Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
File: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=
Subject key identifier: 16:A5:1F:1D:D6:18:B8:7C:5F:BB:FB:34:27:B8:37:9C:FE:FE:53:A7
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 02A07DD4754F5DF0EC7CB352CB23AF13F72E7B0E
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
Signing time: Sun 16 Feb 2025 14:21:35 +0000
ROA not before: Sun 16 Feb 2025 14:16:35 +0000
ROA not after: Sun 15 Feb 2026 14:21:35 +0000
asID: 131705
IP address blocks: 2406:5c40:8888::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a0:7d:d4:75:4f:5d:f0:ec:7c:b3:52:cb:23:af:13:f7:2e:7b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Feb 16 14:16:35 2025 GMT
Not After : Feb 15 14:21:35 2026 GMT
Subject: CN=16A51F1DD618B87C5FBBFB3427B8379CFEFE53A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:85:8a:b5:92:93:48:33:7f:f2:53:2e:0f:
24:3d:3d:c0:b2:11:5c:1f:8c:37:dd:b1:68:70:99:
7f:47:bb:3b:b2:eb:0b:35:92:2b:23:26:34:35:4f:
52:39:47:1c:ad:6b:b7:b8:89:18:74:c7:68:14:ca:
b0:f2:66:46:41:fd:96:2f:9c:c6:eb:03:90:21:29:
1e:fa:05:da:93:91:cc:71:6c:e2:aa:5e:4c:07:5c:
c4:08:e6:d3:f9:c0:af:ea:84:8b:c4:5f:ca:7a:29:
60:61:cd:b1:ee:aa:66:b3:60:37:43:86:38:6d:64:
7b:e0:7a:45:1d:7b:c6:cb:c0:98:ae:d6:b0:78:5b:
9e:29:b5:5b:8d:3f:e0:e6:9a:bf:5e:32:93:81:f1:
4e:f4:8d:d5:e9:4f:36:d9:a4:7b:bb:13:c8:1d:10:
38:d0:fb:34:c5:13:30:7f:00:cd:3d:14:fd:60:6a:
7f:fb:48:86:c6:a6:69:6c:57:dc:47:c7:1e:cf:1f:
46:fc:1b:9f:1a:46:28:e3:de:86:98:c9:73:af:68:
e4:22:76:a9:67:e1:6b:da:87:f4:a5:76:fd:59:8d:
a7:2a:22:9f:aa:5f:2c:77:ea:0e:e5:ca:a4:82:fc:
09:d0:df:6b:e8:40:6d:cc:f7:11:7a:d5:0d:4f:52:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:1F:1D:D6:18:B8:7C:5F:BB:FB:34:27:B8:37:9C:FE:FE:53:A7
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5c40:8888::/48
Signature Algorithm: sha256WithRSAEncryption
72:e2:10:ae:e3:0e:0a:e0:fc:31:f3:f1:d4:2c:83:79:2e:70:
7b:24:55:fb:48:9a:b6:17:81:8d:b5:69:51:48:c4:7d:4e:60:
09:f1:86:6a:6b:de:2f:2b:69:ae:1a:64:df:f4:96:1c:b9:56:
55:7e:81:df:06:26:82:18:41:f5:d0:54:b8:c0:c4:c1:0c:77:
97:a8:45:42:d7:43:30:bd:c7:85:d2:5d:2a:7d:d9:42:be:6b:
5c:09:07:5d:eb:a6:32:7e:43:da:77:11:03:69:f6:67:5d:e7:
3c:39:c2:e0:25:13:c2:78:38:33:05:3b:21:f9:45:3b:13:83:
bb:cc:dd:7e:af:ba:91:48:bd:11:8d:1e:db:16:5a:1b:ad:02:
52:39:b6:7f:f8:ea:9a:08:da:f5:0e:e7:b2:d8:0e:e2:bf:bb:
59:b6:04:26:89:5f:58:54:ba:8d:60:33:15:a1:bf:5f:44:10:
d6:a1:f2:2c:ae:48:f9:e5:be:4e:ea:31:1c:4a:2f:29:3e:65:
82:a5:05:46:52:71:ab:67:f4:33:7f:44:73:b6:23:b1:a9:ed:
a8:69:5b:43:52:bd:9c:43:09:fc:3c:2e:cb:81:99:bd:e7:c5:
63:59:39:e7:69:94:be:f4:f7:e4:4f:10:cf:f1:e7:1e:44:06:
2e:df:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:28 2025 by rpki-client