Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa
File: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (raw, json)
Hash identifier: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=
Subject key identifier: A4:95:21:47:32:14:AB:B7:63:85:C4:D2:5A:DB:8A:71:9E:92:C1:B1
Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial: 199B8926F32A0FA10DE852C769CFBE49EA021B0D
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa
Signing time: Thu 24 Oct 2024 05:02:11 +0000
ROA not before: Thu 24 Oct 2024 04:57:11 +0000
ROA not after: Thu 23 Oct 2025 05:02:11 +0000
asID: 64300
IP address blocks: 45.126.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9b:89:26:f3:2a:0f:a1:0d:e8:52:c7:69:cf:be:49:ea:02:1b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Validity
Not Before: Oct 24 04:57:11 2024 GMT
Not After : Oct 23 05:02:11 2025 GMT
Subject: CN=A49521473214ABB76385C4D25ADB8A719E92C1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:40:6e:ef:7c:07:8d:05:ef:fd:41:86:1e:
76:82:ab:ab:65:04:b2:22:2f:cc:46:0c:21:c1:32:
60:79:2a:3f:06:e8:4a:f1:8a:b7:ab:ff:f2:c9:6d:
0d:ce:98:47:5c:a3:24:82:6c:10:fe:64:c9:d9:3b:
2f:6c:f3:f8:b4:1f:c0:98:1c:c7:d7:a6:90:ab:60:
73:e5:5b:69:a9:7d:07:29:f7:81:fc:4d:e6:c7:03:
f4:b3:35:be:ec:08:e0:f1:32:f9:e2:8c:19:c0:b9:
92:fa:cb:7f:a5:80:8e:24:54:24:74:1f:2b:3c:65:
ee:ca:02:8c:d4:21:81:f2:4b:d1:bb:df:52:8c:0f:
05:1e:e5:af:62:a4:c0:07:16:f5:2c:b8:90:6c:f5:
43:eb:e1:e9:b3:7a:72:9b:75:e5:65:d0:ec:f9:57:
94:dc:0d:7a:6e:e6:10:2b:60:b4:c2:e9:49:3b:20:
59:3e:a4:07:f7:74:1a:82:12:ca:d4:0f:54:a5:41:
c7:6f:76:14:d6:a0:72:2f:0b:f2:20:86:dd:22:89:
60:ef:62:04:1f:f9:f4:00:1a:0c:f2:14:df:1b:e7:
81:07:9b:f5:56:f9:1a:e4:c2:37:4d:46:95:ba:8c:
05:55:63:0a:7d:0c:29:c8:91:7b:23:52:41:1d:57:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:21:47:32:14:AB:B7:63:85:C4:D2:5A:DB:8A:71:9E:92:C1:B1
X509v3 Authority Key Identifier:
keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.40.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:3b:3a:88:be:5d:99:ef:e9:ec:82:c0:2f:77:0e:75:c2:fa:
0e:a2:3d:c7:85:c0:d9:b2:38:e5:41:ef:b1:cd:fa:ab:3f:5f:
de:9d:bc:d3:43:17:4a:90:af:2b:a1:33:7a:73:fa:95:30:42:
f0:b4:cb:d4:83:c7:a1:e1:09:a0:14:54:9e:81:f2:b9:54:6b:
c5:e3:09:62:6e:5a:a2:65:1b:98:49:0d:df:41:02:e8:75:01:
29:95:4c:bb:12:d4:dc:1f:ca:77:28:6e:da:65:c1:46:df:1a:
c1:ae:6f:7b:16:7e:ae:a2:0e:22:f6:21:cd:34:49:62:6a:14:
8f:a6:6d:ac:98:d3:1e:63:63:c5:5d:28:af:c1:81:5a:a3:c1:
79:a0:81:59:db:1e:9d:23:05:97:9c:29:b7:30:08:d6:47:2e:
d9:80:64:63:36:63:3e:3d:e9:10:96:ed:33:94:a4:ee:00:7f:
bb:39:7d:8a:56:ba:7b:9e:62:70:a2:03:20:20:9f:12:9d:fd:
d6:da:4c:6e:5b:9b:93:bf:bd:87:0f:74:d4:24:d1:74:f6:a4:
42:4b:8b:f9:a0:de:8a:3f:52:36:51:1b:f6:5c:75:6a:94:65:
2f:fb:cd:4d:37:20:2d:09:2c:a3:26:a8:e7:31:fc:00:46:91:
02:7a:95:5f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGZuJJvMqD6EN6FLHac++SeoCGw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB
Njk2RUY5NjAeFw0yNDEwMjQwNDU3MTFaFw0yNTEwMjMwNTAyMTFaMDMxMTAvBgNV
BAMTKEE0OTUyMTQ3MzIxNEFCQjc2Mzg1QzREMjVBREI4QTcxOUU5MkMxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2kBu73wHjQXv/UGGHnaCq6tl
BLIiL8xGDCHBMmB5Kj8G6Erxirer//LJbQ3OmEdcoySCbBD+ZMnZOy9s8/i0H8CY
HMfXppCrYHPlW2mpfQcp94H8TebHA/SzNb7sCODxMvnijBnAuZL6y3+lgI4kVCR0
Hys8Ze7KAozUIYHyS9G731KMDwUe5a9ipMAHFvUsuJBs9UPr4emzenKbdeVl0Oz5
V5TcDXpu5hArYLTC6Uk7IFk+pAf3dBqCEsrUD1SlQcdvdhTWoHIvC/Ight0iiWDv
YgQf+fQAGgzyFN8b54EHm/VW+RrkwjdNRpW6jAVVYwp9DCnIkXsjUkEdV4gbAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUpJUhRzIUq7djhcTSWtuKcZ6SwbEwHwYDVR0j
BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1
NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2
RUY5Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0ODQwN2UzLTJjYjEtNGM2ZS04
YWViLTVlMGQzNTVlOGM5Ni8wLzM0MzUyZTMxMzIzNjJlMzQzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtfigwDQYJKoZIhvcN
AQELBQADggEBAC07Ooi+XZnv6eyCwC93DnXC+g6iPceFwNmyOOVB77HN+qs/X96d
vNNDF0qQryuhM3pz+pUwQvC0y9SDx6HhCaAUVJ6B8rlUa8XjCWJuWqJlG5hJDd9B
Auh1ASmVTLsS1NwfyncobtplwUbfGsGub3sWfq6iDiL2Ic00SWJqFI+mbayY0x5j
Y8VdKK/BgVqjwXmggVnbHp0jBZecKbcwCNZHLtmAZGM2Yz496RCW7TOUpO4Af7s5
fYpWunueYnCiAyAgnxKd/dbaTG5bm5O/vYcPdNQk0XT2pEJLi/mg3oo/UjZRG/Zc
dWqUZS/7zU03IC0JLKMmqOcx/ABGkQJ6lV8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:34:22 2025 by rpki-client