Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
File: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (raw, json)
Hash identifier: hKuamBAx77CwO86y1A7xDVYWjcy9qi6pO1mapMzXVQk=
Subject key identifier: FF:8E:93:B4:7A:BA:14:7C:6C:67:DB:06:68:3A:EE:98:0C:C0:72:FF
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 260E1080195B7CD948A4A7C003B5542D2A6B5063
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
Signing time: Mon 16 Dec 2024 15:00:00 +0000
ROA not before: Mon 16 Dec 2024 14:55:00 +0000
ROA not after: Mon 15 Dec 2025 15:00:00 +0000
asID: 132649
IP address blocks: 103.24.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0e:10:80:19:5b:7c:d9:48:a4:a7:c0:03:b5:54:2d:2a:6b:50:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Dec 16 14:55:00 2024 GMT
Not After : Dec 15 15:00:00 2025 GMT
Subject: CN=FF8E93B47ABA147C6C67DB06683AEE980CC072FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:03:7c:05:17:7b:3c:84:27:ab:0b:1c:53:
9f:e3:c5:fe:7e:a5:79:5c:e9:5b:8b:86:04:b0:da:
1e:d8:0b:2f:72:1e:13:e1:cd:cf:15:7f:55:57:a2:
97:3b:7e:05:b3:b7:6d:75:a2:4a:ef:df:25:92:86:
3e:98:7e:a8:02:fa:4e:d8:de:13:78:ab:93:1d:02:
f3:d6:9c:93:9d:96:c3:5a:2e:9f:14:14:b4:a9:81:
5c:8b:41:a6:1c:53:82:15:e0:b8:c3:a5:8b:49:a8:
a2:0c:95:c6:f0:46:c8:e9:26:b5:86:32:d1:05:3c:
61:2c:f6:57:eb:2a:93:0f:21:19:83:e7:d1:66:48:
0d:de:37:9d:70:15:60:25:9a:a4:d7:64:f3:5f:79:
8e:a9:ca:78:01:11:be:ee:45:de:eb:f3:e3:62:e2:
e2:27:dc:99:47:f4:55:9d:a0:3f:c0:ea:ca:32:8b:
bd:92:58:c9:3c:c0:e5:3c:7d:14:86:e5:41:79:03:
6a:9e:8b:e2:18:21:58:38:f8:7b:c2:94:1e:53:3b:
0b:2a:45:83:2f:30:7c:31:6d:76:86:4c:3a:9c:a7:
bf:f4:1a:3f:b9:95:58:b5:2d:89:e1:71:55:c7:dc:
44:ff:5a:3d:e3:7b:1a:5f:c2:4e:65:c6:49:99:22:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:93:B4:7A:BA:14:7C:6C:67:DB:06:68:3A:EE:98:0C:C0:72:FF
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:e3:a6:c2:b1:22:03:6e:70:6e:1e:e1:a5:8d:31:be:4d:e1:
9c:f3:09:45:a0:02:12:7f:41:41:79:7f:08:35:2e:64:8d:62:
0f:92:76:16:85:5a:bd:de:65:e1:c8:be:62:46:e6:45:9a:ee:
31:c8:02:7d:be:11:25:f4:7c:2e:45:ee:44:56:23:af:bc:e9:
91:e9:a1:94:29:b5:6e:90:18:9a:85:eb:02:23:95:10:fb:05:
ba:2c:89:4b:5e:2c:3f:0c:f1:8e:20:3e:5e:b1:d4:38:04:03:
4a:c8:c7:a8:78:d8:4c:9d:a2:71:b3:03:ba:21:04:86:35:91:
bb:a8:8d:fd:33:a4:95:1c:38:0b:1c:8b:f0:a4:13:91:5f:d1:
73:96:29:eb:4c:8f:11:75:a2:35:fc:b3:53:23:08:ce:7c:bd:
84:56:24:d6:02:3b:cd:8b:dc:3b:46:13:0f:24:bf:23:a9:0f:
75:c8:2a:8d:bc:b8:21:45:4b:35:31:2b:51:31:fc:f6:e6:1d:
02:88:9a:76:04:5f:d4:52:58:ba:56:f1:a1:10:5b:23:81:5e:
d7:1e:68:4f:6d:82:7f:cd:15:42:d9:8f:c3:5a:40:8a:3e:a5:
c6:c9:ec:2c:ba:50:91:76:3f:e7:ec:14:fa:34:08:45:01:82:
c4:2c:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:32 2025 by rpki-client