Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa
File: 323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier: qM3g9gtXBC79FBBqb90tUUPvTrRw3yg3KCexEXaBEhs=
Subject key identifier: 88:A1:94:08:C6:99:98:7C:45:E7:0C:AF:20:13:EA:1C:EA:58:38:2B
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 25415EC1CE3696FA0013CEAA24C9D8BD0D4B207E
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa
Signing time: Thu 09 May 2024 04:00:57 +0000
ROA not before: Thu 09 May 2024 03:55:57 +0000
ROA not after: Thu 08 May 2025 04:00:57 +0000
asID: 55701
IP address blocks: 2405:b900:25::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:41:5e:c1:ce:36:96:fa:00:13:ce:aa:24:c9:d8:bd:0d:4b:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: May 9 03:55:57 2024 GMT
Not After : May 8 04:00:57 2025 GMT
Subject: CN=88A19408C699987C45E70CAF2013EA1CEA58382B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:e3:71:b2:aa:c6:08:3d:bd:08:d6:b2:d4:
c6:06:eb:14:3b:2a:bb:f2:23:75:59:e9:fc:83:55:
10:ca:e4:f7:7d:57:34:69:b2:0b:fc:21:44:6b:df:
f2:3b:4f:a6:ac:75:19:13:f2:7f:9f:15:73:21:18:
e8:94:e6:28:4a:39:60:9e:d8:d7:38:8d:70:e8:a5:
84:83:bf:f8:1a:b9:64:7c:ac:59:cd:72:d5:33:fe:
46:9f:00:0f:1a:89:54:73:14:01:48:65:3f:fe:b6:
7c:9c:5e:97:94:bf:ef:80:d5:cd:9e:6a:8d:cb:51:
57:6a:f4:64:a9:6a:b8:46:a2:f3:f2:ec:fb:60:c7:
5f:76:76:a7:4d:b7:50:15:27:0e:86:4c:73:8c:0e:
c0:4a:b8:76:1b:08:cd:d5:3f:37:4d:60:75:ad:08:
c2:43:32:9c:83:b8:d6:1a:83:45:20:31:38:b0:be:
05:4a:b1:59:e6:88:2b:14:49:a2:c5:b4:1b:b7:7a:
8f:a5:75:3d:03:98:b6:ec:8b:df:c1:6e:11:cb:fd:
17:92:3d:4e:fc:0e:42:0b:27:94:a6:86:01:21:8f:
17:52:4b:77:75:f5:6c:56:ad:2d:1f:1a:49:6c:a8:
e2:78:87:09:a5:60:6f:56:d9:23:f7:47:16:29:fb:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:94:08:C6:99:98:7C:45:E7:0C:AF:20:13:EA:1C:EA:58:38:2B
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b900:25::/48
Signature Algorithm: sha256WithRSAEncryption
8e:2b:5d:23:1d:80:ec:0a:d3:ab:4b:7e:23:1f:a6:8a:ba:d3:
fc:f4:0c:63:f4:e1:0d:0b:e8:34:e2:5b:e8:e4:f8:8a:ec:43:
1c:25:d1:11:74:72:ee:17:1a:fc:f2:0d:ac:b5:db:ad:de:94:
d2:04:47:46:78:fe:67:d4:7d:64:b2:fd:1d:c1:4d:7a:7a:a9:
49:3e:11:50:04:20:aa:2e:13:f8:b6:35:af:71:c5:d1:b7:02:
7e:33:12:d8:ed:86:50:65:12:8b:a6:9f:59:ed:a6:90:c1:c3:
7c:17:7e:6c:cc:cc:99:bb:28:50:70:89:8c:69:a0:12:7e:d3:
c4:ba:90:29:e5:ee:51:dd:30:6e:2d:08:d2:16:06:b2:23:13:
cb:6a:9f:b8:12:c7:de:9f:b7:7f:c4:65:5e:c0:1b:5f:3b:96:
0a:df:59:d2:7b:4b:f7:49:24:56:79:18:ff:f1:fb:91:c0:31:
cb:29:0a:13:19:54:5f:ab:77:2c:48:36:dc:e1:47:41:9b:b4:
17:d6:46:d0:64:94:8c:69:79:f4:73:db:d0:c4:f4:6c:7f:20:
a2:23:c6:ee:f0:28:71:22:fc:f8:74:d1:bd:9a:bf:7b:e2:73:
0b:da:f8:cb:eb:9c:f9:d8:97:e7:c3:41:df:13:a5:6f:22:1a:
c3:ff:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:25:43 2025 by rpki-client on console.sobornost.net