Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa
File: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=
Subject key identifier: D2:D8:B4:42:9D:72:51:1D:2B:C8:AA:DE:54:11:21:67:90:59:3C:5A
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 694B7BC42C2D97422D71AA621AAAE3A6C60D04F4
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa
Signing time: Sun 16 Feb 2025 14:22:24 +0000
ROA not before: Sun 16 Feb 2025 14:17:24 +0000
ROA not after: Sun 15 Feb 2026 14:22:24 +0000
asID: 131705
IP address blocks: 2406:5c40:9999::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4b:7b:c4:2c:2d:97:42:2d:71:aa:62:1a:aa:e3:a6:c6:0d:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Feb 16 14:17:24 2025 GMT
Not After : Feb 15 14:22:24 2026 GMT
Subject: CN=D2D8B4429D72511D2BC8AADE5411216790593C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:d2:44:ad:ff:2f:44:b0:ba:2d:6c:9b:8f:
2f:4e:13:21:0a:1f:29:66:20:db:69:9c:f5:d2:77:
6b:9b:54:c3:46:7d:64:2e:77:de:dd:e9:33:0f:2c:
c1:40:54:2f:06:14:b8:d2:91:d4:03:2b:1e:83:3b:
5d:a8:99:7b:f6:4b:93:d7:b9:89:92:ec:83:c8:18:
5b:86:9b:4d:00:87:60:a9:c0:c8:8a:07:67:a6:07:
b5:d5:c9:10:f9:02:4e:ff:2d:95:0d:15:55:de:cc:
47:4c:eb:99:9d:d1:a6:95:6c:96:6b:5d:5c:02:e4:
e3:ff:4b:d2:eb:53:d5:4a:23:82:f8:5c:57:da:89:
92:9a:ea:e9:b4:c8:af:3c:1f:27:6f:49:93:b6:8c:
31:da:e7:df:e8:0b:55:56:21:d8:d7:74:4c:2a:30:
87:ba:b5:7b:ff:58:03:ed:c3:ed:44:9c:8c:8c:da:
72:12:c5:b7:7d:08:a0:48:3e:5d:b2:b8:84:f8:f1:
81:f4:ef:ee:03:75:1b:75:ef:3e:5c:fc:21:51:e2:
58:9f:a8:c9:ff:98:9d:3c:6f:92:c7:f9:92:78:a2:
d5:72:af:fe:e6:5f:81:ac:69:35:7d:86:b2:4c:c3:
9e:44:71:c4:0a:2f:1a:43:13:41:43:9d:81:42:28:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:B4:42:9D:72:51:1D:2B:C8:AA:DE:54:11:21:67:90:59:3C:5A
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5c40:9999::/48
Signature Algorithm: sha256WithRSAEncryption
15:6d:ec:0d:de:dd:2d:e4:c1:18:82:5c:61:0e:43:a8:52:33:
59:c7:88:f3:2d:e5:27:e1:b6:d2:59:0a:c0:2f:25:70:ce:c4:
28:46:5f:cd:2d:f5:f6:6d:b2:05:2b:e4:32:d6:e1:8b:a2:7a:
49:d2:71:1c:29:83:f1:d6:ee:ce:06:d6:a3:16:77:7d:6b:42:
f5:b5:7d:87:3d:9e:2b:ec:41:3f:56:2f:30:bb:23:ea:f1:3d:
e1:fe:51:41:3b:d9:60:b9:0c:0c:75:65:10:6b:06:f1:04:1f:
3f:a7:50:c9:2b:ca:6d:a3:5c:58:bd:f5:b1:cb:53:fd:b0:d1:
99:66:c6:0d:6d:6e:8d:5d:1e:60:c7:bf:fa:5d:78:3c:84:1e:
98:9b:29:0f:21:56:b4:fb:b3:16:7e:ae:9c:d6:6e:6a:8a:c7:
27:0d:e0:22:5e:e7:09:eb:77:fd:2a:76:a2:f7:06:41:0e:d3:
e6:fa:34:b4:f1:c3:16:94:5f:3e:79:c0:19:07:98:e0:8f:c6:
b1:02:eb:23:52:80:4b:55:ea:98:16:3a:63:4e:f3:cd:6e:e1:
84:1f:e9:35:52:ee:9d:9e:d3:3f:05:70:5b:a0:eb:62:c6:93:
47:de:46:99:c9:3c:d9:a6:0d:0f:88:65:6c:cf:d9:49:0e:1a:
ec:7f:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:25 2025 by rpki-client