Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa
File: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (raw, json)
Hash identifier: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=
Subject key identifier: 24:9C:F5:12:5A:F6:8A:25:CD:9C:DA:FD:20:98:AB:5D:4D:A7:07:50
Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
Certificate serial: 452B0C57024D2313DB7CB310486B9C08AC4C035E
Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa
Signing time: Thu 14 Nov 2024 15:00:02 +0000
ROA not before: Thu 14 Nov 2024 14:55:02 +0000
ROA not after: Thu 13 Nov 2025 15:00:02 +0000
asID: 152057
IP address blocks: 103.164.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2b:0c:57:02:4d:23:13:db:7c:b3:10:48:6b:9c:08:ac:4c:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
Validity
Not Before: Nov 14 14:55:02 2024 GMT
Not After : Nov 13 15:00:02 2025 GMT
Subject: CN=249CF5125AF68A25CD9CDAFD2098AB5D4DA70750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:fc:3d:fc:63:82:01:2d:72:9b:da:86:23:
1b:0b:69:57:f2:39:3c:3b:4a:34:f0:03:b4:ee:94:
ba:48:0d:cd:fa:cb:f7:b9:b4:89:3c:e8:e9:84:de:
76:c0:40:7d:bb:cc:50:5c:44:ae:22:72:65:6d:7a:
28:85:47:28:c8:8f:28:84:ef:40:90:a9:e4:cd:a0:
02:28:99:a9:2f:c1:06:ee:4d:d5:04:57:c8:e1:fe:
6d:c0:4a:58:21:f7:04:79:bc:a7:f5:5e:e7:c2:98:
3d:50:51:7c:2b:d6:4b:48:4f:93:d7:1f:4e:b5:d7:
6d:19:da:d7:a3:27:d5:4f:6a:8b:bc:dc:a2:2d:e2:
a5:df:ba:e8:e6:eb:ce:20:5b:c8:47:ff:b2:c1:69:
a2:8c:ae:22:d8:3f:c5:54:b4:b7:3b:e3:dc:92:0c:
0c:22:75:4a:c5:97:84:7c:4f:df:c1:fd:31:10:88:
ac:0d:19:28:62:3f:30:12:23:8f:2d:fb:97:f3:b6:
27:dd:a4:2b:81:23:a6:ff:46:72:4b:87:0c:e3:5e:
ba:9c:f2:c1:f5:85:73:ea:d7:14:0f:1f:6c:a8:c4:
a4:04:4a:14:1b:57:69:a3:e0:6f:68:49:20:2a:27:
f3:a0:15:4a:57:06:35:36:a0:55:03:36:69:c6:15:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:F5:12:5A:F6:8A:25:CD:9C:DA:FD:20:98:AB:5D:4D:A7:07:50
X509v3 Authority Key Identifier:
keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.14.0/23
Signature Algorithm: sha256WithRSAEncryption
66:29:24:c0:bd:4e:08:16:17:a3:98:6d:31:c7:96:fd:72:4a:
22:21:72:17:73:73:79:fb:9d:db:1d:d5:90:95:b3:87:87:89:
49:86:19:25:96:9a:4d:3d:88:32:8f:0b:56:c0:db:ba:09:48:
30:b3:8f:41:a8:89:a5:a6:28:64:d0:b1:3f:99:1b:4a:07:60:
69:a1:ff:4b:fa:3d:ba:93:d3:2d:a5:ab:0c:7e:65:4c:7e:c8:
2b:45:47:5c:66:90:9b:36:9e:0a:62:fd:0f:27:07:bb:79:0e:
7b:5f:9a:c6:a4:6a:7d:1f:18:13:30:75:60:56:9f:00:4d:ea:
14:18:82:c3:1c:f4:04:81:75:57:ed:19:85:55:d1:71:45:43:
97:c2:f8:34:95:16:a4:91:4c:fb:91:28:d6:d4:29:ca:67:13:
19:a5:24:0e:56:0f:26:dd:f0:99:05:ca:7e:c9:5b:b2:65:f0:
7f:5f:8a:45:7a:e3:f2:b0:a3:ad:c8:e0:65:1a:ae:b7:bd:07:
c6:7c:f6:51:64:a4:8a:17:e8:e6:ab:ac:33:a8:8a:f3:e8:d0:
f5:a7:3e:26:47:49:ef:8c:ab:69:f5:09:34:07:69:17:ed:93:
15:a6:eb:fe:85:0e:7c:30:a9:60:ce:42:0a:a1:53:32:18:61:
47:41:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:19 2025 by rpki-client