Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa
File: 323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier: y1fyWuipYPoEV92aBrzyBVx9+9+Jw4MgGOxvIvLJ2Oo=
Subject key identifier: A1:C4:70:33:B0:29:62:B7:FB:2A:D7:E9:31:8A:2E:43:7D:CF:22:57
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 2688DD10CEECFFDE7E5A19D46A9591A1BD5A6E11
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa
Signing time: Sat 28 Dec 2024 09:00:02 +0000
ROA not before: Sat 28 Dec 2024 08:55:02 +0000
ROA not after: Sat 27 Dec 2025 09:00:02 +0000
asID: 133840
IP address blocks: 2404:e100:3001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:88:dd:10:ce:ec:ff:de:7e:5a:19:d4:6a:95:91:a1:bd:5a:6e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Dec 28 08:55:02 2024 GMT
Not After : Dec 27 09:00:02 2025 GMT
Subject: CN=A1C47033B02962B7FB2AD7E9318A2E437DCF2257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:2a:26:82:22:fa:2e:73:b2:d3:cf:4c:17:
39:66:68:22:0f:8d:98:33:f4:00:0d:0f:1f:23:30:
7e:a7:9f:2c:d0:5f:2e:11:be:8e:b4:2d:9c:ce:01:
67:97:d8:73:92:65:b5:3e:56:d6:6e:62:a5:c0:f1:
26:45:13:8d:6f:a3:7e:f2:a0:b5:4a:84:77:13:5f:
ab:b2:2a:ce:04:e7:dd:c4:11:3d:6c:95:2b:dc:b4:
af:20:d7:87:a2:ec:de:a3:94:4d:7b:b1:bb:7c:50:
bc:27:68:7d:ac:c9:03:a8:71:92:cb:14:4c:e8:2c:
91:6d:fb:f0:77:21:99:5e:c5:61:8a:ce:15:2d:a5:
70:29:05:f0:52:fc:04:84:b1:32:f9:44:09:eb:e3:
33:d3:78:86:85:7e:63:a9:16:02:30:c4:02:03:ae:
c8:63:f4:b3:e8:04:66:42:9b:06:04:35:6a:57:c4:
c1:f1:28:cb:8c:30:79:26:0b:07:d9:4f:fb:4b:29:
d4:f0:89:d6:b7:c5:c0:7b:92:d3:d0:d0:6b:51:a1:
f4:63:86:40:bc:a1:5f:a9:05:7b:a9:b3:42:a7:ff:
d2:34:05:47:93:d8:6c:ec:d6:07:b3:3f:9e:40:56:
06:d9:e0:3c:06:f7:53:60:fa:f5:61:dc:b3:55:af:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:70:33:B0:29:62:B7:FB:2A:D7:E9:31:8A:2E:43:7D:CF:22:57
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3001::/48
Signature Algorithm: sha256WithRSAEncryption
94:df:32:9b:97:3f:4f:1b:fa:bd:4d:a9:c0:9d:32:ff:57:25:
b0:3b:02:5e:a4:7c:45:e8:db:f1:f6:8a:43:dd:d9:1c:33:dd:
d5:57:b0:75:42:ff:d4:33:88:8b:76:99:e2:b3:f5:b1:af:27:
95:6c:b7:45:de:b6:fe:8b:90:cf:7b:e9:75:c1:fb:35:89:cb:
e8:c7:49:c1:d5:c6:6b:1a:a9:7d:c0:94:23:4f:e2:43:19:56:
f5:1c:fc:f2:78:69:db:a1:e4:d7:00:1a:3e:48:95:8d:ad:69:
21:4a:6b:d7:4f:22:3a:b2:4e:30:51:54:12:ea:01:60:7a:b3:
3b:4d:89:93:a3:0d:2a:2b:e3:cd:21:d5:ac:e2:d1:c6:bf:a5:
d5:86:25:df:79:6e:3a:5e:dd:94:b4:10:82:22:f4:df:89:f3:
02:0d:4d:f4:78:f9:b0:2f:cc:1e:72:cf:c0:aa:19:7a:bb:43:
03:24:fe:56:01:e7:63:4c:f0:b2:43:7f:19:3c:97:b7:e6:af:
99:01:5b:a6:96:04:0e:21:9e:82:bb:0b:cc:97:b8:e6:de:55:
67:19:7e:c3:27:71:0b:77:31:ca:45:99:28:36:48:fa:c4:ce:
3f:a2:a3:28:c6:a6:99:57:e8:70:4b:d0:0d:a9:81:59:9e:2f:
7c:d1:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:28 2025 by rpki-client