Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: mznW2wf6ad/PAHuopPakHeeFZx7rtA4ruvMLr8gBfUg=
Subject key identifier: B3:DA:3A:39:FD:67:D2:DE:84:F5:C8:F7:C1:CF:E3:1E:FF:D4:58:EF
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 54A85C56C6D9A88026DFBB4C6F4EB63C6B3EAC88
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 26 Feb 2025 03:00:03 +0000
ROA not before: Wed 26 Feb 2025 02:55:03 +0000
ROA not after: Wed 25 Feb 2026 03:00:03 +0000
asID: 38526
IP address blocks: 2405:3740:901b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a8:5c:56:c6:d9:a8:80:26:df:bb:4c:6f:4e:b6:3c:6b:3e:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Feb 26 02:55:03 2025 GMT
Not After : Feb 25 03:00:03 2026 GMT
Subject: CN=B3DA3A39FD67D2DE84F5C8F7C1CFE31EFFD458EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:31:af:45:48:0d:bc:76:78:3d:70:6d:22:
0c:85:55:63:54:1c:85:60:db:66:e1:00:42:1f:a0:
00:f8:1c:84:f6:bf:6b:53:7e:8f:b6:b5:ee:77:ec:
96:8b:76:8c:67:94:b8:03:cb:41:95:d2:1e:ec:48:
7e:40:d5:a4:93:72:46:f8:f3:3d:1e:3f:7d:2e:89:
43:43:85:56:5d:1e:b4:43:7d:07:75:e7:d8:89:3b:
da:80:af:60:dd:48:85:00:eb:18:95:2e:72:d5:a3:
a8:93:4a:42:97:bb:65:57:1e:15:3c:fe:87:fd:83:
eb:91:f9:4f:a3:f1:67:cd:bf:18:42:2f:a8:16:41:
4b:d4:58:aa:a8:1d:60:c3:60:09:c6:09:12:9d:60:
c1:ca:99:eb:fa:01:a5:fc:de:51:c6:55:dd:99:b2:
dd:92:2a:43:7d:b2:ee:98:9d:67:eb:85:60:af:d5:
6a:02:36:9c:db:40:ed:ec:9f:df:dd:a4:9d:08:50:
11:91:9d:5c:82:98:28:35:85:21:c3:e2:9d:fc:73:
ab:3d:ca:81:39:1c:76:de:42:8c:78:fe:00:ba:6f:
f1:59:95:fb:22:54:d2:62:4d:44:25:ac:9c:d7:aa:
26:d0:d9:c7:1e:38:ea:19:58:7a:02:ba:2d:ce:f9:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:3A:39:FD:67:D2:DE:84:F5:C8:F7:C1:CF:E3:1E:FF:D4:58:EF
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:901b::/48
Signature Algorithm: sha256WithRSAEncryption
6e:48:af:ec:2a:68:21:f0:63:10:aa:66:ea:4d:f8:28:5d:1e:
66:3e:48:13:d2:66:fd:f3:d3:59:56:0d:58:64:2e:e4:3c:95:
3a:9b:ba:fd:cc:c1:9e:44:bb:53:1a:64:6d:53:58:08:a4:a2:
7f:c8:90:af:a2:13:19:8c:9f:c5:27:a7:db:94:6e:95:76:7b:
d5:df:0c:20:08:6b:1a:cd:a0:cd:75:1b:a2:e4:a2:a9:e0:12:
c9:bb:ee:84:d9:a4:b2:9b:d2:85:2b:92:87:84:bf:3e:55:30:
cd:74:3e:eb:c4:00:e2:f5:1a:a2:6c:a6:f7:0d:31:bf:6f:68:
7f:3b:ec:e3:79:57:4a:f2:ca:d8:d8:b0:a4:62:bc:f5:2a:8e:
24:33:4e:90:c1:88:f8:87:a3:7b:fc:aa:37:6b:7e:fa:2c:db:
81:7c:d6:fb:35:48:e4:22:dd:e8:59:0d:d1:6b:73:30:22:70:
2f:b6:2b:20:49:3c:14:ea:f7:66:4a:ce:dd:83:0b:fd:d9:e2:
b4:93:10:21:1c:df:c0:8a:c9:2d:e8:00:e3:2f:8f:c6:24:3b:
4a:fe:d5:02:fe:23:b1:ca:13:a2:78:f0:10:f4:b0:d1:aa:5e:
e8:af:3f:70:32:ed:e4:57:22:7a:b1:16:b2:2f:01:95:47:e4:
e2:2f:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:26 2025 by rpki-client