Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa
File: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (raw, json)
Hash identifier: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI=
Subject key identifier: C3:2A:FD:4D:8E:CC:FB:BA:A4:B2:66:42:0E:B3:21:3A:87:86:54:1E
Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Certificate serial: 2622A6BE21CE1A8DDBA5B3B20BE98870356AAA93
Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa
Signing time: Wed 04 Dec 2024 05:02:35 +0000
ROA not before: Wed 04 Dec 2024 04:57:35 +0000
ROA not after: Wed 03 Dec 2025 05:02:35 +0000
asID: 138143
IP address blocks: 2404:6140::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:22:a6:be:21:ce:1a:8d:db:a5:b3:b2:0b:e9:88:70:35:6a:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Validity
Not Before: Dec 4 04:57:35 2024 GMT
Not After : Dec 3 05:02:35 2025 GMT
Subject: CN=C32AFD4D8ECCFBBAA4B266420EB3213A8786541E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:42:27:6f:c4:12:a7:d1:49:ce:f5:25:9d:
26:c2:2b:7f:29:49:bf:43:f7:60:6c:4d:3b:36:0e:
72:4c:52:6c:a6:d2:79:7f:0e:04:21:5f:0d:34:8f:
1e:61:0f:6c:df:41:4d:c4:fd:b1:97:7b:91:37:14:
a6:e3:3b:5c:0a:70:bf:08:57:d9:cb:c8:39:a3:f1:
ab:3b:08:66:e9:eb:60:8e:30:65:6e:2f:62:c6:b1:
b0:a3:0b:be:bc:35:8f:cf:3f:3c:15:03:40:1d:2f:
fc:32:a8:45:d7:08:2f:bf:8a:0b:72:95:20:9a:f1:
9c:ba:e3:29:71:68:ac:0d:f3:7b:9c:c9:46:eb:a0:
fe:92:64:0e:40:22:59:04:c9:42:5e:09:59:a3:0c:
86:c5:72:c4:c6:17:e5:91:a1:96:32:08:d4:d3:dd:
17:34:5a:5d:c5:01:52:10:69:13:71:40:c0:ad:e5:
c2:72:6e:b2:bb:60:43:ea:83:5d:ec:82:35:f8:6b:
69:75:9d:8b:b2:ff:0f:bc:15:6b:65:16:f3:14:fd:
00:7a:91:e5:37:68:dd:ed:fb:89:1e:fa:95:7f:b1:
65:f5:0f:15:e8:51:3f:3b:f6:ca:5b:d5:d1:5b:63:
6c:84:ce:51:94:32:2e:8a:c2:02:33:8d:03:ee:5f:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:FD:4D:8E:CC:FB:BA:A4:B2:66:42:0E:B3:21:3A:87:86:54:1E
X509v3 Authority Key Identifier:
keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:6140::/32
Signature Algorithm: sha256WithRSAEncryption
a6:e1:b7:8d:9e:54:58:66:da:43:77:78:5f:9d:cc:77:d4:b2:
07:c9:17:da:6e:9b:7d:99:f5:31:2d:3a:fc:14:49:bd:c6:2c:
a2:ae:04:7d:fb:fc:28:3a:fc:d7:40:06:5d:07:07:16:de:78:
1c:0e:fe:13:f4:b2:0d:fe:f8:e4:f6:f9:d0:5e:6c:a3:20:b1:
6b:81:fb:9c:5c:f5:e9:92:58:2c:8a:98:d5:a8:97:41:db:6c:
10:19:0f:df:2d:30:31:c0:e3:1b:fa:a8:c3:c1:63:0d:3a:a0:
b6:bd:7a:54:75:d5:48:29:3a:f8:d0:00:d0:95:f1:53:0f:25:
30:87:c9:07:04:eb:63:b4:0b:e0:83:49:e0:3f:53:f7:79:5b:
52:64:68:84:eb:90:dc:43:49:84:2a:9d:1c:48:4d:7e:02:56:
01:4d:34:bd:16:11:3a:0d:cd:ab:4b:58:ee:cf:92:d6:08:1c:
52:7f:18:81:6c:ba:38:cf:16:ba:ce:46:cf:89:ea:bf:e6:81:
fb:34:cc:44:77:76:65:8b:7d:5d:52:cd:fa:43:33:0c:45:27:
d0:d8:9d:a7:87:f1:72:aa:fb:0d:a6:91:d7:c4:dc:66:7f:7d:
fd:20:0c:30:fb:d5:ca:d7:fc:8e:c9:88:54:74:dc:ac:43:ae:
c4:45:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:15 2025 by rpki-client