Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa
File: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (raw, json)
Hash identifier: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=
Subject key identifier: 59:0D:4D:40:E7:9A:62:E5:E3:E8:45:F0:BF:13:25:EC:78:BA:D6:EB
Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial: 421E4EC368BD9D9CCEA9108BE274BF1373BF95FD
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa
Signing time: Tue 28 Jan 2025 17:00:00 +0000
ROA not before: Tue 28 Jan 2025 16:55:00 +0000
ROA not after: Tue 27 Jan 2026 17:00:00 +0000
asID: 24429
IP address blocks: 2405:1640:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1e:4e:c3:68:bd:9d:9c:ce:a9:10:8b:e2:74:bf:13:73:bf:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Validity
Not Before: Jan 28 16:55:00 2025 GMT
Not After : Jan 27 17:00:00 2026 GMT
Subject: CN=590D4D40E79A62E5E3E845F0BF1325EC78BAD6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:55:f5:e6:2d:b7:1c:b5:61:0d:75:be:d0:08:
5d:ea:10:21:c4:e3:fc:25:23:a3:5c:6e:38:62:a6:
15:01:f9:90:b4:d4:15:3a:e1:ea:9d:71:62:22:ed:
7b:5b:51:cc:29:b9:10:6e:d7:c8:3c:2d:9d:d2:e6:
cd:9c:ef:ad:1f:35:53:15:11:d7:6a:8a:0e:f9:27:
ed:17:0e:18:af:47:8d:fa:9f:94:f5:69:dc:da:c5:
48:67:42:e8:53:29:f0:c3:1f:80:3f:b5:07:e8:af:
4f:0f:0c:9f:2a:bf:d3:8e:15:11:c7:26:67:4f:cc:
ac:ef:2f:8d:13:84:cc:b5:43:e4:ba:c5:45:0f:60:
4a:af:da:26:28:b7:d3:58:e7:56:19:4c:00:99:53:
9f:7b:d3:b1:9d:ba:5d:2a:b1:26:11:9e:51:99:f8:
a1:9a:81:fa:a4:0f:24:15:64:ec:04:d9:13:17:7b:
fc:c8:d4:9a:e2:6a:1c:19:92:ca:0d:0c:69:2e:e7:
fe:99:16:25:4c:c7:6d:cb:cf:7a:f7:ca:ab:6a:58:
d4:fe:df:c1:f5:e9:e3:fe:c6:81:7f:4e:a9:3d:02:
b2:1e:1e:6d:eb:57:36:94:55:bd:97:ca:44:ce:1c:
c1:30:b5:c6:5f:d9:fb:48:3d:ac:c2:31:75:8f:9c:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:4D:40:E7:9A:62:E5:E3:E8:45:F0:BF:13:25:EC:78:BA:D6:EB
X509v3 Authority Key Identifier:
keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:1640:6::/48
Signature Algorithm: sha256WithRSAEncryption
5e:cf:e3:84:d8:9b:9e:4c:85:e3:cf:5e:de:6b:57:99:27:f5:
73:da:13:6b:d0:9e:c7:39:10:74:36:e7:30:30:87:19:ae:59:
15:6c:a8:4e:55:97:90:7f:3c:86:4c:dc:ac:99:53:b7:c7:8f:
fb:11:62:ca:66:cb:93:93:e6:5b:91:78:ae:3d:68:f5:d3:46:
b6:26:8f:9f:00:1c:22:f8:61:97:24:99:55:ab:45:dc:13:b5:
c0:0a:be:b1:62:ea:a6:7c:cd:77:8d:7d:42:d0:c3:00:c4:dd:
dc:3d:bd:20:c1:b5:8a:d7:99:fe:64:53:96:fa:99:92:dc:b4:
ba:e1:76:76:c4:48:32:b3:6e:a6:54:34:6c:b5:89:d0:39:72:
df:3b:ca:cb:49:e3:43:9b:02:eb:ba:93:3d:12:4a:73:1b:13:
50:3a:67:54:01:ac:a1:88:f6:3a:70:60:c6:f7:0e:21:8b:ac:
a4:a0:4d:ef:c6:0f:4c:b5:d4:0b:a8:e9:84:62:69:62:c9:8e:
8c:c1:ab:d1:8e:1e:22:34:84:48:3f:bb:e4:96:e6:89:09:1a:
66:1e:f6:36:b2:63:9e:27:54:fd:55:7e:00:b2:3a:7c:c5:1a:
cb:35:bd:3e:8f:28:21:2e:1e:30:80:55:5a:f3:87:82:42:6f:
ab:ce:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:18 2025 by rpki-client