Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa
File: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=
Subject key identifier: C8:81:B8:D0:0D:6E:59:B9:8C:68:FE:EC:1F:50:42:53:EC:33:6A:5E
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 249110042E70D92CC273A1E26A662645F5D6B20C
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa
Signing time: Sun 16 Feb 2025 14:21:05 +0000
ROA not before: Sun 16 Feb 2025 14:16:05 +0000
ROA not after: Sun 15 Feb 2026 14:21:05 +0000
asID: 131705
IP address blocks: 2406:5c40:7777::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:91:10:04:2e:70:d9:2c:c2:73:a1:e2:6a:66:26:45:f5:d6:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Feb 16 14:16:05 2025 GMT
Not After : Feb 15 14:21:05 2026 GMT
Subject: CN=C881B8D00D6E59B98C68FEEC1F504253EC336A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:92:09:74:1e:59:aa:48:c3:4e:16:ed:7d:
9c:0e:2d:c9:b0:a1:7b:15:37:60:f0:e5:8a:05:1f:
1a:4a:b2:ba:73:c8:da:08:1a:43:5e:d0:ba:f4:fd:
5e:78:a7:5e:ab:ba:73:bd:c8:dc:c5:a4:fc:98:ae:
f5:df:7a:c7:40:11:d1:3a:b8:f1:c9:96:65:8d:70:
5e:52:75:08:e4:42:67:32:92:30:e2:11:e4:9c:e9:
9a:99:c8:a5:e9:b8:5c:b7:33:93:de:06:6a:c5:a4:
fd:bf:39:97:4c:c0:91:a0:7f:c5:f4:5b:f1:1c:d0:
f4:b0:c5:58:e2:c6:08:82:1e:9f:ae:7a:71:0e:7f:
8a:93:51:cf:15:c6:ef:56:2b:15:bf:67:49:51:3d:
3e:45:5c:ea:04:29:d5:21:5e:df:3a:5d:14:c3:28:
da:f4:77:c5:bc:7f:a1:26:80:cb:46:87:59:d7:42:
4d:90:af:26:df:6a:ad:d3:ac:a5:b9:9d:0e:4e:ac:
8d:1b:e9:ad:cd:08:97:79:43:d2:19:db:f4:f5:cf:
0a:84:ba:e8:c7:b6:34:71:67:65:6c:39:24:7d:e3:
24:b7:81:b1:3a:c0:a6:3e:6c:1e:d6:bc:39:50:77:
47:30:05:f9:39:16:e3:2e:15:8a:00:a7:c6:2d:62:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:B8:D0:0D:6E:59:B9:8C:68:FE:EC:1F:50:42:53:EC:33:6A:5E
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5c40:7777::/48
Signature Algorithm: sha256WithRSAEncryption
82:51:94:1f:9f:79:a8:ec:cc:cb:64:80:b2:8f:ad:ac:61:b2:
1a:7f:bd:ea:ed:d1:51:50:9f:8d:e8:0f:67:cd:8f:67:5e:12:
f4:8f:c8:f3:a5:e3:98:20:b6:26:08:7d:65:98:49:ac:9e:fb:
7f:c3:d4:30:b2:56:88:a6:ac:77:94:99:7e:dd:bc:65:44:93:
1f:ea:74:b1:8a:4b:99:89:3f:c3:ec:69:00:b1:39:b9:39:e2:
4d:bd:81:94:c5:33:e1:30:37:0e:d7:b2:d5:05:5b:c5:a4:a7:
ab:c0:a8:24:12:9c:b3:b0:86:43:76:75:f6:25:f3:b4:9e:26:
5e:5d:fd:f0:af:ad:4a:66:8b:85:11:0d:de:f8:ea:f7:64:b1:
10:0e:ee:93:7f:ab:09:5a:e6:5f:e4:d0:21:1b:bf:56:fb:2a:
7e:04:11:f7:fa:bd:0b:12:f0:cc:61:ae:8c:f0:83:f5:56:94:
bc:be:a0:71:fb:9e:45:5c:1c:11:22:e4:dc:1c:c7:aa:6e:7d:
b9:0b:50:0e:e5:c9:f0:55:69:14:70:e5:81:c9:84:df:07:96:
f6:74:04:e8:7f:7c:16:6d:2c:b0:45:fb:b2:61:19:76:8a:23:
61:ae:17:6e:59:ee:2f:0e:e9:d4:65:a6:a1:95:3e:bd:8c:4a:
a8:15:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:26 2025 by rpki-client