Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa
File: 323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier: O8lT4YiD7zK8UqJi+y6UJmSZjw6qOrdTXIWbMi8L4Wc=
Subject key identifier: 0A:B0:D7:BB:E0:1E:D8:F1:DB:2D:97:1F:3B:CE:AC:9B:9D:1E:34:34
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 58B24488DCF7B465EFAAEDDA425C0F0A8F022BF2
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa
Signing time: Mon 01 Jul 2024 01:05:49 +0000
ROA not before: Mon 01 Jul 2024 01:00:49 +0000
ROA not after: Mon 30 Jun 2025 01:05:49 +0000
asID: 55685
IP address blocks: 2404:e100:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b2:44:88:dc:f7:b4:65:ef:aa:ed:da:42:5c:0f:0a:8f:02:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Jul 1 01:00:49 2024 GMT
Not After : Jun 30 01:05:49 2025 GMT
Subject: CN=0AB0D7BBE01ED8F1DB2D971F3BCEAC9B9D1E3434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:d2:19:1e:db:c8:1b:3b:81:1b:f2:34:14:
2e:73:62:3b:3d:60:c6:e8:7b:c6:73:af:32:d7:81:
f6:e1:55:e6:5f:53:2d:92:70:de:d6:53:d5:ce:cf:
51:1b:d2:56:b9:be:82:d0:ec:d6:df:bb:49:93:f9:
89:05:4f:fa:ac:72:d4:99:33:4c:a7:bc:3e:e4:6c:
2e:f5:17:7c:04:9c:b4:ca:da:47:e6:6b:35:d6:88:
b9:cb:ce:df:b9:93:20:81:03:ad:2a:3e:29:fb:ff:
b0:a8:7b:c6:d2:56:20:eb:48:19:cf:8c:a5:0c:49:
f0:5a:b3:d3:0b:8f:95:61:bd:9c:23:52:44:25:f8:
13:8a:fc:ea:f5:fd:23:05:f7:50:33:18:90:de:dc:
eb:22:60:3a:e3:69:06:70:44:12:56:d3:d4:ef:65:
5b:02:31:20:4c:9b:08:29:5b:7d:0f:11:67:5f:6e:
80:3e:52:db:05:3d:5c:6c:c7:ac:23:11:95:10:48:
c9:5f:53:27:6e:4c:d2:4d:73:40:d5:28:ba:ee:f2:
a6:05:34:d0:c2:fd:18:a3:a2:dc:a5:59:b8:7e:b5:
44:39:96:5e:43:bc:66:cd:70:d3:f3:00:62:79:88:
c9:5d:ef:54:10:a6:1b:0a:4c:2d:de:be:77:1b:da:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:D7:BB:E0:1E:D8:F1:DB:2D:97:1F:3B:CE:AC:9B:9D:1E:34:34
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3::/48
Signature Algorithm: sha256WithRSAEncryption
44:b1:7f:2b:1e:d0:b3:6f:62:5f:11:3f:fe:a6:a3:f3:4a:cc:
0d:32:6d:75:cb:e6:8a:7e:93:72:06:b0:9d:67:32:94:60:97:
2c:de:16:2c:a2:7b:09:e1:f7:07:60:2e:c3:b4:9c:99:9f:9f:
1a:6f:8a:b1:5c:53:68:01:7b:bf:72:89:f4:27:42:c1:3e:ed:
0b:aa:2f:8d:81:a3:19:92:5e:2e:02:98:f6:7c:f3:e7:5c:f6:
19:85:c2:f8:92:d6:45:bb:30:db:f3:d5:2e:e5:84:27:98:6f:
d0:21:7c:c2:5c:61:d6:ee:9f:7e:fc:8b:0d:75:9d:a2:82:58:
5c:5b:0e:0e:f8:ff:3e:88:d7:72:93:19:05:ae:0b:c5:f8:fc:
c1:db:23:34:03:2c:e3:6e:f4:f4:1f:65:d1:5c:d0:c9:f7:09:
c0:b6:f3:a2:27:56:64:e1:83:8a:55:a4:63:b1:84:90:fb:44:
94:30:b9:ec:01:a2:cb:18:5e:c8:d0:4e:5e:09:40:0d:82:2f:
bf:38:ba:30:46:58:7b:50:16:13:d1:81:ca:5b:1a:f2:d3:4a:
d4:f4:fc:5b:ab:41:a3:c6:24:7a:9d:47:a0:f9:3e:5a:19:a3:
8e:16:b1:86:36:47:a3:a6:b8:a3:35:33:b2:35:f2:7e:ff:ca:
84:74:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:15 2025 by rpki-client