
Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa
File: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier: 2rYoQf2XiLcQ0PD1TcVzDi2GO9pmV8h/I19htBqCTIo=
Subject key identifier: A6:10:18:18:83:7C:E4:EE:1A:9E:2D:60:AD:0E:D5:A0:6C:C7:38:02
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 1F5C8AD7D251DE81BCC3CEE5885058EE69CF1BF5
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa
Signing time: Wed 20 Nov 2024 15:00:02 +0000
ROA not before: Wed 20 Nov 2024 14:55:02 +0000
ROA not after: Wed 19 Nov 2025 15:00:02 +0000
asID: 38156
IP address blocks: 2405:a540:100f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5c:8a:d7:d2:51:de:81:bc:c3:ce:e5:88:50:58:ee:69:cf:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Nov 20 14:55:02 2024 GMT
Not After : Nov 19 15:00:02 2025 GMT
Subject: CN=A6101818837CE4EE1A9E2D60AD0ED5A06CC73802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:c9:3c:26:f7:04:0f:db:fb:a7:e5:51:34:
79:b9:4c:76:32:2b:9c:74:5e:39:be:ec:ce:3e:7d:
5a:56:a9:5f:23:2f:12:7b:f8:d6:e8:43:77:b9:6c:
de:6f:55:83:7e:00:21:05:b8:0b:25:cf:e1:b5:fa:
b6:78:0e:52:ec:18:43:dd:64:8b:54:b9:ef:64:27:
0f:9e:95:88:e8:62:14:b2:ab:6b:67:6d:45:e9:a0:
b6:e5:e6:50:d3:cd:25:be:58:cc:3c:a3:04:ab:f3:
9a:74:3b:c5:43:ab:f9:86:d0:a4:4b:d6:a7:9c:a4:
bd:4b:0e:cd:36:aa:f4:0d:b9:23:e3:70:97:9d:53:
59:da:3c:54:b6:ed:2a:30:d3:69:e1:d6:eb:39:57:
11:f6:45:62:2c:0a:75:08:88:a2:75:40:43:45:10:
cf:b0:f1:d6:26:22:fa:7e:82:eb:35:bd:e9:3d:14:
fa:38:58:f5:a0:ad:b1:53:b0:99:b2:50:c2:46:c5:
58:23:5f:3e:74:02:df:11:54:d9:fa:3f:ca:b4:e1:
1c:b8:f8:23:9c:85:76:43:3e:b9:c6:9b:2f:00:3f:
86:74:13:c3:88:1c:6e:f2:f9:a0:fd:d3:a1:16:38:
db:53:b4:80:e6:28:e1:02:5c:c3:8c:a3:a7:f9:7c:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:18:18:83:7C:E4:EE:1A:9E:2D:60:AD:0E:D5:A0:6C:C7:38:02
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540:100f::/48
Signature Algorithm: sha256WithRSAEncryption
45:f5:46:97:4a:e1:92:80:f8:a0:df:22:6a:fb:c4:a6:d7:5c:
a1:61:f6:f3:b1:77:24:a7:4c:de:ee:2e:8f:89:8a:e3:c8:71:
b7:1c:29:de:fe:86:0e:51:6e:76:be:00:61:64:7a:68:cf:21:
2f:af:78:b8:52:bb:b6:d3:83:4a:42:0e:e4:4c:ab:01:0e:d9:
1d:d2:0d:fa:72:a6:8c:40:84:e5:0f:c4:4b:99:07:4b:74:ac:
bb:c6:43:f2:03:b2:2b:54:e0:5a:57:d7:0d:e9:85:74:57:d5:
f5:2e:f8:a8:27:4b:21:90:fb:97:82:97:cf:b1:82:c3:f4:b3:
72:b8:43:61:03:26:98:1f:45:1d:52:fe:54:15:0f:5a:46:79:
26:94:39:b3:23:a2:46:98:83:16:aa:e8:52:a9:f9:04:ea:81:
bf:21:3f:7f:99:b7:81:94:c4:83:e1:01:09:58:79:fd:77:bc:
a3:e3:af:97:d2:2d:99:31:14:4d:f3:d2:34:f7:d5:31:70:a0:
a9:6c:ef:80:07:ff:d2:f7:38:bc:17:f4:fe:85:f8:a2:64:75:
e2:9e:ec:41:1a:8a:0c:9d:ff:34:ce:33:d4:9f:22:c4:da:18:
2d:4d:d8:7b:03:df:14:c6:1b:ee:fd:e5:60:5f:25:27:37:a6:
29:e9:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:27:39 2025 by rpki-client