Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: bsv888LbZcyDR5S5zIjgzikI0rT7fHVw67G6YLd2wWk=
Subject key identifier: 9B:49:56:4E:76:51:97:E8:6F:1D:2D:01:76:EB:18:8B:F4:12:96:36
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 534193714F99891BA9CFB91B7EF70ED8A492C2C5
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 27 Mar 2024 02:23:12 +0000
ROA not before: Wed 27 Mar 2024 02:18:12 +0000
ROA not after: Wed 26 Mar 2025 02:23:12 +0000
asID: 38526
IP address blocks: 2405:3740:9016::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:41:93:71:4f:99:89:1b:a9:cf:b9:1b:7e:f7:0e:d8:a4:92:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Mar 27 02:18:12 2024 GMT
Not After : Mar 26 02:23:12 2025 GMT
Subject: CN=9B49564E765197E86F1D2D0176EB188BF4129636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:f3:94:03:e0:f4:bc:92:f9:a1:67:0f:69:
81:a4:94:4b:11:3c:52:c6:e2:23:df:62:6b:16:dc:
23:0c:2d:c3:7b:86:6e:18:6d:2c:13:a1:57:57:3d:
fc:cd:8d:d2:71:77:7a:4d:a6:11:fb:eb:47:71:02:
f1:ac:51:ee:cf:0f:da:2f:9c:e3:f0:79:2d:3e:25:
61:5a:72:e0:a6:25:bb:8c:a0:72:e2:eb:53:06:05:
28:95:28:b7:6a:6a:f2:0d:c1:16:7d:06:0c:8c:0b:
0e:34:b2:5c:52:f2:9b:15:22:84:5d:f3:f1:a3:1f:
1c:af:c4:11:fa:8f:70:30:c7:52:f6:53:0a:66:c7:
0d:f9:8b:4d:68:0b:d9:98:77:26:0f:92:3e:2a:01:
2b:48:e1:d7:ab:ef:2b:73:c1:31:dc:30:e4:af:71:
8e:0a:7b:e8:d4:d9:74:b2:c7:37:cb:10:22:cd:31:
45:01:82:e1:74:4f:f6:65:cb:26:1b:ab:07:68:6b:
66:88:6d:b7:aa:f0:9b:39:ed:4b:1c:02:a5:8b:9f:
ed:43:c6:0c:30:43:b0:ce:d4:13:a2:8c:b9:ce:06:
fe:1f:1d:0d:26:e7:ba:69:07:c1:c3:bc:db:8c:7e:
4d:db:25:1c:af:5e:bc:80:af:46:f1:f9:5a:df:f8:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:56:4E:76:51:97:E8:6F:1D:2D:01:76:EB:18:8B:F4:12:96:36
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9016::/48
Signature Algorithm: sha256WithRSAEncryption
d9:4e:70:47:f3:19:69:f2:ba:d5:20:13:d2:e3:4b:d2:1b:44:
b7:35:b0:45:86:fa:91:90:17:43:50:d2:52:01:79:b4:18:8d:
10:97:f1:58:8f:d0:0b:9f:24:fe:39:87:6c:28:03:12:99:98:
51:63:2f:8e:7f:d4:3d:81:7f:29:1b:fa:5c:b3:67:eb:d0:9a:
a1:d1:b8:2b:c5:32:1f:b0:26:73:eb:7f:04:af:d8:bd:fc:ac:
0d:94:1b:99:88:b3:dd:73:72:38:a7:4e:30:5f:bd:c6:98:a5:
3e:7e:fe:6b:ae:56:67:39:51:f1:35:80:77:03:db:f1:f4:d3:
81:87:dc:a3:a2:23:16:40:7c:10:8b:56:87:e7:62:eb:1a:e7:
e1:58:8d:75:ed:65:7c:f2:1f:19:65:ed:37:62:8b:5e:fb:ac:
ca:8a:d5:05:e3:96:ae:14:5c:f3:5c:7a:e9:77:e7:a9:74:47:
f2:8f:26:ab:29:23:e0:ef:60:59:e3:e4:2f:56:fb:ee:04:72:
84:04:23:4b:e8:1d:56:b7:ea:9e:80:02:3a:84:8d:38:b6:72:
c7:49:d4:3f:fa:de:e4:d1:0e:6c:de:a7:e8:a4:68:c5:71:7e:
c6:49:72:56:29:66:7c:10:df:31:6b:bc:a1:1c:18:4d:5c:81:
bc:37:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:02 2025 by rpki-client