Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
File: 323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier: eEsmYZ3f+RGjzr96Yw1r86du2zW9vidqgFBnK2GUT0U=
Subject key identifier: 0C:FB:24:74:49:CB:15:9D:B7:D6:2D:02:B0:B3:5B:DD:65:CF:67:73
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 17B56166D20483A86AA9B75091DB00C30F152769
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
Signing time: Tue 25 Mar 2025 07:01:07 +0000
ROA not before: Tue 25 Mar 2025 06:56:07 +0000
ROA not after: Tue 24 Mar 2026 07:01:07 +0000
asID: 133840
IP address blocks: 2404:e100:3008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b5:61:66:d2:04:83:a8:6a:a9:b7:50:91:db:00:c3:0f:15:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Mar 25 06:56:07 2025 GMT
Not After : Mar 24 07:01:07 2026 GMT
Subject: CN=0CFB247449CB159DB7D62D02B0B35BDD65CF6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:af:ae:c6:bf:6e:15:b4:31:0d:50:6d:01:
1e:72:02:77:8a:4e:bc:86:96:d3:e7:f5:9b:57:0a:
d7:1f:0d:8e:90:93:fa:f4:63:ff:33:76:0a:43:d4:
93:60:54:78:a5:b9:98:27:98:ea:3f:45:b8:73:6b:
5d:2a:fd:32:31:ee:df:48:cf:2b:66:65:40:ca:f0:
e5:e0:b6:4c:e6:72:74:81:66:13:11:3e:93:70:d8:
15:59:82:91:dd:49:8f:75:b3:8c:7b:2b:17:5e:b8:
01:d9:bd:cb:d7:b1:be:e2:e0:15:02:e6:2b:ac:e1:
7f:bd:f1:c6:b3:8e:19:d4:ff:a4:d5:7a:47:9e:46:
0f:70:ff:f6:9f:18:f7:52:5e:03:53:b0:c5:78:6e:
77:1b:40:08:ba:c6:74:55:01:4f:19:6d:bc:94:2c:
21:7d:fe:f8:d3:4a:d2:95:21:59:5e:0f:7f:cb:c0:
cd:c9:8e:9e:47:c1:f0:77:8a:b2:95:a9:dc:39:2f:
57:8d:ce:e0:f4:49:27:b5:39:c4:b9:bb:b0:a1:b4:
c0:12:b4:e1:ba:c7:fc:dd:d3:db:15:81:39:92:e4:
0f:6b:bb:7f:5c:bb:86:d3:01:cd:66:2a:1c:2c:a3:
d4:5a:15:57:20:a1:72:ad:c6:61:22:a0:06:f2:90:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:24:74:49:CB:15:9D:B7:D6:2D:02:B0:B3:5B:DD:65:CF:67:73
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3008::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ef:ca:c7:b2:c6:e5:0e:fb:de:b4:25:65:2f:12:7f:6d:98:
46:0d:76:5f:17:ad:fe:4d:96:fa:ce:13:e9:8e:5f:51:62:5f:
ee:7b:ad:9e:36:fb:86:c2:91:25:c2:c3:1c:86:58:07:40:9c:
37:02:8d:9d:06:7c:22:af:d4:52:f4:d4:6a:05:bf:bf:b6:4b:
17:25:a9:a4:bb:b2:e0:b0:16:5e:19:74:39:01:24:44:3e:98:
75:ad:c9:ee:65:49:7a:54:52:f2:2c:5a:40:16:6e:c5:21:d4:
6f:2a:07:d3:2c:ac:fc:64:72:aa:9d:d0:e3:b0:06:23:a8:8e:
fc:76:58:c3:4a:99:df:bd:97:9c:9a:88:f5:8e:2d:ff:c5:86:
60:c2:7f:bf:3c:33:04:91:8c:d2:07:63:81:b3:30:04:3a:06:
d9:99:f8:bc:11:a0:99:17:22:23:8d:42:26:43:6d:9b:b7:7b:
ca:77:95:54:a8:fb:16:61:fc:03:a0:6d:96:66:b4:fe:57:6d:
f2:db:85:d0:2e:a9:dc:2e:a5:7d:04:08:8d:6a:0b:37:55:e9:
61:4e:64:4b:de:f6:c1:d4:f7:80:6a:00:dc:bd:43:0c:2f:87:
4f:46:32:39:0b:02:b0:ae:a7:98:46:4d:78:38:a3:84:ac:dd:
6c:1c:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:13 2025 by rpki-client