Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: GH+hoEntLmNCp+QTBV4JLi6orJ4G98J9ErAlpxtIRpA=
Subject key identifier: 91:9A:7D:89:F3:1B:E4:B0:DA:D4:A1:08:06:0D:0D:80:87:49:85:0D
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 05A60D74E7EC0FEDD6194AEB4A65902AC9A72CBA
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 27 Mar 2024 01:34:18 +0000
ROA not before: Wed 27 Mar 2024 01:29:18 +0000
ROA not after: Wed 26 Mar 2025 01:34:18 +0000
asID: 38526
IP address blocks: 2405:3740:9004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a6:0d:74:e7:ec:0f:ed:d6:19:4a:eb:4a:65:90:2a:c9:a7:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Mar 27 01:29:18 2024 GMT
Not After : Mar 26 01:34:18 2025 GMT
Subject: CN=919A7D89F31BE4B0DAD4A108060D0D808749850D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:2b:7a:89:c3:96:6c:8c:a7:c0:58:c5:47:
fd:a8:86:72:a7:20:2c:b8:b1:c1:f9:ab:c6:82:1b:
b7:c4:68:fd:8a:32:95:f1:29:5b:0c:f2:6b:2f:30:
0c:5f:61:4f:b4:97:28:15:b9:74:8d:9d:13:43:80:
a9:bb:65:57:91:1c:0b:41:88:99:12:17:b4:98:91:
de:7f:c6:83:b8:ef:75:18:5e:00:30:91:7e:61:16:
e6:41:a0:68:90:66:ea:a6:3f:a9:bc:01:ea:90:eb:
46:ed:89:e2:23:0b:2c:f6:d8:b8:25:66:52:e6:57:
50:cc:aa:69:ce:82:5c:25:25:5f:80:31:d2:ee:ae:
cb:b9:1d:da:07:5f:7d:56:c8:50:bc:51:12:de:b9:
02:72:36:f4:c2:7f:98:00:a7:54:8b:54:65:5c:f0:
55:4b:07:9a:d9:51:2f:cf:2e:09:84:04:a5:fa:27:
c1:60:ec:4d:1c:1d:0e:3b:05:5a:d8:02:fa:d2:06:
90:aa:f5:0c:2c:05:30:6f:f8:55:78:0b:e3:10:c3:
1c:d3:df:df:03:47:0d:79:52:e8:ab:d8:d8:a2:a4:
71:5e:cd:1d:f7:0b:45:11:cf:8b:8d:79:1b:17:f5:
76:a9:8d:28:92:6f:5e:20:7c:e9:9a:01:60:86:a7:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:7D:89:F3:1B:E4:B0:DA:D4:A1:08:06:0D:0D:80:87:49:85:0D
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9004::/48
Signature Algorithm: sha256WithRSAEncryption
cb:13:e2:b3:7e:3b:7f:6a:af:1c:9a:c6:bc:cf:eb:bc:48:71:
52:a3:17:26:23:1d:c0:00:41:de:cd:0f:70:d9:d3:b0:fa:85:
f3:13:ac:51:69:8b:f8:35:56:1f:05:84:72:2a:cb:9d:c6:04:
8e:ee:6b:60:05:92:6e:17:c5:c6:74:2a:1f:54:e3:24:dd:fb:
ec:f4:70:c4:1f:27:c4:19:b0:97:37:57:a4:13:e5:36:a8:26:
a3:97:05:16:08:b6:e4:ae:0d:b3:73:70:4e:1c:ed:c2:fd:7b:
8a:24:61:d3:ed:b8:68:fb:38:8e:49:2c:4a:bc:2b:e4:24:d0:
ae:c0:66:3a:b7:7c:d1:04:ce:b2:7b:2a:6a:54:ff:0c:b9:b7:
16:47:36:eb:79:3f:6f:f0:65:20:52:47:c0:67:09:79:4f:45:
67:df:6d:22:81:d8:4f:57:cf:c5:e9:2a:36:bd:92:41:57:ad:
06:e6:eb:85:b7:27:2e:83:93:ae:eb:7a:d4:cb:c7:0a:a8:8c:
30:20:ed:a8:cf:c1:e1:39:58:e2:23:85:c3:cd:1a:ba:52:f8:
d1:34:85:c8:d9:49:1e:8e:56:3a:d1:ab:17:f3:9d:de:97:ef:
55:8e:be:da:18:59:f1:b6:16:77:dc:8b:9f:5c:59:12:eb:93:
dc:95:3b:d9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBaYNdOfsD+3WGUrrSmWQKsmnLLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDAzMjcwMTI5MThaFw0yNTAzMjYwMTM0MThaMDMxMTAvBgNV
BAMTKDkxOUE3RDg5RjMxQkU0QjBEQUQ0QTEwODA2MEQwRDgwODc0OTg1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnyt6icOWbIynwFjFR/2ohnKn
ICy4scH5q8aCG7fEaP2KMpXxKVsM8msvMAxfYU+0lygVuXSNnRNDgKm7ZVeRHAtB
iJkSF7SYkd5/xoO473UYXgAwkX5hFuZBoGiQZuqmP6m8AeqQ60btieIjCyz22Lgl
ZlLmV1DMqmnOglwlJV+AMdLursu5HdoHX31WyFC8URLeuQJyNvTCf5gAp1SLVGVc
8FVLB5rZUS/PLgmEBKX6J8Fg7E0cHQ47BVrYAvrSBpCq9QwsBTBv+FV4C+MQwxzT
398DRw15Uuir2NiipHFezR33C0URz4uNeRsX9XapjSiSb14gfOmaAWCGp+OfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkZp9ifMb5LDa1KEIBg0NgIdJhQ0wHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAEMA0GCSqGSIb3DQEBCwUAA4IBAQDLE+Kzfjt/aq8cmsa8z+u8SHFSoxcmIx3A
AEHezQ9w2dOw+oXzE6xRaYv4NVYfBYRyKsudxgSO7mtgBZJuF8XGdCofVOMk3fvs
9HDEHyfEGbCXN1ekE+U2qCajlwUWCLbkrg2zc3BOHO3C/XuKJGHT7bho+ziOSSxK
vCvkJNCuwGY6t3zRBM6yeypqVP8MubcWRzbreT9v8GUgUkfAZwl5T0Vn320igdhP
V8/F6So2vZJBV60G5uuFtycug5Ou63rUy8cKqIwwIO2oz8HhOVjiI4XDzRq6UvjR
NIXI2UkejlY60asX853el+9Vjr7aGFnxthZ33IufXFkS65PclTvZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:38 2025 by rpki-client