70:d9:52:46:e6:
fe:3a:38:eb:19:0c:f5:e2:dc:47:c5:e4:2b:54:26:
4e:ad:e8:6a:fb:10:0d:7a:9b:d0:b1:e6:f0:4f:fa:
64:5a:f2:2d:06:64:8c:d7:c7:4a:e0:7c:69:f4:6e:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:0B:CA:36:CD:B6:E3:43:CD:2A:8E:C8:DE:09:44:98:4E:F9:9B
X509v3 Authority Key Identifier:
keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40:f000::/40
Signature Algorithm: sha256WithRSAEncryption
67:5a:fe:24:91:35:87:ce:b7:b5:ed:87:80:c0:d1:de:cc:75:
b5:15:64:26:c8:2e:a6:37:d2:fa:7b:eb:c9:a6:cd:af:c3:25:
0e:87:a9:e9:85:9a:4b:81:5c:1a:2b:90:e8:5f:cf:50:bd:c3:
30:e1:d7:c1:82:65:2b:b6:b0:5b:ad:30:8d:f1:54:17:99:56:
db:c0:af:16:f4:47:9a:20:6f:80:4b:b5:ff:e6:bf:00:25:c4:
2d:ce:10:cc:ad:21:57:9d:e6:53:c0:f5:21:db:d4:71:10:6c:
e5:54:ab:f9:30:b8:c5:d8:ce:4b:6d:d6:b3:91:7e:44:53:67:
cd:a6:19:d8:75:8d:f3:17:24:4f:29:b9:c2:2d:49:ac:91:18:
23:27:37:5c:a3:37:c1:69:30:10:8f:ad:3e:66:d2:af:e4:c0:
20:d4:f9:cd:35:a1:67:18:d3:af:94:1b:a2:70:77:e1:23:0a:
d3:ea:cb:8a:a9:55:cf:69:57:a5:b1:bf:12:4a:ca:0a:de:4e:
c1:7e:81:5a:da:00:a2:10:69:c2:47:14:6d:b1:a5:b4:52:0c:
c1:5c:63:1c:82:77:7b:56:b3:c2:d7:74:ba:79:68:d7:32:68:
a4:66:5b:d7:55:7b:17:ad:bd:52:a0:c0:20:6c:67:63:b7:d6:
c2:74:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:54 2025 by rpki-client