Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
File: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier: ez2LC1r6bTj24Wy82rHkZPj1l/qpP3UX6fekdhBojt4=
Subject key identifier: 58:15:2D:45:77:25:C1:DD:49:C2:C2:D9:59:F8:10:FD:E3:36:7F:2B
Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial: 45833B7371ADE59800A8CB541CA52C58023B9673
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
Signing time: Thu 13 Jun 2024 17:00:00 +0000
ROA not before: Thu 13 Jun 2024 16:55:00 +0000
ROA not after: Thu 12 Jun 2025 17:00:00 +0000
asID: 150284
IP address blocks: 103.43.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:83:3b:73:71:ad:e5:98:00:a8:cb:54:1c:a5:2c:58:02:3b:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Validity
Not Before: Jun 13 16:55:00 2024 GMT
Not After : Jun 12 17:00:00 2025 GMT
Subject: CN=58152D457725C1DD49C2C2D959F810FDE3367F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:20:92:41:fe:38:fd:1e:88:1b:00:95:db:
33:40:3d:63:4a:81:3c:24:26:db:31:2b:3b:78:31:
20:2b:78:56:5f:36:0d:2e:7c:c7:ee:d2:6e:29:86:
fc:36:69:b2:c3:98:1a:ca:9f:4f:7c:86:3a:50:1b:
db:32:80:3f:3a:97:2d:1a:9f:20:68:08:25:65:bf:
45:40:b6:28:53:d2:94:59:5b:db:14:3f:b1:49:9b:
a6:ff:a0:ea:fe:4e:d3:26:28:fd:8f:a2:75:f8:5b:
4e:71:95:aa:a2:a8:24:9c:5d:af:71:51:b4:9f:69:
67:a8:9b:45:9d:4d:20:1d:af:29:14:47:77:7c:b1:
7b:34:10:99:7f:ce:f2:4d:f5:55:84:53:46:50:43:
86:be:a6:24:65:9e:50:f1:02:18:52:8a:53:88:77:
ba:b5:89:82:f4:2c:24:dc:4c:bc:13:fe:cc:19:da:
d5:02:f8:5f:b4:e3:fe:80:a4:93:2a:94:47:53:ea:
e0:f7:d6:77:69:d4:a3:a8:da:89:75:44:fc:ec:3d:
c7:37:33:88:67:76:7a:4c:c0:2f:06:71:c7:7c:3c:
2c:bc:4a:82:20:40:d3:64:cd:e8:0e:74:67:a0:c1:
b6:e8:68:59:b5:a1:ee:71:36:dd:bb:ee:62:82:7f:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:2D:45:77:25:C1:DD:49:C2:C2:D9:59:F8:10:FD:E3:36:7F:2B
X509v3 Authority Key Identifier:
keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9b:76:c4:10:cf:5b:76:ad:41:0e:aa:cf:51:32:ac:c5:87:
d6:b6:0b:ad:71:c3:39:a2:6b:47:9c:0c:ef:b3:46:2d:92:56:
0a:8c:82:7b:ac:d1:47:05:16:a7:e6:92:2c:de:df:b4:fd:21:
74:a3:c8:35:c1:e9:f6:0e:71:df:78:6f:be:9a:8b:a4:ad:1a:
18:b5:8d:02:2b:3f:b5:70:b3:a7:de:a9:80:a0:a7:8e:e3:32:
ed:8c:33:32:5d:99:83:64:97:e0:24:1e:75:1a:b8:3e:b6:de:
68:e7:8b:d0:36:ca:69:5d:d1:05:b6:54:fb:3e:c8:0d:3a:34:
2e:8f:79:4f:c1:12:7b:df:f2:86:ce:55:17:55:6c:a2:a9:99:
e9:09:08:01:98:6a:a8:dd:fe:56:3e:53:47:38:4a:41:1b:8d:
0e:d3:71:55:7e:4e:13:05:61:5b:46:e5:22:b8:5e:fe:06:9e:
36:e3:37:99:17:f1:ad:fb:c4:b9:23:fb:53:a4:da:9b:fb:ba:
3a:12:d8:bb:cb:46:f4:33:e2:81:5e:4b:8b:48:d4:92:06:c1:
7e:a1:df:42:0f:2f:51:0d:bd:62:9b:b1:16:e8:01:70:28:60:
9d:ac:36:4a:de:d1:5f:a8:14:68:ab:74:5e:26:14:7d:9e:53:
d0:e8:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:25 2025 by rpki-client