Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: 2gHnO4FvDv3m+D/zbSRO0Ij9y5H/LS364gvsZ7Hr8xo=
Subject key identifier: 5E:2D:9D:AF:6A:36:DB:1F:76:F6:60:EF:9E:CE:4C:5C:7D:44:BD:AF
Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial: 439EAE068D2E5F61196B7F95E57C1F8A5C6165E0
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa
Signing time: Sat 09 Nov 2024 04:00:00 +0000
ROA not before: Sat 09 Nov 2024 03:55:00 +0000
ROA not after: Sat 08 Nov 2025 04:00:00 +0000
asID: 58552
IP address blocks: 2404:fd00:fac3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9e:ae:06:8d:2e:5f:61:19:6b:7f:95:e5:7c:1f:8a:5c:61:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Validity
Not Before: Nov 9 03:55:00 2024 GMT
Not After : Nov 8 04:00:00 2025 GMT
Subject: CN=5E2D9DAF6A36DB1F76F660EF9ECE4C5C7D44BDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:0e:a0:fd:1b:83:64:51:6b:52:10:a5:af:
eb:76:30:7e:e7:06:66:4b:43:58:a9:d3:9c:fd:78:
85:41:45:a7:84:d1:f8:7a:de:3e:f8:46:a8:45:b2:
7f:28:7e:69:c2:78:8b:6f:df:14:f3:c2:56:5c:d4:
db:c1:af:86:12:2f:ef:6c:d6:fd:c9:52:6b:a9:93:
8f:82:36:f9:b8:05:c4:0c:45:93:a7:03:be:ac:c0:
8e:a0:0a:4f:34:02:b8:06:96:0a:17:c9:5e:cf:b7:
ff:0a:40:fe:5b:90:ab:be:f0:cc:ed:06:ae:95:b0:
d6:a2:b2:b7:fc:f5:96:c3:d9:e3:17:4b:8d:7d:f2:
64:cd:22:10:d2:07:61:2c:5f:f7:89:c1:dd:6c:56:
0d:a2:96:79:a0:07:d9:9f:b1:2e:d7:87:6b:df:1f:
63:4b:11:dd:cb:93:be:33:ea:dc:67:ac:88:9e:64:
bd:38:3c:2a:11:10:b1:c2:9b:53:cf:1e:d3:37:0f:
a6:e6:fb:28:f3:c2:f2:1a:52:fd:63:fb:af:a5:8e:
cc:b3:e6:1f:ae:cc:f2:fc:18:f4:24:6d:ba:b6:00:
9a:3d:36:66:1a:5e:fc:ef:0c:03:a9:1f:f8:d5:4c:
34:93:e4:b2:f9:c3:c3:99:35:23:0c:89:1e:35:73:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:9D:AF:6A:36:DB:1F:76:F6:60:EF:9E:CE:4C:5C:7D:44:BD:AF
X509v3 Authority Key Identifier:
keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:fac3::/48
Signature Algorithm: sha256WithRSAEncryption
69:07:d9:49:3f:be:a1:36:66:0c:ab:5b:82:4d:6e:82:d9:d4:
5b:e8:4a:b7:4c:6a:dc:66:3d:4b:92:29:3f:b1:af:82:09:36:
53:25:0a:bc:d7:81:04:62:a6:f5:dc:1c:52:78:a7:49:fa:b4:
bb:9f:e3:d3:fe:1a:da:c5:26:86:ce:36:9c:6a:0d:9c:06:ed:
01:e9:6b:dc:51:97:8c:91:28:90:10:77:05:8a:0f:e6:9c:44:
77:7c:b9:c2:c1:3f:b4:3c:26:fd:c2:a1:3c:ee:01:b0:84:30:
c2:65:48:49:f1:c5:be:61:a9:6e:ce:af:1c:d3:0e:5d:f5:5d:
6e:ec:ac:b8:5d:76:b1:56:42:87:81:88:d8:01:d5:ec:2c:a5:
16:5f:60:bd:24:ad:f1:86:52:3a:b1:12:2b:a1:f8:dc:6c:77:
0a:5c:ea:68:b3:2d:ec:bc:b0:03:2c:1f:ae:05:ab:9b:fb:36:
89:81:74:79:3a:94:35:9e:a1:5c:70:ba:49:5b:85:44:2c:e8:
ab:e3:a6:bc:50:63:9b:4a:d5:8e:f0:4e:c1:a5:21:f6:14:42:
45:0e:63:e9:a5:83:61:7d:4e:aa:e8:4b:5c:1a:3a:7c:d8:72:
ef:9d:6e:22:5b:77:b1:1d:a6:4c:a7:75:51:96:ab:5a:57:1b:
ad:f6:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:45 2025 by rpki-client