Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa
File: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (raw, json)
Hash identifier: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=
Subject key identifier: D5:79:C1:CC:EA:DC:95:F4:44:0E:04:CD:60:CB:C7:77:AD:58:70:7B
Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial: 5D5FC566F3D38DB99D7206BA173A4B8E270F54BE
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa
Signing time: Tue 05 Nov 2024 04:00:02 +0000
ROA not before: Tue 05 Nov 2024 03:55:02 +0000
ROA not after: Tue 04 Nov 2025 04:00:02 +0000
asID: 140396
IP address blocks: 2406:6c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5f:c5:66:f3:d3:8d:b9:9d:72:06:ba:17:3a:4b:8e:27:0f:54:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Validity
Not Before: Nov 5 03:55:02 2024 GMT
Not After : Nov 4 04:00:02 2025 GMT
Subject: CN=D579C1CCEADC95F4440E04CD60CBC777AD58707B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:66:aa:84:cc:fd:0a:d5:31:f0:6e:ee:bf:
0c:d2:ca:3a:5a:63:41:26:44:7a:86:a2:98:de:9f:
97:cf:37:a0:06:d8:28:46:63:39:46:83:6b:48:8d:
2d:79:c5:fb:33:cd:93:c3:21:87:53:0b:69:fb:75:
78:ec:77:bf:59:13:c4:90:22:89:5f:38:18:c4:73:
71:b3:23:8c:be:c6:50:24:1e:0c:99:eb:58:79:84:
4c:6c:ee:24:eb:d2:a6:a4:b1:40:97:c8:79:0d:a0:
a6:1a:13:69:b2:99:b4:6b:41:f6:07:8c:10:01:6e:
65:39:8b:61:e1:36:c5:fb:7d:f6:bc:bf:76:8f:1c:
20:85:95:9b:17:37:1f:94:87:eb:ed:b4:53:64:6b:
12:ec:f2:91:b9:0b:61:c1:04:d0:a0:e3:c4:9a:ff:
13:98:ee:1d:3c:c6:26:e5:b9:87:87:fb:a6:1a:ed:
97:74:cb:f1:68:84:25:34:03:1c:54:f3:98:84:bd:
57:cc:88:d5:9f:bd:5a:21:a6:16:cb:e5:ec:fa:6a:
d1:08:5b:c2:66:3d:78:82:b5:ea:6e:06:3b:56:4d:
ce:b1:a4:41:df:9d:df:ef:56:93:4a:b7:23:cf:2c:
b4:64:0d:f2:78:7f:8a:41:ef:49:4d:9b:52:d1:d9:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:C1:CC:EA:DC:95:F4:44:0E:04:CD:60:CB:C7:77:AD:58:70:7B
X509v3 Authority Key Identifier:
keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:91:54:d0:4d:97:d6:6c:05:5d:5e:5a:0b:e1:1f:55:42:58:
7d:18:92:1e:ff:ee:9f:b3:94:f0:19:11:bd:48:5d:a5:33:39:
39:f9:33:69:8c:6b:25:c4:0e:e1:96:54:ab:97:47:09:47:75:
3c:4b:52:73:ac:3d:c6:e3:28:97:f4:e0:b0:86:b0:5e:b0:4e:
ed:0c:81:0b:e4:41:98:8a:ff:95:62:69:2e:17:a6:3d:be:3f:
bc:64:b6:73:60:d9:7c:6e:de:7d:ef:d5:44:fe:94:56:be:4e:
80:76:ea:b1:ce:57:9b:3c:d8:d2:b5:d7:b7:84:39:97:2c:a5:
73:9f:ee:eb:16:ea:d4:32:24:e8:7b:ef:a1:49:81:b6:d7:f2:
4b:52:28:c9:2c:19:78:f4:64:af:75:46:0c:f5:35:56:e0:9e:
47:1d:cb:34:e8:1e:45:57:7b:c6:a8:64:a4:73:4d:5c:72:fc:
c5:cf:1d:0e:1e:e2:e0:ea:b8:3d:8e:85:9b:ec:ab:01:9f:be:
27:8b:28:70:6d:f9:40:df:6c:5a:eb:f7:da:19:f2:07:7e:36:
45:d9:e5:2f:77:f8:72:dc:ab:d1:3c:95:35:17:9e:3d:7f:78:
16:ff:78:95:1f:e9:4b:69:c4:37:c1:bd:7c:e0:39:2c:d2:69:
cc:2d:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:04 2025 by rpki-client