Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa
File: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (raw, json)
Hash identifier: qln4Vk3LqPuSEAyfEFKIbrl7uM6MoBml3amcry/eX+k=
Subject key identifier: AF:C6:11:7C:D5:CF:CB:0B:85:C3:8D:6A:36:F3:23:08:78:84:A0:5B
Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Certificate serial: 78E3DCA16ABFA6A5AB162DA5400D6E15BD90012F
Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa
Signing time: Fri 10 May 2024 08:00:37 +0000
ROA not before: Fri 10 May 2024 07:55:37 +0000
ROA not after: Fri 09 May 2025 08:00:37 +0000
asID: 139988
IP address blocks: 2405:ce40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e3:dc:a1:6a:bf:a6:a5:ab:16:2d:a5:40:0d:6e:15:bd:90:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Validity
Not Before: May 10 07:55:37 2024 GMT
Not After : May 9 08:00:37 2025 GMT
Subject: CN=AFC6117CD5CFCB0B85C38D6A36F323087884A05B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:a0:ea:42:6b:03:dd:47:12:51:f4:82:85:
72:a4:1a:24:b3:81:e1:60:ab:fd:c6:24:12:94:cc:
7e:15:5d:19:98:85:f5:b6:cc:1d:06:10:ad:8f:ab:
55:71:38:1e:37:70:43:54:3a:58:22:28:ff:72:86:
cc:1e:4e:d1:58:c7:0f:69:32:61:1a:9a:54:4e:68:
5c:30:c6:d5:a8:76:27:a5:03:9e:6c:0d:76:3e:fb:
d3:9a:d0:b5:4f:3e:39:2b:e3:b2:b7:73:0c:65:34:
e2:43:e9:ad:44:76:a8:d3:09:a9:d7:18:c9:69:1f:
52:2f:a2:5a:b4:4e:32:32:6b:4c:a1:a9:85:dc:89:
04:76:9e:32:e5:31:f9:dc:6d:14:d4:b2:25:6c:37:
bd:86:69:45:8d:9e:d8:8a:ec:e0:6e:6a:01:ac:3a:
1d:3b:3e:c4:e3:9e:1a:b1:d9:82:16:11:cb:31:f9:
da:0c:9f:a3:81:ae:af:3d:d7:a5:ef:91:af:f9:d5:
9d:66:af:96:63:8b:22:d4:39:fc:bb:2b:16:02:a5:
5a:cf:4a:50:78:1b:db:b1:9d:04:f2:c1:7c:fc:d8:
07:10:33:51:bc:5a:45:b1:dd:fe:f2:ee:87:65:35:
19:fa:97:28:b7:e8:31:c9:e7:d9:17:38:57:59:db:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:11:7C:D5:CF:CB:0B:85:C3:8D:6A:36:F3:23:08:78:84:A0:5B
X509v3 Authority Key Identifier:
keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:ce40::/32
Signature Algorithm: sha256WithRSAEncryption
39:63:48:2b:5b:f0:d4:a5:c2:53:96:eb:ee:f4:00:a6:0a:ec:
73:65:4f:43:b4:5b:3b:08:c0:28:6f:29:4c:0f:26:a1:3d:7a:
13:16:ec:ec:fb:6f:62:72:4b:43:80:64:74:44:82:24:0e:aa:
65:d2:3a:6f:1b:b3:f4:3e:a9:b3:79:29:fd:16:e7:9b:ba:51:
14:8c:e5:c1:09:69:57:37:9b:26:fb:74:31:75:97:f3:f6:b5:
63:ef:3f:b6:8f:b9:9c:1b:e3:82:57:74:07:4c:b5:52:c5:44:
a4:58:fc:1a:47:88:82:5c:8e:68:15:9a:5e:36:25:df:43:b4:
a8:30:9d:6e:ea:b4:19:1d:44:b7:dc:86:03:54:1e:35:6b:b7:
82:31:15:0f:28:5c:4e:8a:73:8d:15:ac:51:2f:f3:db:a4:28:
2c:cc:64:c9:52:b7:f2:92:f3:d3:90:7c:ed:f6:b2:94:ec:9d:
24:64:f1:94:e3:56:13:58:08:a8:1c:27:8f:c1:b2:9a:67:a4:
1b:c8:9f:0c:38:cc:83:ef:85:9d:eb:2c:a4:75:33:ca:b3:f9:
94:a5:10:9e:4a:fe:24:73:09:f5:ca:02:67:fe:28:d8:75:a1:
81:55:ec:5b:e4:8f:e2:f4:91:0f:49:d3:bd:a5:62:f2:af:92:
6b:cb:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:42 2025 by rpki-client