Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa
File: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier: D9z0XyRnIBxyuVCQSHNxCZWuB4tf7WpTkC318+YEGM0=
Subject key identifier: 82:71:E0:3A:DD:FF:C9:98:A7:A1:99:FD:B1:CE:6C:C9:CA:96:4B:1D
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 3EC3FB82AC335EE97EFFFE03A3CE5E4064D077B3
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa
Signing time: Wed 20 Nov 2024 15:00:02 +0000
ROA not before: Wed 20 Nov 2024 14:55:02 +0000
ROA not after: Wed 19 Nov 2025 15:00:02 +0000
asID: 38156
IP address blocks: 2405:a540:1005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c3:fb:82:ac:33:5e:e9:7e:ff:fe:03:a3:ce:5e:40:64:d0:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Nov 20 14:55:02 2024 GMT
Not After : Nov 19 15:00:02 2025 GMT
Subject: CN=8271E03ADDFFC998A7A199FDB1CE6CC9CA964B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:c1:da:26:33:4b:f4:44:51:af:01:60:79:
02:55:ce:b2:55:fa:af:5c:f7:f2:b6:05:e3:8c:94:
bc:21:92:30:b2:36:60:94:14:ad:9f:fb:df:a8:24:
69:03:b5:73:41:c7:cf:e2:ba:44:cb:d8:81:ed:16:
be:52:00:06:e7:b0:79:8e:48:5d:e7:ef:a5:a5:30:
f8:8f:c0:7f:37:e4:f3:a5:00:91:1d:3a:41:d7:33:
7f:6f:0c:da:9b:d3:4d:77:56:7e:8c:03:f7:90:fa:
5c:c9:1e:12:6b:6c:fb:e7:20:0c:79:54:e2:f2:16:
87:0a:66:e8:81:db:60:30:b8:25:80:eb:cf:2e:18:
74:a8:28:5e:a1:3b:93:ba:c2:4c:4d:29:47:89:ec:
a5:b9:1f:66:99:13:42:08:ed:02:15:43:52:f6:02:
9e:12:48:ad:80:07:64:bc:96:9f:16:b5:0c:fe:72:
53:1e:d8:df:c3:81:b8:c8:9d:72:da:58:29:ad:19:
df:de:3e:6a:6a:37:e8:bc:b5:d9:ab:48:c0:8d:12:
a9:b7:84:3e:8d:c7:86:67:c4:55:e1:9a:2b:a4:dc:
bc:96:ef:1d:d7:2d:cd:aa:da:92:ba:d7:2e:cb:5b:
cf:0d:b9:37:88:64:b1:b3:90:9d:aa:9e:a5:fe:2a:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:71:E0:3A:DD:FF:C9:98:A7:A1:99:FD:B1:CE:6C:C9:CA:96:4B:1D
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540:1005::/48
Signature Algorithm: sha256WithRSAEncryption
8c:45:ba:db:2f:3e:51:30:2a:55:8d:04:93:46:c8:d2:a2:a3:
50:84:c6:29:ee:6c:04:c6:ba:d6:42:55:25:7c:20:d5:3f:18:
46:b9:77:6b:fe:e5:32:f2:2b:1d:b0:6b:5b:e1:50:92:f4:cc:
6a:e9:c5:be:d5:3e:36:85:6a:1c:a3:35:d8:11:d0:5f:c7:0e:
70:10:d6:d7:fe:55:4b:60:98:3f:15:52:b0:c4:14:c4:82:50:
f3:93:f2:00:21:39:8c:88:b7:89:19:15:6d:8f:97:fc:ea:ff:
9a:3c:2f:69:e3:3e:0c:3c:c2:f2:ae:97:d0:6f:71:0d:8e:41:
0c:14:db:3e:8b:de:6b:b4:c3:e0:55:53:56:c8:88:94:da:6a:
7b:2c:08:7e:11:50:5b:45:20:c7:52:b7:c8:85:21:78:81:51:
80:a8:fd:a9:01:db:fd:c5:86:fa:5d:c8:f0:ce:7a:cd:75:e9:
95:53:0f:c8:34:87:ed:3d:aa:27:70:a7:b6:b0:e7:d3:a0:24:
6f:38:7d:3f:19:1e:b5:66:7d:63:6b:51:70:51:11:c2:1c:55:
ec:61:c5:fc:18:a6:07:3b:1d:ce:08:f0:e2:b0:93:d0:c5:17:
54:5f:ac:c8:a2:e1:5b:4d:cf:2a:11:53:23:3f:ad:82:2f:2f:
c7:5e:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:07 2025 by rpki-client