Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: EtXLUNQ0dAUXDq4aCoeB54VCl96xUrWi9cXJYfCCgU4=
Subject key identifier: BA:B2:19:CA:A2:38:F4:0E:1E:E0:46:B3:19:65:A5:C9:81:0D:B6:8F
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 198625EBF0CD921EC214403C9FD9971E6D6F4601
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 27 Mar 2024 01:54:21 +0000
ROA not before: Wed 27 Mar 2024 01:49:21 +0000
ROA not after: Wed 26 Mar 2025 01:54:21 +0000
asID: 38526
IP address blocks: 2405:3740:9008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:86:25:eb:f0:cd:92:1e:c2:14:40:3c:9f:d9:97:1e:6d:6f:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Mar 27 01:49:21 2024 GMT
Not After : Mar 26 01:54:21 2025 GMT
Subject: CN=BAB219CAA238F40E1EE046B31965A5C9810DB68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:60:b4:c5:f8:bf:d2:e5:c5:6b:d8:18:20:
53:30:1f:f6:19:fe:ca:78:9b:ad:7c:0c:d4:46:bf:
c9:6d:ec:8d:92:90:c9:34:0b:67:fd:3b:ed:29:29:
20:b0:69:b2:49:3c:81:b0:1d:ac:8a:4b:2c:57:18:
4f:7e:f1:11:e0:2f:58:81:6a:b7:d4:55:f0:66:8e:
6d:2e:72:e5:bd:79:30:78:05:16:a9:a5:43:1c:d3:
31:95:f7:55:4c:52:0a:70:d1:e7:09:9e:c0:22:a5:
df:ff:d6:64:76:bc:b1:c4:9a:df:1b:1f:a5:e7:bc:
a2:6b:f4:fe:9f:50:97:da:c7:8a:7c:37:b0:14:94:
64:44:e4:f1:88:5b:76:a9:0e:45:a2:34:4e:b3:45:
8b:96:7c:69:98:88:58:d3:e0:51:a2:33:ef:0d:df:
08:d6:8c:67:b1:a9:20:31:4c:71:d9:85:08:9e:bf:
7b:85:ca:e5:c2:67:ff:c8:f0:2a:65:98:b5:8c:35:
41:38:a8:39:13:ec:b7:9f:65:d8:be:7b:91:ca:54:
74:67:1c:62:49:a4:de:ff:a7:df:76:c2:72:d4:b7:
f6:11:52:a7:08:7f:79:0f:da:e3:18:92:d8:24:c6:
f7:4b:7a:d2:87:0d:93:5d:d2:95:f5:f8:f8:75:9f:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B2:19:CA:A2:38:F4:0E:1E:E0:46:B3:19:65:A5:C9:81:0D:B6:8F
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9008::/48
Signature Algorithm: sha256WithRSAEncryption
30:42:69:ff:bf:b4:a8:e4:4b:9d:02:85:c1:5c:55:56:d9:04:
f9:44:1c:b3:fb:12:b5:88:d3:32:15:00:18:05:8a:cc:78:cc:
69:79:bc:b0:57:18:a8:43:ac:5f:e7:e8:05:17:ec:a4:e0:85:
04:2b:6c:5c:64:da:95:c1:52:17:35:ce:cf:f7:8b:0b:ff:c7:
f4:b5:f1:99:32:52:a4:79:b3:25:da:e7:7f:c3:73:c3:49:a5:
36:ca:17:f6:c0:23:a4:9b:74:6b:05:79:98:30:b1:d6:a7:2e:
04:41:97:8e:8c:04:f7:30:f0:54:4f:34:83:de:2d:1a:90:db:
94:57:ae:52:2d:9a:37:4d:50:4f:7c:18:2a:d1:cf:22:d9:b8:
56:69:88:78:5a:1f:52:6f:f0:ba:46:9f:3c:b6:b6:7f:8d:b2:
d1:d1:f9:69:1a:93:f7:8a:72:af:5b:08:58:fe:ad:50:ec:60:
84:85:e0:7a:9b:62:2a:96:54:22:ae:2a:c9:39:23:9a:a5:4a:
4b:02:30:f6:d2:b1:f8:de:d9:0b:2c:de:b9:10:b0:ca:6b:6d:
87:04:39:3b:8d:9b:a6:1b:a3:58:cb:6c:e1:5c:c3:8c:65:09:
ea:ba:3a:6a:d6:5e:6b:a3:1a:62:4a:53:14:10:14:13:5f:b3:
86:dc:6b:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGYYl6/DNkh7CFEA8n9mXHm1vRgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDAzMjcwMTQ5MjFaFw0yNTAzMjYwMTU0MjFaMDMxMTAvBgNV
BAMTKEJBQjIxOUNBQTIzOEY0MEUxRUUwNDZCMzE5NjVBNUM5ODEwREI2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+2C0xfi/0uXFa9gYIFMwH/YZ
/sp4m618DNRGv8lt7I2SkMk0C2f9O+0pKSCwabJJPIGwHayKSyxXGE9+8RHgL1iB
arfUVfBmjm0ucuW9eTB4BRappUMc0zGV91VMUgpw0ecJnsAipd//1mR2vLHEmt8b
H6XnvKJr9P6fUJfax4p8N7AUlGRE5PGIW3apDkWiNE6zRYuWfGmYiFjT4FGiM+8N
3wjWjGexqSAxTHHZhQiev3uFyuXCZ//I8CplmLWMNUE4qDkT7LefZdi+e5HKVHRn
HGJJpN7/p992wnLUt/YRUqcIf3kP2uMYktgkxvdLetKHDZNd0pX1+Ph1n8j9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUurIZyqI49A4e4EazGWWlyYENto8wHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAIMA0GCSqGSIb3DQEBCwUAA4IBAQAwQmn/v7So5EudAoXBXFVW2QT5RByz+xK1
iNMyFQAYBYrMeMxpebywVxioQ6xf5+gFF+yk4IUEK2xcZNqVwVIXNc7P94sL/8f0
tfGZMlKkebMl2ud/w3PDSaU2yhf2wCOkm3RrBXmYMLHWpy4EQZeOjAT3MPBUTzSD
3i0akNuUV65SLZo3TVBPfBgq0c8i2bhWaYh4Wh9Sb/C6Rp88trZ/jbLR0flpGpP3
inKvWwhY/q1Q7GCEheB6m2IqllQirirJOSOapUpLAjD20rH43tkLLN65ELDKa22H
BDk7jZumG6NYy2zhXMOMZQnqujpq1l5roxpiSlMUEBQTX7OG3Gtm
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:22 2025 by rpki-client