Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa
File: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier: N0JEl5mCrRx1semSFWu8H1/bmxyDCo6xhdzLtOb9u7M=
Subject key identifier: F7:93:04:74:9C:1C:4B:AC:32:93:6C:8B:72:D3:06:E5:3A:0D:F3:7D
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 0D175F43CDDA7A7C60F977C9FAC181D7B83AE881
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa
Signing time: Mon 01 Jul 2024 01:05:08 +0000
ROA not before: Mon 01 Jul 2024 01:00:08 +0000
ROA not after: Mon 30 Jun 2025 01:05:08 +0000
asID: 38156
IP address blocks: 2405:a540:1002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:17:5f:43:cd:da:7a:7c:60:f9:77:c9:fa:c1:81:d7:b8:3a:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Jul 1 01:00:08 2024 GMT
Not After : Jun 30 01:05:08 2025 GMT
Subject: CN=F79304749C1C4BAC32936C8B72D306E53A0DF37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:0c:ee:79:cb:23:64:07:f7:0b:46:29:33:
95:92:43:ba:8a:f7:39:85:6a:7b:d3:c5:17:d8:a9:
34:ec:f8:da:ec:5c:d8:bc:f2:c6:7c:46:f1:04:52:
8f:07:d8:61:82:c3:09:8e:26:a1:6d:b5:74:7f:47:
b0:10:86:84:0c:cd:13:59:62:fd:10:a1:b0:7a:7c:
cf:8f:ca:03:46:13:ff:df:c9:90:a4:84:0f:f2:82:
65:16:4d:dd:64:eb:ba:28:89:fe:90:39:2d:dd:41:
0a:9f:fc:eb:76:4b:cd:a4:16:31:f7:7b:20:5a:e2:
08:7a:33:1f:7e:a3:5d:b2:ec:0a:52:02:6c:d6:26:
99:ef:2f:d2:a0:ae:f5:59:11:1c:0c:a7:d2:92:a5:
95:2a:93:06:9a:d9:ba:02:48:1f:1b:c1:bf:dd:5c:
a9:ff:af:79:05:71:1e:75:52:25:a4:37:06:d2:21:
ec:ac:f5:4a:32:36:2a:b7:2e:8a:92:27:0a:ac:93:
3e:af:d1:e7:ff:07:f7:47:7d:91:9a:b6:d2:d3:1b:
5e:9b:b0:44:1f:f4:1e:91:64:59:f9:7f:38:28:d8:
db:9d:c3:ab:41:bb:ee:a1:58:1a:f6:2d:dd:91:65:
0f:1f:66:9b:20:38:66:6d:95:8b:d4:35:3c:9d:d7:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:04:74:9C:1C:4B:AC:32:93:6C:8B:72:D3:06:E5:3A:0D:F3:7D
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540:1002::/48
Signature Algorithm: sha256WithRSAEncryption
43:ab:08:6b:c1:e6:57:c5:f7:ef:3d:be:3c:90:45:7c:e8:a5:
9e:6e:e5:71:92:a8:a8:82:5a:c9:e7:4c:7b:39:6f:88:a1:18:
d1:7e:8e:a0:c3:cb:02:58:9e:b2:a7:ae:b5:2f:31:41:45:76:
c9:c5:f0:e3:73:9f:a3:c3:e0:e0:e1:73:42:44:d2:46:3c:2f:
94:0e:c3:10:bb:b0:e2:ad:1b:95:72:01:47:b1:c7:df:75:5e:
7f:d6:7c:38:dc:1f:90:4f:73:f4:c6:c9:2a:f1:87:d6:2c:b5:
50:32:d3:ee:53:4f:dd:3f:12:0d:9b:8a:94:1f:6b:0b:1a:06:
d5:26:a0:17:67:42:53:89:da:f2:1c:35:55:a0:1c:6c:aa:cc:
08:41:2e:02:de:da:1c:6f:ba:ce:c0:42:90:6d:47:ee:79:4e:
86:95:fb:c3:44:fb:35:f1:08:52:7d:24:a9:3e:c8:cd:b1:c1:
38:ea:4a:65:52:8b:ab:c2:a6:ba:da:90:87:ff:50:29:f1:89:
4b:1c:1f:5e:fe:30:d6:13:80:26:dd:bf:69:88:ee:91:15:ff:
83:37:eb:32:ab:1a:18:8f:e3:1d:12:ce:ac:90:58:9a:bf:e5:
78:10:1a:ed:ce:93:b2:eb:73:2c:32:ea:eb:38:72:b6:31:fc:
21:d5:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:04 2025 by rpki-client