Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
File: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier: 3QM5Ix3e9tj5OY5stD7sNCXK5GMRSydvXTBA4V6sWjA=
Subject key identifier: 84:16:13:8A:63:E1:88:00:F3:2C:7E:D6:45:0C:04:C4:08:CF:28:E7
Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial: 4D8DB86B277AEA67506C5904AE1F9BB08ED60348
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
Signing time: Mon 01 Jul 2024 01:02:42 +0000
ROA not before: Mon 01 Jul 2024 00:57:42 +0000
ROA not after: Mon 30 Jun 2025 01:02:42 +0000
asID: 63869
IP address blocks: 103.50.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8d:b8:6b:27:7a:ea:67:50:6c:59:04:ae:1f:9b:b0:8e:d6:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Validity
Not Before: Jul 1 00:57:42 2024 GMT
Not After : Jun 30 01:02:42 2025 GMT
Subject: CN=8416138A63E18800F32C7ED6450C04C408CF28E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:32:08:38:6d:55:3a:95:8f:e7:8b:8d:aa:
78:b2:59:cb:2f:c3:a2:33:47:a2:3d:56:a0:b9:23:
24:6a:62:34:ff:3b:c9:e2:34:ce:72:fe:6e:35:8b:
5d:f5:da:b8:89:61:b4:ef:54:c8:48:2f:6d:b6:31:
49:13:ff:52:ee:b9:bf:ca:26:fb:4e:75:6d:5f:f0:
59:7e:51:08:86:59:35:ab:2b:74:42:dc:19:49:73:
9a:9d:e1:1c:77:56:4a:6d:d2:14:e0:94:0f:ef:e5:
c8:30:eb:17:64:f3:f4:48:79:b4:b5:17:28:69:6d:
ec:39:e5:62:13:28:4c:1a:08:93:2e:19:85:4a:d7:
6e:1e:c3:eb:26:31:a6:e5:01:be:24:ba:af:8c:10:
68:89:41:64:bc:5d:b5:93:76:04:fb:e1:75:db:f0:
5b:22:9a:c7:f0:18:64:57:2e:f7:79:09:0a:0b:09:
6b:fd:a9:05:bd:f8:76:e0:dd:90:c4:7a:be:36:52:
93:4f:60:c6:d3:56:5d:26:33:d3:a9:74:21:06:fb:
82:ce:18:18:2a:03:3a:4c:59:68:a0:cc:98:5f:90:
5a:43:19:79:8d:74:aa:14:38:2e:8a:dc:81:04:7d:
46:eb:14:ef:2e:6f:6b:6d:de:da:54:0e:1e:7f:71:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:13:8A:63:E1:88:00:F3:2C:7E:D6:45:0C:04:C4:08:CF:28:E7
X509v3 Authority Key Identifier:
keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.50.26.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3c:e4:11:73:5d:e7:d2:de:f5:ab:3b:2d:83:c8:f7:12:8a:
cd:09:7b:1e:80:bb:bd:40:a5:f5:15:d7:42:28:71:9b:98:f9:
e8:e2:84:c0:70:3a:ee:f6:f0:74:9e:be:f1:8c:87:80:99:27:
7d:5a:40:c5:03:9c:c7:b5:60:2e:c9:cf:81:8d:b4:1c:71:b4:
06:35:67:04:71:bc:5c:9a:6b:4f:f7:d6:de:e6:fb:f2:91:26:
fb:73:d6:96:e4:bc:ff:bc:21:09:5f:a8:be:14:c2:f5:e0:32:
f5:a8:1b:c4:eb:7c:46:ae:d5:90:27:6c:43:70:7e:c1:78:04:
71:7a:e2:56:30:42:61:f1:30:ec:b1:5f:a8:b5:19:50:7b:8f:
5b:27:5e:45:0c:d8:85:8d:14:28:db:d3:16:f1:cd:8b:ad:1b:
06:b4:ff:e7:15:cd:83:ef:d4:ea:5a:2e:0b:5d:3d:49:84:48:
88:7e:69:dc:bd:25:78:95:e4:02:84:00:9e:85:b6:08:cb:4f:
52:16:73:03:7e:5c:56:02:d4:bb:21:35:98:82:5f:fd:c4:09:
1b:48:d0:5c:d9:cb:19:a3:ad:24:23:58:ed:6a:19:a5:49:04:
11:52:7d:8a:12:b7:fe:9c:89:36:0f:6c:59:d3:a7:2d:9b:8a:
eb:a1:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:07:56 2025 by rpki-client