Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa
File: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (raw, json)
Hash identifier: ll5+Eoysy8XpiM0nraFXO1sEZ22G9cLIqmWZw25BjG8=
Subject key identifier: 4F:A7:6A:BE:E6:64:B9:CC:F3:7E:9B:A5:4D:F5:43:05:B2:D8:63:49
Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC
Certificate serial: 65612190989FE31184559E68D33C1E89F814EBF2
Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa
Signing time: Tue 22 Oct 2024 14:01:31 +0000
ROA not before: Tue 22 Oct 2024 13:56:31 +0000
ROA not after: Tue 21 Oct 2025 14:01:31 +0000
asID: 142391
IP address blocks: 103.169.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:61:21:90:98:9f:e3:11:84:55:9e:68:d3:3c:1e:89:f8:14:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC
Validity
Not Before: Oct 22 13:56:31 2024 GMT
Not After : Oct 21 14:01:31 2025 GMT
Subject: CN=4FA76ABEE664B9CCF37E9BA54DF54305B2D86349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:70:d1:95:49:a4:77:23:a3:bf:3f:ef:3b:
0c:9d:56:ba:1b:1a:5e:26:41:9e:aa:00:c2:cb:ec:
ed:e6:d7:f6:8e:7b:c2:38:7d:1c:3b:bf:85:b7:f7:
ba:0e:e4:cd:28:c8:c2:b7:07:15:54:81:b0:5a:c7:
c1:1d:e4:bc:8f:58:b2:18:e1:3b:21:dd:1e:a7:6d:
5a:85:0f:8d:4d:16:9e:b8:61:e9:a3:27:b1:d1:6e:
06:52:c8:4e:73:a8:15:72:8c:f6:ef:f4:39:c1:1e:
27:ce:cc:d2:2a:59:34:16:ef:1e:fc:b6:20:71:b9:
7f:c0:6f:89:de:53:57:0c:43:a2:ab:d6:40:63:52:
ca:aa:2a:af:6e:0e:3c:20:08:2c:7f:a0:11:92:7c:
76:7f:01:01:69:14:7d:5e:02:3f:af:ff:9b:ae:3e:
82:1b:e1:bf:8b:6f:7b:ef:f6:0a:c2:90:d1:fa:43:
31:ba:bc:ac:1a:e3:8a:ec:81:1a:c9:79:07:3f:1a:
d7:0e:5a:b8:7e:ed:35:f5:b0:34:82:18:2e:44:00:
b9:c0:e2:7b:01:20:06:38:8a:1e:1d:bd:b8:6c:5a:
ff:90:d9:13:2b:46:f0:17:b1:47:e0:08:8d:d1:93:
10:eb:d1:e7:48:45:a3:22:31:d1:91:c5:d2:ea:18:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:6A:BE:E6:64:B9:CC:F3:7E:9B:A5:4D:F5:43:05:B2:D8:63:49
X509v3 Authority Key Identifier:
keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.44.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a7:75:42:7a:5c:f6:d0:de:ab:3c:42:b9:b2:c3:bb:83:9b:
c4:8e:70:19:7d:df:78:93:50:f9:4f:f9:4d:62:56:91:38:c6:
9f:af:0e:4c:a9:c4:7a:ef:73:c7:61:71:9a:6e:bf:f7:f0:f7:
33:0f:a4:fd:92:57:c3:d9:b6:4d:1f:a3:0c:3d:66:42:f7:02:
cc:11:41:3e:6f:6e:77:f2:00:bc:9a:91:b2:b3:f4:7b:b3:e1:
7d:df:58:66:3c:8c:28:ce:4b:7a:ea:f0:76:60:7d:7d:5c:0b:
f7:30:b4:18:e8:7f:a3:83:be:53:2c:6a:28:d3:71:a1:03:c1:
4e:75:c7:c9:46:e7:1c:e4:56:26:61:59:b7:68:31:ed:b4:68:
d9:a9:97:67:59:5b:ad:72:8a:82:48:39:5c:46:a6:bb:50:3d:
f3:1a:d8:10:13:33:fb:5a:44:39:f1:52:6a:98:c3:74:aa:55:
c5:14:d8:9f:37:ea:ff:bd:57:bc:1c:4f:d1:47:26:38:f1:50:
42:b6:2c:02:a0:da:5a:00:f2:7a:a3:9a:d3:1e:dd:13:91:d8:
7c:62:4c:79:8b:b3:01:0d:26:a9:8d:d7:5b:f0:8e:97:ac:ac:
e8:46:e0:2e:f9:5c:84:7b:41:3d:17:b4:83:09:25:d4:b7:c1:
2e:e4:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:10 2025 by rpki-client