Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: ZnOfX0/JLe1pHK2c2TCV4230IxGsVuFxTOHSEh0ZsFQ=
Subject key identifier: 40:21:9E:25:CD:B9:30:A4:A0:C3:06:2C:BD:16:2B:6B:DC:E5:B4:18
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 49B8A24E7D4D586D28E8D06D15E8548A9BC6AF8C
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 02 Jun 2024 14:00:02 +0000
ROA not before: Sun 02 Jun 2024 13:55:02 +0000
ROA not after: Sun 01 Jun 2025 14:00:02 +0000
asID: 140413
IP address blocks: 2406:13c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b8:a2:4e:7d:4d:58:6d:28:e8:d0:6d:15:e8:54:8a:9b:c6:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Jun 2 13:55:02 2024 GMT
Not After : Jun 1 14:00:02 2025 GMT
Subject: CN=40219E25CDB930A4A0C3062CBD162B6BDCE5B418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:4e:60:d6:14:ee:35:41:7b:d2:8d:23:73:
c7:23:b1:52:ac:dd:ce:e6:f2:9d:98:cb:56:c1:42:
58:86:96:65:38:66:0e:c3:e1:e5:d1:f0:bc:f0:09:
12:bb:20:56:9a:86:44:be:6b:2e:03:68:64:39:97:
5e:a8:05:c2:3d:4e:43:22:10:c3:87:09:c4:54:61:
a8:e2:f9:be:4e:1f:a9:81:07:d6:41:ae:9a:5c:af:
56:63:db:94:06:94:c8:45:3b:aa:e1:a8:04:6f:bb:
95:29:35:5c:14:e8:c4:f2:f5:3a:30:2b:da:6e:14:
b9:2c:5b:46:dc:b0:1e:b6:e6:d9:b5:64:da:5e:6f:
02:55:0c:23:47:f5:5e:0d:2d:53:14:05:31:f1:ac:
b9:2f:e3:e8:fe:e4:e1:7d:eb:72:c5:88:53:12:7a:
ff:3e:42:1d:f5:fa:2b:bb:19:54:c5:c7:87:53:1a:
07:9f:ba:de:bf:23:3e:f6:16:90:a4:a2:c5:76:79:
38:86:66:ff:87:3f:c9:34:6e:29:13:d4:5c:75:be:
94:4a:64:86:84:e7:3a:0f:79:46:b4:3b:af:d8:c8:
dd:b5:20:2f:19:83:a1:9d:19:13:1b:a0:7b:44:3d:
79:27:53:63:84:a0:b0:26:43:d3:bd:ad:5b:06:2d:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:9E:25:CD:B9:30:A4:A0:C3:06:2C:BD:16:2B:6B:DC:E5:B4:18
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:02:d3:db:8a:d9:36:cb:0f:4e:eb:a5:0e:8e:6f:72:45:ef:
09:e8:4f:95:4a:1e:bd:35:27:58:99:65:d6:07:b4:a3:8b:45:
f4:9d:fb:5b:af:cf:40:65:c0:1f:9e:97:95:19:57:38:69:dd:
d7:a9:ee:b5:f3:6b:3d:ec:ee:15:a8:59:e6:6d:2c:45:aa:14:
14:bb:74:52:5b:90:c5:da:98:51:19:b7:e8:57:4a:e7:b4:9b:
31:7a:6e:27:54:76:1f:82:6c:73:97:28:b6:39:4f:a1:60:6d:
14:f5:06:4f:80:f7:91:74:dd:63:df:35:05:19:f0:01:27:c1:
a4:ab:40:66:c2:b5:8e:bf:cd:5c:ab:54:98:56:58:ef:fb:e8:
01:6f:d2:88:23:d7:16:8b:42:3e:47:b4:7f:2a:34:b8:88:00:
5e:14:26:37:85:4f:f4:49:04:10:bb:86:f8:60:3c:d3:6b:fa:
73:b7:a1:5d:a3:ed:40:ab:9f:2d:da:67:59:b0:a1:ef:d0:a8:
4f:be:39:3e:c1:26:85:8d:24:24:23:5c:b8:35:98:f1:d9:6f:
bc:8d:fb:3e:f3:6a:f8:bd:e9:83:23:b1:02:37:0b:b8:1c:c6:
eb:a1:58:fd:c7:e3:59:35:52:54:24:29:71:a3:28:e5:a8:ac:
0b:74:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:31 2025 by rpki-client