Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: QifdkHa4/VbOHQT3KlMoy5LnuJ2NpTgbdtLpxfi1thI=
Subject key identifier: CA:A7:B1:9E:4F:AC:F9:82:D2:9A:52:AE:E7:59:3F:6B:FB:80:5A:31
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 5F06FAF96BCFF38512B749BD13D89103700F268F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 27 Mar 2024 01:33:40 +0000
ROA not before: Wed 27 Mar 2024 01:28:40 +0000
ROA not after: Wed 26 Mar 2025 01:33:40 +0000
asID: 38526
IP address blocks: 2405:3740:9002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:06:fa:f9:6b:cf:f3:85:12:b7:49:bd:13:d8:91:03:70:0f:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Mar 27 01:28:40 2024 GMT
Not After : Mar 26 01:33:40 2025 GMT
Subject: CN=CAA7B19E4FACF982D29A52AEE7593F6BFB805A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:a4:8f:8b:f5:70:62:ab:02:ec:44:7b:43:
57:3a:84:61:1f:a0:69:6a:bb:38:9c:2f:f6:1d:84:
23:34:9f:36:c3:24:f3:cd:21:f8:cd:a8:37:d6:5e:
0a:5d:a0:95:2e:04:25:5a:4d:f7:60:ec:83:3a:8d:
ba:d2:59:8d:99:6a:ba:87:b2:44:ef:1d:06:2e:30:
2f:87:83:e4:27:87:74:d8:d9:56:66:eb:45:a3:50:
fa:3c:ac:0f:1e:22:c8:55:c7:6f:82:25:b1:7b:3b:
e1:75:ff:ea:07:37:6f:44:a6:42:fc:6d:a1:8e:ef:
05:8b:ff:30:a8:ea:18:11:16:bd:c2:f5:b8:2f:5e:
c1:15:10:dc:e0:cd:54:1f:25:e8:c0:29:40:17:b0:
39:b2:16:91:3c:f1:5d:3b:01:a4:0f:bc:c3:bb:ca:
9f:a3:4d:27:4e:de:29:c3:2c:d3:63:df:66:01:73:
10:0a:fc:c0:eb:bf:ce:68:67:f3:e3:0a:8d:73:3c:
7a:4b:43:15:e5:fa:a1:6f:0c:a8:85:0a:67:a7:a7:
9a:f7:5f:e5:0b:75:fc:86:62:27:50:43:f4:1a:b1:
34:10:00:78:f6:7c:fe:db:38:99:f0:6e:a4:34:96:
29:4b:67:e9:97:9a:ee:a7:20:df:83:eb:d1:9c:3e:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:B1:9E:4F:AC:F9:82:D2:9A:52:AE:E7:59:3F:6B:FB:80:5A:31
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9002::/48
Signature Algorithm: sha256WithRSAEncryption
29:35:49:17:fb:0e:80:47:8d:78:e9:ea:ce:98:58:8b:88:f9:
64:54:2a:3b:df:4a:71:bd:a1:3c:ea:ca:4f:74:10:c6:a4:3e:
16:11:c9:8d:2c:fa:36:f7:ed:fd:79:f8:0d:79:d9:5b:fc:26:
92:20:de:b8:72:29:79:4f:76:43:fc:a2:db:df:6e:e5:3d:d7:
46:3d:41:a9:ba:cc:81:78:7f:db:db:27:73:6a:ca:97:a2:27:
1e:bb:bd:e4:6f:2c:2a:c5:52:d5:25:9d:4c:ca:40:81:72:24:
3b:74:cf:1f:2a:da:d6:74:2e:4a:53:01:e5:0a:d2:a8:c2:85:
ba:a7:c0:90:2b:9c:d2:ea:f9:66:01:ba:ca:17:36:68:6a:74:
d3:ad:c7:2f:cc:e7:64:c3:fc:02:dc:41:29:08:c2:04:de:38:
5d:2f:dd:53:7b:3e:14:7b:ce:7b:ac:f2:84:db:64:6b:4d:d9:
64:ae:44:f9:60:9b:ce:a1:a1:ed:43:5f:c0:eb:fe:f4:70:a3:
61:cc:b0:2b:ac:97:eb:49:af:8c:d7:f6:29:2b:f3:42:7c:59:
ab:2f:5e:b0:9a:fe:24:1c:41:9a:60:aa:93:4a:b5:91:74:2d:
c3:67:21:d0:b7:cf:d5:16:0b:21:19:34:a2:be:bd:29:f0:bd:
81:6a:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:52 2025 by rpki-client