Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa
File: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier: Lh8GyhmgK8taX5pJnhVtBGQaNHkcHNTcBBhgnCLEf2U=
Subject key identifier: 6F:52:A6:9C:8B:45:20:A3:2A:FB:02:28:5B:C5:4A:27:CE:B5:9C:AC
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 741657DB95F57E3340AE519CCDA14C1286F2DAA5
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa
Signing time: Wed 20 Nov 2024 10:03:08 +0000
ROA not before: Wed 20 Nov 2024 09:58:08 +0000
ROA not after: Wed 19 Nov 2025 10:03:08 +0000
asID: 38156
IP address blocks: 2405:a540:1009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:16:57:db:95:f5:7e:33:40:ae:51:9c:cd:a1:4c:12:86:f2:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Nov 20 09:58:08 2024 GMT
Not After : Nov 19 10:03:08 2025 GMT
Subject: CN=6F52A69C8B4520A32AFB02285BC54A27CEB59CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:e1:ce:a4:2a:b4:b3:9f:29:79:23:80:18:
7e:7c:f4:48:6a:24:fe:7f:01:53:b8:e5:47:f3:fc:
50:ea:a0:4b:3e:a3:f0:b8:62:e9:ba:74:06:29:f7:
68:72:f0:81:53:95:63:39:8e:6b:9b:db:58:45:11:
18:c7:f8:ef:97:53:cc:44:81:4b:8a:c5:6b:d4:77:
eb:40:73:07:aa:0b:3c:fc:62:ae:6f:3f:2e:c8:35:
8b:36:20:c7:b3:d4:71:a9:80:53:59:0e:04:0f:fc:
1b:bd:23:ca:64:22:b6:01:dd:18:89:97:d6:9d:72:
e3:85:c2:9d:21:aa:2e:f1:c5:64:9c:8d:37:32:ca:
65:b3:f8:b4:05:1f:b8:ed:8f:bf:d5:46:5c:7b:80:
8f:56:d4:de:b8:3e:5d:71:a8:d3:4e:a7:6f:67:16:
a0:86:f0:3c:26:bc:ac:3a:24:bf:de:2b:62:45:17:
52:f3:6e:c3:0a:f8:83:55:53:9a:2e:96:90:46:d4:
22:55:35:4a:71:56:93:95:ed:34:91:0f:79:2e:5b:
bd:b3:4b:eb:6f:3b:3e:7e:77:8e:af:cd:de:3e:03:
4a:72:2c:04:1e:b0:02:ba:cb:72:3c:d9:3b:fe:4b:
50:9d:a7:3f:eb:ee:6f:90:fa:ae:2e:ee:eb:74:a7:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:A6:9C:8B:45:20:A3:2A:FB:02:28:5B:C5:4A:27:CE:B5:9C:AC
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540:1009::/48
Signature Algorithm: sha256WithRSAEncryption
9c:34:50:52:cc:9e:3e:c2:7c:8f:ea:1b:37:a9:a9:2b:37:1f:
f1:c9:62:7a:94:84:76:c6:8f:5a:57:21:84:27:8e:85:1d:3c:
71:c3:14:94:e1:65:a0:9c:fb:b3:d9:ac:9f:cd:f0:7d:a4:e6:
44:54:93:09:05:aa:9b:d1:1f:01:c2:17:9e:69:d4:e4:88:55:
61:0d:5f:0d:15:9b:c3:78:fc:29:cc:07:d3:5c:96:16:98:7c:
32:ed:a5:b4:ab:2d:c7:02:ed:2a:de:0a:21:e3:dc:78:d7:79:
78:9b:3c:0e:fe:69:ce:01:b3:8d:50:a1:7c:09:59:9c:9e:18:
35:42:3b:09:55:b8:80:51:c2:59:69:9c:4b:a8:a9:40:0f:97:
7c:f0:35:e6:ca:3d:21:9e:66:b3:b9:96:1b:9c:1f:bb:21:34:
ea:4c:6b:b5:20:d1:e0:a5:c9:91:82:0c:3c:21:03:66:d6:20:
80:af:6f:74:8f:fe:11:3f:ea:ab:d9:de:bf:0e:06:fc:f2:96:
58:17:7d:d0:f3:8c:7c:02:20:23:d6:7e:9c:5a:b6:42:6d:de:
4d:e1:93:8d:6a:af:3b:26:ed:09:32:c9:63:f6:1b:01:b0:d6:
fd:24:af:d4:5b:f1:87:82:6a:d1:1f:c2:f4:ac:29:75:fb:d7:
e5:65:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:48 2025 by rpki-client