Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: 6PCw84MiS6Amab7HshdgWfPnR/SNFwRHfzuTQ/6yoHc=
Subject key identifier: 99:04:F4:E3:D8:2F:F2:F1:0A:8D:DE:D8:88:11:45:5D:E0:41:32:A2
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 13820D517178AFE8104161D8AAA471F9BB97BDBB
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 02 Jun 2024 14:00:03 +0000
ROA not before: Sun 02 Jun 2024 13:55:03 +0000
ROA not after: Sun 01 Jun 2025 14:00:03 +0000
asID: 140413
IP address blocks: 2406:13c0:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:0d:51:71:78:af:e8:10:41:61:d8:aa:a4:71:f9:bb:97:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Jun 2 13:55:03 2024 GMT
Not After : Jun 1 14:00:03 2025 GMT
Subject: CN=9904F4E3D82FF2F10A8DDED88811455DE04132A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:1d:67:6f:7c:86:41:66:c4:f3:06:9c:1e:
cf:e4:b2:f0:8b:24:05:5d:df:7c:a8:76:b1:81:dd:
71:d8:d9:83:37:5f:ee:07:55:d4:a7:46:65:63:a6:
34:49:93:dd:02:a2:ac:f9:2e:6d:a6:37:e6:ef:8c:
32:d2:6b:0f:bb:1b:8a:93:32:24:39:f1:29:a1:92:
0e:05:d2:c9:cf:5c:46:b1:20:c6:86:1c:79:fe:5a:
5b:61:ca:0e:f9:8b:2f:7d:7c:9e:d3:ff:78:4c:b5:
98:3e:b2:70:ed:b2:c3:06:06:f9:20:d0:65:15:65:
28:73:6c:c4:70:b7:d3:6c:bc:d7:95:2b:5c:ea:4a:
6d:2b:b9:ea:ab:56:01:a8:79:59:a5:bc:43:58:ec:
9a:20:a8:10:ba:52:6e:af:a0:a4:63:6b:cc:2c:0d:
54:e5:d9:86:94:99:cd:10:75:56:1c:fb:b5:fd:a9:
bf:23:ea:50:0a:47:8c:e3:3d:12:23:2c:ea:10:39:
ff:ef:65:42:ad:da:e0:68:f7:b3:30:58:0b:9f:4b:
83:75:01:b4:ae:55:91:ee:1b:4a:89:b8:cc:c4:69:
df:9c:fb:f4:86:a3:7e:8b:4e:4e:70:ab:e1:22:2e:
18:9c:c8:15:d0:28:1d:45:c3:32:18:0c:40:5a:7f:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:F4:E3:D8:2F:F2:F1:0A:8D:DE:D8:88:11:45:5D:E0:41:32:A2
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:b::/48
Signature Algorithm: sha256WithRSAEncryption
62:49:ae:4f:6d:46:fe:bf:5b:0d:28:02:83:d3:2c:b3:0c:12:
66:a4:3b:4a:8e:0b:c0:6f:b0:ab:dd:2d:5f:19:72:94:d4:8b:
bb:00:41:b1:be:aa:91:2a:2a:4d:ee:df:2c:15:42:e3:ae:cb:
9e:cf:07:0f:f3:76:22:d9:4d:c5:d7:1e:48:57:6a:99:e4:67:
f6:95:d7:ff:98:bd:0f:39:a0:49:ba:60:bb:e6:f3:9f:0f:0a:
52:36:bb:45:e8:bc:bf:62:99:de:fc:be:1d:51:d4:d9:0a:db:
a2:99:d2:38:e4:39:42:f2:49:fc:7b:2f:5a:d5:3c:4f:19:a6:
fc:66:96:02:84:06:96:88:c4:75:7b:11:04:4c:b2:46:0c:a2:
e3:bb:7a:b0:c3:82:16:9a:6d:41:6f:dd:6b:8f:ad:60:dd:df:
2c:88:28:af:f5:a3:42:de:01:fa:b0:53:ba:78:8d:45:7e:ae:
98:2a:4c:56:f1:61:b9:4f:0a:ad:95:4c:a5:00:49:81:79:52:
5d:6c:66:fe:30:6e:48:c6:a8:d0:87:f3:56:7a:4a:a6:a7:af:
64:b4:18:31:c8:2b:d2:89:2a:2e:6f:d0:e7:41:4a:98:4d:82:
86:47:32:81:1a:98:d9:66:98:db:ae:35:c3:91:c7:7a:00:c4:
1e:d8:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:24 2025 by rpki-client