Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: 39PSf1h5qRacmkCvqWYAEMYHC/xzM4e1J+fDK58Wj/o=
Subject key identifier: B8:A1:EF:92:A7:73:6B:AA:75:B1:61:45:43:A2:E2:B5:D1:CD:ED:2C
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 2E196B9F5A0D941F7C13BF17675B60DB51C09A8F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 27 Mar 2024 02:26:25 +0000
ROA not before: Wed 27 Mar 2024 02:21:25 +0000
ROA not after: Wed 26 Mar 2025 02:26:25 +0000
asID: 38526
IP address blocks: 2405:3740:901e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:19:6b:9f:5a:0d:94:1f:7c:13:bf:17:67:5b:60:db:51:c0:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Mar 27 02:21:25 2024 GMT
Not After : Mar 26 02:26:25 2025 GMT
Subject: CN=B8A1EF92A7736BAA75B1614543A2E2B5D1CDED2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:6f:87:75:b9:e5:02:36:13:ca:a0:72:53:
ab:33:10:b2:40:6f:b7:cd:93:b6:87:e8:3a:c6:1c:
0f:8e:c8:67:36:99:a7:33:8d:63:00:7c:2e:e1:c6:
04:7c:e4:bf:b3:54:4c:d1:7f:6c:14:68:6a:a3:19:
73:0c:d1:4c:f0:e8:97:8b:f9:aa:33:36:fd:0a:4a:
b7:64:38:0c:92:7b:57:f3:bd:95:fb:7d:01:98:e9:
9f:a6:34:48:7b:56:57:07:29:ad:02:98:15:7f:50:
c2:70:cd:82:93:d1:be:74:01:ba:64:03:fc:14:a1:
c2:88:e0:af:9f:44:59:e9:b8:5b:90:34:a5:53:7c:
c8:85:ab:7f:58:0d:5d:e3:fc:33:eb:a7:9b:cb:c5:
a9:39:c4:81:66:3f:29:c4:15:31:9d:82:8f:e1:c9:
a4:1c:74:48:92:4f:27:26:cd:9f:f1:2f:c9:07:f3:
2c:8c:5d:74:7b:98:ef:b3:83:3e:2a:2e:54:35:46:
2c:e9:0a:a3:2a:2c:99:e0:36:ab:8e:be:f3:d1:b2:
eb:f7:46:06:64:85:c7:78:fe:ba:00:f3:6f:db:c4:
72:cf:b7:1e:30:19:eb:37:a4:7a:cc:38:89:e1:0e:
24:21:84:6c:35:e7:3a:ad:2d:79:02:dd:0d:88:27:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:EF:92:A7:73:6B:AA:75:B1:61:45:43:A2:E2:B5:D1:CD:ED:2C
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:901e::/48
Signature Algorithm: sha256WithRSAEncryption
7b:1d:90:e3:e3:df:55:1c:41:d8:c2:f1:46:73:97:98:5d:ee:
bd:ee:a5:96:bd:64:96:a2:d1:7d:a9:29:44:cf:7c:8f:1b:32:
1d:84:9f:7a:f2:f2:5a:4e:15:41:7f:b1:f0:49:6a:ef:b9:46:
c5:0b:12:2c:b1:83:fc:35:39:96:29:e9:8d:c3:dc:69:a1:2b:
7d:04:d5:5c:83:fd:5b:b3:e9:0c:24:d3:fc:53:7a:3a:ec:60:
24:33:b9:b5:69:89:ce:7f:3e:7d:05:c2:80:bf:0b:c0:fb:8a:
20:1f:36:0d:65:0e:2b:c1:44:ac:60:6c:04:c3:30:f3:96:59:
2b:6b:cc:ab:49:41:3f:cf:09:53:c3:3c:4a:a0:1a:45:05:a4:
47:cf:5a:55:08:c3:f2:d3:97:08:df:e4:ca:3d:c3:53:bc:ec:
9d:f6:ab:37:15:1e:68:19:e7:a1:25:c1:40:30:ef:fa:95:9a:
f9:8b:10:e1:c0:c1:bc:e0:37:d1:f0:5c:15:5d:41:f2:74:20:
08:16:53:93:41:f0:cf:85:70:9d:eb:f8:e7:6a:d8:33:33:e7:
4f:f5:82:9e:5e:c7:57:22:7a:ab:f2:e5:2c:0b:12:59:d7:86:
6d:70:8d:78:4d:17:11:d6:bf:5b:d5:9e:3a:56:39:80:c6:43:
d3:7a:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:33 2025 by rpki-client