Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
File: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=
Subject key identifier: 3E:6A:F9:37:BB:F6:13:3C:7E:C4:A4:06:71:C6:5B:AB:D7:17:B5:E2
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 65A8D359E0FAC3FDBA6F1C05B203EE57D97D174A
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
Signing time: Fri 28 Feb 2025 07:00:05 +0000
ROA not before: Fri 28 Feb 2025 06:55:05 +0000
ROA not after: Fri 27 Feb 2026 07:00:05 +0000
asID: 140443
IP address blocks: 103.168.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a8:d3:59:e0:fa:c3:fd:ba:6f:1c:05:b2:03:ee:57:d9:7d:17:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Feb 28 06:55:05 2025 GMT
Not After : Feb 27 07:00:05 2026 GMT
Subject: CN=3E6AF937BBF6133C7EC4A40671C65BABD717B5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:09:97:26:2d:cf:27:55:41:cc:2e:61:2e:
38:c4:52:51:e8:97:92:68:6a:3c:7b:97:fe:3e:11:
0d:99:c5:15:20:6a:72:b5:78:c9:31:3a:af:5c:d3:
31:a6:57:ec:c7:c0:c7:f6:45:f4:a2:39:83:57:ce:
1e:d6:af:60:08:98:51:44:fd:07:cb:2f:ef:83:97:
59:38:34:f9:1f:5b:db:80:3f:5e:60:80:e5:5f:e4:
04:60:c2:a3:45:e4:63:07:8d:e8:a5:42:0a:73:0f:
77:d4:f8:02:56:da:ff:bf:42:b0:cb:a2:3c:90:67:
bc:9a:7c:9c:c0:6f:34:48:53:68:33:52:6a:aa:e6:
9f:76:b0:ae:59:c5:64:05:fc:85:90:29:37:b9:d0:
0f:35:91:e9:4f:b4:d6:bb:c2:4a:6a:49:42:ba:15:
38:cc:75:7c:b1:6f:1c:b5:57:86:48:1e:96:8a:33:
03:55:9c:34:92:11:7a:51:42:3e:d8:80:e9:48:6b:
53:be:6d:3e:fa:fa:67:09:e8:4e:a0:4c:ea:4e:9e:
97:62:9e:5e:8b:9a:5e:54:42:e2:b8:db:df:dc:74:
46:3b:1c:44:95:33:00:07:e5:ea:64:27:67:30:bf:
0d:54:86:98:63:4f:5d:50:34:d3:42:cd:99:70:64:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:F9:37:BB:F6:13:3C:7E:C4:A4:06:71:C6:5B:AB:D7:17:B5:E2
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.146.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e1:9e:91:a3:12:ab:87:4f:b4:39:db:7d:b1:30:be:f7:30:
de:ce:98:5e:f0:9e:9c:38:06:06:c2:e8:9d:93:0f:11:45:53:
94:97:5f:6f:d1:96:91:a9:e0:b3:ee:98:75:58:bd:b4:5e:b6:
9b:82:29:21:12:e2:07:37:18:4a:f5:84:cb:c2:08:94:1d:2c:
ba:60:99:47:14:bc:27:fa:10:8e:46:37:58:70:7a:7e:f6:8e:
46:bd:ae:2e:ce:fa:df:d4:77:89:c1:89:78:08:fa:81:87:13:
16:9c:17:4a:e7:af:5f:54:20:76:c9:3c:2f:3f:80:f8:cd:3b:
68:7d:1b:df:cf:40:d2:ad:32:64:7f:fe:eb:17:bf:67:f2:4d:
00:d4:fc:41:25:f5:db:15:66:26:3c:ce:15:02:f1:a5:01:28:
85:ea:e3:24:28:31:bf:65:0c:47:16:e8:08:a2:fc:c0:28:5e:
3b:eb:66:71:62:13:de:5d:43:a9:8e:02:c1:b6:17:02:cb:4e:
02:bb:08:40:cb:cc:33:5b:42:12:62:6d:6c:fe:29:42:e2:5a:
1a:ac:79:de:a5:74:67:cb:70:f6:de:f2:8a:86:74:78:54:0c:
39:df:b1:e3:d9:42:00:ec:33:aa:60:57:23:e7:10:16:78:78:
52:1c:b2:de
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZajTWeD6w/26bxwFsgPuV9l9F0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC
NkVCNEQyNzAeFw0yNTAyMjgwNjU1MDVaFw0yNjAyMjcwNzAwMDVaMDMxMTAvBgNV
BAMTKDNFNkFGOTM3QkJGNjEzM0M3RUM0QTQwNjcxQzY1QkFCRDcxN0I1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSQmXJi3PJ1VBzC5hLjjEUlHo
l5Joajx7l/4+EQ2ZxRUganK1eMkxOq9c0zGmV+zHwMf2RfSiOYNXzh7Wr2AImFFE
/QfLL++Dl1k4NPkfW9uAP15ggOVf5ARgwqNF5GMHjeilQgpzD3fU+AJW2v+/QrDL
ojyQZ7yafJzAbzRIU2gzUmqq5p92sK5ZxWQF/IWQKTe50A81kelPtNa7wkpqSUK6
FTjMdXyxbxy1V4ZIHpaKMwNVnDSSEXpRQj7YgOlIa1O+bT76+mcJ6E6gTOpOnpdi
nl6Lml5UQuK429/cdEY7HESVMwAH5epkJ2cwvw1UhphjT11QNNNCzZlwZH1FAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPmr5N7v2Ezx+xKQGccZbq9cXteIwHwYDVR0j
BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2
REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC
NEQyNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i
YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJIwDQYJ
KoZIhvcNAQELBQADggEBAEjhnpGjEquHT7Q5232xML73MN7OmF7wnpw4BgbC6J2T
DxFFU5SXX2/RlpGp4LPumHVYvbRetpuCKSES4gc3GEr1hMvCCJQdLLpgmUcUvCf6
EI5GN1hwen72jka9ri7O+t/Ud4nBiXgI+oGHExacF0rnr19UIHbJPC8/gPjNO2h9
G9/PQNKtMmR//usXv2fyTQDU/EEl9dsVZiY8zhUC8aUBKIXq4yQoMb9lDEcW6Aii
/MAoXjvrZnFiE95dQ6mOAsG2FwLLTgK7CEDLzDNbQhJibWz+KULiWhqsed6ldGfL
cPbe8oqGdHhUDDnfsePZQgDsM6pgVyPnEBZ4eFIcst4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:11 2025 by rpki-client