Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa
File: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier: 8LsVHahdUoPleu20C45yeBI8EhbUp30pYf/Ev3LanrU=
Subject key identifier: 80:37:AC:38:F1:71:F8:61:C4:09:C9:68:C0:CC:C8:1C:2D:33:47:E0
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 1B3D50259FFEEEF08E3E04E20F9731ED6092F39D
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa
Signing time: Mon 28 Oct 2024 05:02:58 +0000
ROA not before: Mon 28 Oct 2024 04:57:58 +0000
ROA not after: Mon 27 Oct 2025 05:02:58 +0000
asID: 38156
IP address blocks: 2405:a540:1007::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3d:50:25:9f:fe:ee:f0:8e:3e:04:e2:0f:97:31:ed:60:92:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Oct 28 04:57:58 2024 GMT
Not After : Oct 27 05:02:58 2025 GMT
Subject: CN=8037AC38F171F861C409C968C0CCC81C2D3347E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:0b:00:b8:4a:35:d2:d2:16:68:2c:f6:82:
c0:a4:b8:b7:71:44:b5:91:64:a8:63:94:93:be:52:
b6:77:72:5c:ce:5b:40:4e:c7:87:5d:13:52:5a:1b:
a4:22:a0:f4:28:89:53:c4:bf:9d:0a:8b:0a:b7:b4:
e9:37:8b:04:09:80:16:5c:af:fb:a6:79:dc:9d:25:
61:7e:a5:6e:b3:b3:1c:28:2f:45:f1:72:be:db:1a:
e8:df:0f:50:cd:a3:ac:7a:34:a8:7c:7f:77:0a:69:
35:02:f0:5e:61:28:72:b9:01:38:45:c5:77:23:a4:
84:3c:60:dd:2f:e3:60:12:1a:c3:e5:ae:f6:7b:a3:
ae:a8:72:37:e7:e2:87:7b:c2:98:24:b3:7d:4f:7b:
ef:35:7d:54:53:b8:57:34:a6:61:71:a8:4e:75:05:
c3:bc:ca:8d:c8:8f:c1:f8:e2:3d:85:42:76:6f:11:
b0:37:3c:05:29:c6:d8:fd:8c:27:ca:9b:71:da:f9:
c7:33:d0:6c:9a:a6:ad:d5:97:78:f1:4c:d1:82:32:
4e:0e:ea:74:61:5e:6c:eb:2b:81:8d:4d:8a:80:48:
7f:56:db:a7:f5:86:4e:8b:f1:71:f0:9d:23:12:91:
ee:10:66:e4:bb:00:cd:28:01:e2:4c:55:68:a5:3e:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:AC:38:F1:71:F8:61:C4:09:C9:68:C0:CC:C8:1C:2D:33:47:E0
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540:1007::/48
Signature Algorithm: sha256WithRSAEncryption
49:2e:21:60:3f:4e:19:c4:69:9c:70:bc:46:5c:9f:0d:3b:08:
fb:dc:4d:64:23:ab:18:e2:26:fb:6f:ae:dd:30:6d:84:5d:6e:
78:58:3a:7f:a9:1f:88:84:93:53:fc:1e:94:4f:e3:82:5b:18:
ff:10:d3:ad:29:42:7e:8a:46:15:61:3a:b2:b1:4f:db:6c:d3:
07:9b:0c:25:5d:01:60:51:ad:a8:82:2d:8f:81:ac:37:6e:33:
6a:f8:15:c0:f1:58:6e:69:83:9b:18:f1:98:32:40:72:3b:1d:
59:70:12:a7:7d:f6:c9:9f:2d:8c:89:ee:d3:8c:3c:5c:ac:92:
86:02:cf:3b:32:0b:16:af:e9:71:1e:c9:37:d9:d5:9c:03:30:
a7:f2:17:1d:10:1f:13:6b:94:c4:b5:a9:7a:b7:f9:8a:c1:cf:
8c:42:9c:7f:fe:2d:99:9f:f3:c5:06:ad:c3:73:3d:4e:07:62:
de:2f:23:47:d6:06:dc:da:6b:27:e6:63:07:bd:2f:3a:d0:17:
39:09:7e:97:5c:a5:13:35:aa:73:74:b1:bd:ee:bb:87:6c:3d:
24:40:74:2f:fe:1a:14:86:31:8c:ac:59:cc:3c:72:e5:90:78:
42:9d:e4:46:31:67:7b:35:80:d5:af:2b:b6:4e:d4:12:aa:be:
32:44:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:42 2025 by rpki-client