Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa
File: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (raw, json)
Hash identifier: Qus3Mmu52ldaC8yHNX/lLMOybvxdC/KiaabMYmXY5VE=
Subject key identifier: 14:95:38:8D:13:98:CF:A6:C6:D5:B2:8F:BE:E8:60:F8:B5:85:E8:0F
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 4CA0D4C0BD1730D114D9954E7214ED54A5754B07
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa
Signing time: Thu 01 Aug 2024 09:00:02 +0000
ROA not before: Thu 01 Aug 2024 08:55:02 +0000
ROA not after: Thu 31 Jul 2025 09:00:02 +0000
asID: 38156
IP address blocks: 2405:a540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a0:d4:c0:bd:17:30:d1:14:d9:95:4e:72:14:ed:54:a5:75:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Aug 1 08:55:02 2024 GMT
Not After : Jul 31 09:00:02 2025 GMT
Subject: CN=1495388D1398CFA6C6D5B28FBEE860F8B585E80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:db:6c:75:3e:cb:ab:0e:a3:32:52:fb:c2:
28:ac:e3:71:ef:71:db:36:a5:1f:38:e4:10:ed:ad:
ec:f1:f9:59:3c:21:54:d6:2b:7d:6c:01:f5:d3:55:
01:a0:5c:32:1d:91:f4:b6:e0:82:59:9f:0a:89:ca:
f0:2e:e7:33:36:79:8a:6c:56:a0:a9:d3:60:d0:05:
95:aa:36:c5:bd:4e:4c:6e:b3:5f:25:3a:72:88:40:
af:f7:2a:f1:d7:09:6e:cf:11:24:b8:9c:9f:b4:89:
44:19:ed:5b:63:20:17:96:cd:90:bd:ac:21:ca:f2:
97:74:16:76:1b:1d:34:f9:d6:aa:c7:d6:4e:22:88:
e9:93:72:57:d3:45:50:f6:97:1a:c2:a4:6e:ee:eb:
e3:56:d0:b9:dd:7a:f5:f5:6b:ad:d9:87:97:a1:ca:
cf:93:dd:fe:69:ad:8f:b8:15:b3:d8:2f:7d:b1:f1:
32:54:27:31:57:c8:00:01:9d:75:98:ca:59:89:9c:
c3:fe:fc:2d:74:22:fa:1e:43:c8:08:4d:d7:11:10:
59:8a:9e:17:e4:5b:11:36:54:41:b9:4a:03:76:82:
a1:93:80:a7:d5:3d:ad:74:fe:fd:58:fb:1c:f7:ff:
9c:5d:42:40:d6:13:ec:e9:03:45:6e:f2:cc:d9:8e:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:38:8D:13:98:CF:A6:C6:D5:B2:8F:BE:E8:60:F8:B5:85:E8:0F
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a540::/32
Signature Algorithm: sha256WithRSAEncryption
ab:c8:03:3a:14:55:75:c9:42:13:04:37:cb:e0:a5:aa:89:2e:
f2:5f:a0:20:91:e6:84:48:40:c3:61:30:23:8f:92:30:c5:a6:
ae:76:92:c0:18:2b:0a:83:44:c9:ec:be:02:84:5a:5b:bc:62:
50:03:5b:fe:71:b2:8d:8c:73:c6:57:16:3e:7f:e4:ed:d7:11:
06:94:54:68:d6:ff:d9:1d:8a:4e:3d:dc:cc:6f:53:80:c0:b4:
d9:4d:67:26:ff:37:3b:fa:51:f0:64:66:45:28:03:24:25:45:
21:0d:1d:ea:bd:b5:c0:d3:a6:ad:ec:eb:e1:78:65:32:22:d9:
c3:01:ef:60:45:bc:44:27:22:3a:4a:aa:43:f1:d8:58:19:bb:
19:48:ee:35:32:9e:42:6b:ab:35:17:b8:67:8e:25:f8:95:20:
6c:e0:85:6c:c0:4b:80:b0:eb:b9:1d:02:0d:a4:34:6f:ef:88:
4c:f2:e0:d9:cb:c3:34:71:6f:82:36:71:1e:23:97:07:5b:47:
9d:6a:0a:7a:64:ae:7b:e3:98:ee:1d:8f:7b:80:8f:3f:10:7b:
e1:54:4d:e3:3a:4a:c5:54:fa:ed:14:04:a9:c0:dc:0d:18:6a:
83:02:c3:d7:f8:d7:af:14:0c:11:30:0e:c7:e2:9c:35:a3:34:
dc:dc:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:50 2025 by rpki-client