Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
File: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=
Subject key identifier: D3:09:2E:EE:A5:AC:13:B0:AC:01:D7:7A:65:B3:22:62:69:A9:2D:F0
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 16EEAC83CF0E51FD008454D6BBD9F73BC1E6B9AD
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
Signing time: Fri 28 Feb 2025 06:00:00 +0000
ROA not before: Fri 28 Feb 2025 05:55:00 +0000
ROA not after: Fri 27 Feb 2026 06:00:00 +0000
asID: 140443
IP address blocks: 103.168.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ee:ac:83:cf:0e:51:fd:00:84:54:d6:bb:d9:f7:3b:c1:e6:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Feb 28 05:55:00 2025 GMT
Not After : Feb 27 06:00:00 2026 GMT
Subject: CN=D3092EEEA5AC13B0AC01D77A65B3226269A92DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:d2:03:26:d2:90:c2:00:a5:d3:57:d9:98:
5a:48:8d:20:08:ef:95:08:53:ab:4b:80:3d:7e:22:
ef:a1:ca:d3:96:eb:44:7b:66:73:8f:5a:1d:18:17:
bf:75:d4:72:40:d2:27:e9:01:fe:ca:ea:bb:44:c6:
1f:51:fc:01:4d:14:cf:57:e6:38:e1:6a:59:63:1e:
0f:61:4f:fb:ce:ac:df:c4:97:6b:33:39:f7:90:fd:
7d:c3:c8:41:9f:48:e6:5f:09:2a:51:58:3c:f1:dc:
ed:1c:52:cb:d3:9f:83:48:bd:f8:1b:c1:60:7a:63:
d4:09:a3:de:0e:ac:5c:0c:be:a9:44:34:4c:a6:d9:
6a:3f:43:e5:e2:d5:1b:65:ea:e1:21:76:cc:95:60:
6e:6e:5c:45:ba:13:a9:c2:69:eb:e6:12:70:2d:fb:
15:d7:d0:61:49:a2:36:22:b6:34:50:c0:52:6e:35:
f4:74:82:6f:d1:85:26:05:1b:81:e2:36:d7:99:0d:
2e:c2:ec:3b:07:5f:5b:4e:66:8a:70:d3:4b:fe:29:
88:11:c2:74:71:f2:46:7f:52:e8:0a:af:55:13:d1:
ed:ae:b8:91:0e:ae:86:ce:16:43:4d:84:db:f2:0b:
47:1c:38:d3:f5:fd:de:b4:ef:b5:fb:60:fc:d9:ef:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:2E:EE:A5:AC:13:B0:AC:01:D7:7A:65:B3:22:62:69:A9:2D:F0
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.146.0/23
Signature Algorithm: sha256WithRSAEncryption
15:92:6b:7d:2a:81:60:3d:f5:9a:93:e1:d4:ec:98:76:dd:4e:
34:49:c7:4b:f5:a4:86:b6:ff:f5:9c:50:ca:68:35:6e:ab:e9:
55:df:b3:9e:6c:39:68:41:16:30:59:00:61:e3:84:70:0e:74:
85:11:c7:2f:74:cd:35:d7:4f:ee:ce:3b:c7:53:c4:3c:4c:d1:
11:2c:ce:8e:e9:fe:16:ac:ff:df:82:07:75:1d:d2:93:30:d2:
f1:77:9b:5f:b0:a3:e4:2a:1d:5b:18:68:f6:76:ed:95:74:98:
96:38:70:28:ab:09:76:e6:77:b7:f8:bc:c6:eb:e5:7c:00:68:
0f:84:3d:86:73:d0:9c:76:bf:7d:04:f6:a8:41:b7:0f:1b:fb:
0e:7e:1a:b1:e8:d4:84:b3:90:13:c7:15:2e:10:a6:c0:a1:55:
56:9f:d8:22:ec:39:80:1d:68:e7:18:64:68:5c:35:50:f3:4f:
52:0a:c2:3d:56:a8:00:ef:73:ec:72:82:e9:85:02:c8:20:7b:
38:fc:23:e5:1f:65:68:9c:2f:1c:76:0c:d4:21:9b:bd:33:3d:
4f:c0:dc:c2:cb:b1:b8:42:77:95:c2:5a:f9:3b:04:67:10:6b:
d2:3f:ff:3f:85:79:91:e8:43:ee:80:7e:a3:67:bb:bb:a2:73:
87:31:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:00 2025 by rpki-client