Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
File: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier: vS6/EEtMQVT4K3YP4R6xoIVUl5MVwEjWaihe/UDhtsg=
Subject key identifier: E9:48:7A:BE:01:15:EA:2F:95:74:F9:5E:E9:EA:9E:6B:0C:3B:A4:9C
Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial: 779284EEAFE055259A35A3F70E70685EACBC29FE
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
Signing time: Fri 29 Mar 2024 06:00:00 +0000
ROA not before: Fri 29 Mar 2024 05:55:00 +0000
ROA not after: Fri 28 Mar 2025 06:00:00 +0000
asID: 140443
IP address blocks: 103.168.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:92:84:ee:af:e0:55:25:9a:35:a3:f7:0e:70:68:5e:ac:bc:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Validity
Not Before: Mar 29 05:55:00 2024 GMT
Not After : Mar 28 06:00:00 2025 GMT
Subject: CN=E9487ABE0115EA2F9574F95EE9EA9E6B0C3BA49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:f2:f0:30:ac:d2:37:95:50:49:e8:33:2c:
25:6f:20:ee:7a:72:e8:0a:d5:fb:86:48:73:a0:04:
64:af:17:da:22:05:2c:a3:b4:76:26:ca:bd:18:71:
3c:fa:db:2d:10:22:fe:e6:5b:e0:2e:ad:48:2f:bd:
e6:08:29:d7:ed:c7:d4:f5:ad:fa:71:a5:7f:30:f2:
79:e2:ef:50:be:31:8e:3b:2e:dc:b7:c7:92:f5:3f:
b2:00:c3:97:c1:33:0a:ea:ca:34:14:b1:41:96:29:
27:8f:b1:a4:12:6b:f1:7e:10:c3:ec:12:3e:2f:b6:
d6:17:40:ee:e2:6e:2c:13:0a:39:b9:66:81:f1:8b:
d4:3c:0f:c9:39:3d:1b:d8:65:00:4d:f0:6a:c2:39:
4e:fe:3f:f4:2a:d4:16:52:01:31:7e:a0:1d:65:eb:
5e:f1:75:c0:cf:48:aa:33:57:c5:08:dc:b7:8f:f0:
fe:ae:f3:26:e0:7a:34:ff:3e:1c:26:b4:00:f4:4e:
8a:25:5f:8f:08:4d:79:d8:e1:13:a3:5d:69:fe:05:
bc:2e:b9:1b:12:4e:47:82:ff:f2:74:dd:fc:2c:21:
04:2f:5e:65:43:ae:77:93:5f:13:da:49:9b:de:4d:
00:a5:29:12:38:e6:6f:b1:5e:51:c9:fb:b5:8b:2d:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:7A:BE:01:15:EA:2F:95:74:F9:5E:E9:EA:9E:6B:0C:3B:A4:9C
X509v3 Authority Key Identifier:
keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.146.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a1:1e:97:1f:1f:56:21:46:d4:28:f6:54:db:85:48:1f:73:
04:38:f3:2b:eb:0e:25:e4:65:73:7e:8b:22:81:72:80:b0:74:
96:f7:9d:6f:51:15:75:ce:0f:12:51:3a:b2:75:39:23:a9:05:
38:d9:78:43:49:b0:3f:3e:41:c0:03:a5:fc:71:4d:be:aa:73:
6f:d4:8b:d1:8b:77:e7:fb:c5:54:d5:70:7b:b5:bc:cb:f5:2a:
dd:1b:0d:68:a6:0e:9c:be:ae:96:83:a7:e6:bd:0f:2b:30:a6:
03:4c:44:0c:63:18:20:cc:6e:cf:db:ef:1c:9d:fa:9f:ad:ce:
38:99:e8:e5:3b:cd:f7:9d:30:54:ea:f1:68:cf:f3:91:dc:a7:
53:18:0e:0d:b5:5c:a0:87:4b:83:37:9f:0c:92:82:fc:f2:c4:
eb:46:00:87:dd:0b:f5:2d:f2:c3:2a:e8:a1:ba:fc:a4:d8:49:
5c:3d:ac:89:4f:7b:bf:f6:f5:e1:2a:97:d3:84:90:e2:a2:23:
ff:44:a1:72:93:07:72:d2:cb:fe:13:de:45:62:be:24:16:19:
6b:f8:6c:56:c0:9f:be:6e:c4:2c:83:49:1e:85:f4:6e:4c:d2:
58:a6:c0:25:63:17:07:bf:b7:b4:17:98:07:19:68:bd:19:c6:
0a:e5:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:23 2025 by rpki-client