Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa
File: 323430353a333734303a3a2f33322d3332203d3e203338353236.roa (raw, json)
Hash identifier: 6a3NMKbD4UnpsuwEWPnlec493XlN0AGEH9RkkJq+gFY=
Subject key identifier: A7:29:89:BD:4B:B7:61:5F:84:39:73:12:CA:C6:30:D7:5D:77:DC:76
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: AA2829C9D5C8CB90A776CA580D3D36833AF07B
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa
Signing time: Wed 29 Jan 2025 07:00:02 +0000
ROA not before: Wed 29 Jan 2025 06:55:02 +0000
ROA not after: Wed 28 Jan 2026 07:00:02 +0000
asID: 38526
IP address blocks: 2405:3740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
aa:28:29:c9:d5:c8:cb:90:a7:76:ca:58:0d:3d:36:83:3a:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Jan 29 06:55:02 2025 GMT
Not After : Jan 28 07:00:02 2026 GMT
Subject: CN=A72989BD4BB7615F84397312CAC630D75D77DC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:f4:cb:17:e0:16:7d:5f:ad:44:10:17:86:
6a:b5:73:fc:5f:22:41:70:aa:47:ff:66:1d:35:75:
0d:42:db:b7:ee:4b:d2:93:ac:ba:21:af:e4:1d:be:
96:ac:7c:e5:db:83:58:c1:84:0c:1d:eb:45:17:c7:
b5:54:d4:a8:97:6e:83:fa:8f:37:84:fe:38:31:37:
e4:f8:53:8e:aa:02:f1:bb:8b:d0:e6:2f:f3:7d:38:
18:fd:c2:ca:5f:8d:b1:3c:ba:4d:d6:ce:1c:0a:73:
49:a6:65:f8:0e:5d:1d:62:1b:5b:89:6b:db:40:3c:
08:58:a4:78:5f:bb:9c:1a:0e:20:e2:27:6a:c7:91:
b7:08:42:51:8f:5a:16:17:c7:c4:4c:54:3c:f2:a0:
c5:79:52:c8:26:98:45:6b:f9:4e:ef:4c:95:68:11:
53:51:3a:64:8e:41:ad:84:c3:96:f7:1a:81:48:b2:
bc:55:32:ef:88:fb:a9:b8:d7:e5:97:78:fe:ea:31:
da:be:b1:33:70:5e:a9:c4:ed:17:d5:86:d3:11:64:
00:90:07:41:e0:38:14:49:a6:60:21:43:31:bc:7a:
8c:81:15:fb:05:fb:41:d4:f9:a2:ce:ee:80:fc:c9:
0a:62:26:c9:de:54:ee:cd:4f:12:61:11:97:9a:66:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:89:BD:4B:B7:61:5F:84:39:73:12:CA:C6:30:D7:5D:77:DC:76
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740::/32
Signature Algorithm: sha256WithRSAEncryption
df:d4:65:5c:bb:8a:34:69:dc:58:a9:25:90:f2:5e:c1:cc:e6:
74:fd:1d:73:67:13:92:83:aa:24:01:a0:1e:1b:cc:be:a4:42:
15:28:d1:42:0d:7a:dd:10:5d:27:13:08:ac:1b:34:ba:22:74:
6e:3a:66:00:19:e9:44:97:2a:8f:57:43:ce:ea:84:ca:0a:43:
f2:ea:40:0c:09:e3:c3:ca:9a:f1:5a:79:d7:dc:2c:1d:c3:7a:
5b:44:f7:7a:ef:6e:e8:18:06:08:b0:4b:60:e9:57:c7:a5:d5:
e9:32:08:d2:3a:48:8f:c8:4a:92:70:42:29:f5:19:a8:31:98:
94:92:9b:67:1c:cf:c0:ad:c2:13:48:2b:fa:24:bb:40:d1:9f:
10:70:12:85:fd:d6:e8:71:3d:40:ac:d0:e0:5b:23:a7:0d:76:
19:b1:f2:c4:b0:28:5f:55:87:e6:e2:54:8d:8d:fb:f3:e0:d5:
7e:97:cc:df:1b:47:6a:06:05:5f:c5:d0:9c:a4:55:6a:33:97:
d2:90:24:6f:68:65:8b:71:03:72:5b:3c:7c:8f:e8:04:0c:99:
91:14:34:ab:bc:09:a2:18:2f:34:5e:3c:17:cc:95:2f:8c:8f:
f3:61:ec:88:6f:de:7b:31:ee:b5:db:8d:24:11:11:50:5f:e6:
63:ff:e9:f8
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUAKooKcnVyMuQp3bKWA09NoM68HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNTAxMjkwNjU1MDJaFw0yNjAxMjgwNzAwMDJaMDMxMTAvBgNV
BAMTKEE3Mjk4OUJENEJCNzYxNUY4NDM5NzMxMkNBQzYzMEQ3NUQ3N0RDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlfTLF+AWfV+tRBAXhmq1c/xf
IkFwqkf/Zh01dQ1C27fuS9KTrLohr+QdvpasfOXbg1jBhAwd60UXx7VU1KiXboP6
jzeE/jgxN+T4U46qAvG7i9DmL/N9OBj9wspfjbE8uk3WzhwKc0mmZfgOXR1iG1uJ
a9tAPAhYpHhfu5waDiDiJ2rHkbcIQlGPWhYXx8RMVDzyoMV5UsgmmEVr+U7vTJVo
EVNROmSOQa2Ew5b3GoFIsrxVMu+I+6m41+WXeP7qMdq+sTNwXqnE7RfVhtMRZACQ
B0HgOBRJpmAhQzG8eoyBFfsF+0HU+aLO7oD8yQpiJsneVO7NTxJhEZeaZkSDAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUpymJvUu3YV+EOXMSysYw11133HYwHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMzMzgzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBTdAMA0GCSqGSIb3
DQEBCwUAA4IBAQDf1GVcu4o0adxYqSWQ8l7BzOZ0/R1zZxOSg6okAaAeG8y+pEIV
KNFCDXrdEF0nEwisGzS6InRuOmYAGelElyqPV0PO6oTKCkPy6kAMCePDyprxWnnX
3Cwdw3pbRPd6727oGAYIsEtg6VfHpdXpMgjSOkiPyEqScEIp9RmoMZiUkptnHM/A
rcITSCv6JLtA0Z8QcBKF/dbocT1ArNDgWyOnDXYZsfLEsChfVYfm4lSNjfvz4NV+
l8zfG0dqBgVfxdCcpFVqM5fSkCRvaGWLcQNyWzx8j+gEDJmRFDSrvAmiGC80XjwX
zJUvjI/zYeyIb957Me61240kERFQX+Zj/+n4
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:22 2025 by rpki-client