Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
File: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=
Subject key identifier: 55:8B:01:0E:EC:3D:CD:64:30:28:97:FD:BD:A4:C5:48:58:01:D6:D7
Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial: 5F11622A85C51A7855C89E96AE3A2E3C61C9B95D
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
Signing time: Mon 27 Jan 2025 17:00:01 +0000
ROA not before: Mon 27 Jan 2025 16:55:01 +0000
ROA not after: Mon 26 Jan 2026 17:00:01 +0000
asID: 139417
IP address blocks: 2404:cac0:d35::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:11:62:2a:85:c5:1a:78:55:c8:9e:96:ae:3a:2e:3c:61:c9:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Validity
Not Before: Jan 27 16:55:01 2025 GMT
Not After : Jan 26 17:00:01 2026 GMT
Subject: CN=558B010EEC3DCD64302897FDBDA4C5485801D6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:08:df:c3:f9:33:01:ac:b2:dc:7a:08:ee:
01:ae:38:0e:74:bb:32:8b:a1:f2:62:76:dc:34:1c:
f1:ca:63:07:a3:90:3f:15:e9:3e:fe:a4:5a:13:ec:
8c:1e:a7:7d:d5:c4:29:6c:72:e4:da:07:5f:ad:a9:
3d:80:1d:25:79:1b:7f:b7:35:66:63:7a:bb:4d:6a:
4f:df:74:ba:29:33:c4:7a:5c:e0:2e:c4:79:33:e2:
ea:40:ed:de:d4:ff:78:a2:5f:78:2b:9b:48:a2:87:
1e:b3:9f:ef:64:bd:24:51:c7:8c:ca:d4:d5:f8:78:
4f:51:f1:11:a3:db:0d:32:f2:74:fc:94:f7:26:0e:
98:ed:86:af:a5:ec:be:01:77:5a:fb:56:30:30:89:
35:c3:77:ae:a3:ac:29:2a:8a:1f:5a:e5:e6:d1:d4:
8f:60:82:ad:0b:6e:40:b4:c2:bd:ee:6d:22:9f:65:
ed:5f:54:86:43:5a:31:e3:e1:55:7e:5b:11:3d:e8:
d0:fd:a2:27:f8:84:4a:08:f4:70:de:ed:5e:6d:af:
25:f6:75:ae:99:ef:2b:cb:a6:60:91:d2:ec:a0:20:
8d:48:7a:16:1a:f2:ed:96:58:10:d2:1b:2e:1d:39:
79:55:ba:0b:59:6a:2a:d1:4b:84:2d:89:8a:76:3f:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:01:0E:EC:3D:CD:64:30:28:97:FD:BD:A4:C5:48:58:01:D6:D7
X509v3 Authority Key Identifier:
keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:cac0:d35::/48
Signature Algorithm: sha256WithRSAEncryption
74:d4:84:56:34:2e:a8:6d:a2:fc:75:a2:fd:b7:ce:3c:a9:90:
92:39:12:3e:2f:26:69:50:d4:e9:8e:60:da:15:24:ae:15:80:
21:05:f9:74:ee:6b:fd:26:07:48:af:a7:1a:5e:6e:3b:3a:b9:
ca:56:00:b4:17:05:56:75:73:14:26:39:93:48:81:b3:85:79:
37:19:58:e9:3b:fe:36:03:a4:af:bc:23:28:41:46:2e:75:08:
13:1a:f0:a6:6a:c6:cf:e7:19:b0:8b:63:e7:62:ec:54:70:9f:
81:18:81:20:5a:8b:44:b7:59:8e:8d:db:a6:99:4e:07:44:e0:
0c:6a:b0:bc:2e:67:a1:e5:ad:9f:ca:6b:d1:be:97:35:8f:17:
62:36:39:7f:d7:19:13:f7:cd:dd:bc:fa:ca:8f:4a:a7:a8:bc:
0a:0e:fc:84:3f:a8:ae:fa:3e:35:22:01:78:ac:86:dd:19:3b:
75:2a:19:a1:da:cc:78:c0:c7:ce:a0:18:25:f4:2b:5b:c9:89:
27:a3:92:97:fc:e2:15:4e:5e:37:1b:82:eb:7a:85:88:e5:ee:
56:5f:27:17:55:e4:a2:fb:8f:25:d4:12:1e:f2:f8:9e:07:76:
96:f1:9e:70:3e:fa:88:9c:e6:64:08:f2:86:d9:3c:aa:7a:47:
35:95:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:47:33 2025 by rpki-client