Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa
File: 323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier: TZhjKpG6SEaA4VZzRZmN6Kw9tYZJNsgClOo9opty+BA=
Subject key identifier: 34:85:CB:7F:C4:80:27:DD:0F:1C:20:21:03:29:35:3F:5D:C1:4F:88
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 2F722C10125A4CA320B8420A4DF9F347C3B5E4C8
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa
Signing time: Sat 22 Mar 2025 06:00:02 +0000
ROA not before: Sat 22 Mar 2025 05:55:02 +0000
ROA not after: Sat 21 Mar 2026 06:00:02 +0000
asID: 133840
IP address blocks: 2404:e100:3006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:72:2c:10:12:5a:4c:a3:20:b8:42:0a:4d:f9:f3:47:c3:b5:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Mar 22 05:55:02 2025 GMT
Not After : Mar 21 06:00:02 2026 GMT
Subject: CN=3485CB7FC48027DD0F1C20210329353F5DC14F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:43:22:de:c7:65:da:e1:22:95:c0:c5:eb:
55:fd:b3:78:6a:ad:5b:72:4b:92:74:5a:a0:c4:fd:
8b:56:84:86:06:54:e3:a6:1c:4b:75:c2:33:b4:ed:
5f:91:27:f1:76:96:01:5c:95:7e:45:f0:3d:50:fa:
a9:e6:d1:6e:79:13:26:22:ff:b9:09:79:c9:74:3a:
f4:72:6c:c7:a5:29:50:2f:dd:d2:bb:0d:97:ea:f1:
bf:80:82:8a:ff:80:22:54:f1:4f:87:bb:b3:67:9a:
3e:92:c8:4f:0f:9a:32:20:7f:d5:bc:55:93:01:ad:
dc:ab:f6:59:a3:30:4d:fb:bd:ef:9f:f6:ef:f0:23:
17:cf:6c:48:5f:dd:b6:42:71:e0:37:1c:d3:38:65:
10:fb:e1:44:bb:97:73:dc:39:8a:65:d8:90:bc:73:
53:57:ee:27:9f:21:e3:d2:b7:bc:03:28:94:27:7d:
00:a3:6b:49:b7:c4:f1:3c:3e:2d:95:52:79:78:f3:
0a:df:43:e9:57:12:e7:4b:6f:56:61:f4:3a:e3:3e:
cd:03:6c:92:08:ae:d6:7f:3c:6f:9c:8d:c8:75:ab:
26:f8:16:a6:62:31:2c:c5:5e:2a:70:05:1d:d9:e9:
c8:61:91:0b:ad:fe:f3:21:ed:ad:ac:82:fb:e9:b2:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:CB:7F:C4:80:27:DD:0F:1C:20:21:03:29:35:3F:5D:C1:4F:88
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3006::/48
Signature Algorithm: sha256WithRSAEncryption
29:68:7a:c0:20:7b:8a:2c:97:ff:62:f1:20:9e:1e:bf:84:ff:
5b:b2:ce:34:f4:94:d1:61:6e:be:70:fc:71:b8:c6:b9:ca:60:
ba:3d:ea:1a:13:3a:1d:b0:71:15:3a:a4:55:39:bf:f8:06:77:
6d:71:fe:b8:7c:ad:94:41:19:20:e6:c2:94:03:e9:91:b8:56:
a7:57:04:90:e1:9a:84:4e:e3:ad:c2:71:28:c8:bb:3f:98:07:
32:9d:67:f2:99:43:e0:17:27:3d:c7:9f:22:e8:aa:5b:64:cb:
d2:73:51:a4:ce:42:fd:10:b2:97:be:9c:d9:2f:d1:fd:16:b0:
6a:f6:e1:7b:99:dd:8b:50:5a:a2:f8:8c:b0:1a:3a:41:14:ca:
d5:a3:66:74:89:51:70:eb:b7:6b:9a:4a:fb:87:75:5c:5e:80:
e9:67:f2:95:1a:76:58:50:3b:15:60:5e:d2:b2:d4:af:5b:29:
cb:eb:47:66:9c:77:a7:b5:46:a3:47:4c:d9:61:5e:bd:94:98:
61:8f:ba:38:71:c9:50:39:4d:63:da:17:e1:32:d8:39:9a:2e:
48:0e:e3:b9:73:e6:16:62:ab:4e:83:2b:40:68:f5:c3:23:08:
e2:72:ff:59:64:2d:9a:34:15:42:e6:12:5d:14:3e:b6:af:f6:
1d:ab:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:09 2025 by rpki-client