Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa
File: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=
Subject key identifier: 96:7F:E7:D2:5B:74:FC:F0:4A:DD:B2:54:DB:40:11:03:59:8D:93:C9
Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial: 7C6D6B31382B29A2CF97F33AB00F8AB7FF559615
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa
Signing time: Thu 12 Dec 2024 12:00:00 +0000
ROA not before: Thu 12 Dec 2024 11:55:00 +0000
ROA not after: Thu 11 Dec 2025 12:00:00 +0000
asID: 132164
IP address blocks: 103.50.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6d:6b:31:38:2b:29:a2:cf:97:f3:3a:b0:0f:8a:b7:ff:55:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Validity
Not Before: Dec 12 11:55:00 2024 GMT
Not After : Dec 11 12:00:00 2025 GMT
Subject: CN=967FE7D25B74FCF04ADDB254DB401103598D93C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:47:1f:b3:f4:96:f2:e0:42:2d:d5:3c:24:
84:27:f5:30:09:aa:ba:b7:20:86:c7:74:fb:ab:7c:
7b:fa:9f:1f:8c:86:07:73:ea:0c:c5:83:7c:03:3d:
20:90:12:31:9a:eb:b5:a1:94:22:b2:1b:d1:a7:64:
f8:2f:27:25:f7:84:c9:e5:1e:fd:8c:5f:77:0e:eb:
44:74:5b:f5:d2:cc:b7:9a:45:e6:97:11:93:ef:28:
fd:5a:02:38:c9:c3:05:ec:33:4c:30:22:71:fd:b7:
e8:3d:56:58:e3:f8:4c:d7:89:8a:a5:98:c4:ba:a2:
ec:fc:ac:9e:70:a1:41:2b:b9:03:ff:7d:46:5d:56:
5d:12:6a:30:88:7d:64:6b:f3:0b:46:64:e8:6a:0d:
04:bc:bb:15:d5:bb:aa:68:d1:46:f3:6e:5d:43:5c:
8d:a6:22:7f:df:13:07:59:b4:e7:be:28:2b:24:fa:
7b:2e:f0:2c:90:05:d3:5d:a7:3d:62:0b:7a:69:b9:
ba:86:e9:3d:b5:a2:e2:57:7b:1f:a6:d4:23:a4:ad:
2d:d5:b0:dd:5f:21:3d:64:c1:4b:d8:11:a5:44:8e:
29:a0:7d:4e:6d:9a:49:de:05:ad:71:3a:c7:f0:1c:
9d:08:c5:ae:c1:24:6e:12:c8:31:bb:57:a6:66:01:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:E7:D2:5B:74:FC:F0:4A:DD:B2:54:DB:40:11:03:59:8D:93:C9
X509v3 Authority Key Identifier:
keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.50.217.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bb:5c:01:87:f7:d4:d2:2f:1c:57:52:57:20:09:08:98:7f:
04:76:b3:bf:1b:6e:26:21:6a:aa:2c:ff:38:8c:6f:72:48:6d:
70:1c:69:6e:1c:5f:1b:36:56:f8:c6:cd:34:90:32:12:78:36:
2e:97:2a:b9:dd:c4:b8:e9:b7:09:cc:74:5b:d3:6e:e7:b2:9c:
67:25:29:ce:0d:68:60:78:55:7b:c4:04:3a:0e:7e:8e:9c:46:
89:92:0f:3f:ba:53:82:6f:03:77:ac:8e:5b:bf:42:90:41:7b:
6c:8a:06:17:dc:3a:ce:a6:52:a5:fc:81:65:36:99:65:25:a4:
c9:b5:9a:35:74:21:3f:5f:48:19:33:8f:49:53:95:43:0b:5f:
98:d1:84:ad:71:95:f6:66:10:fb:a4:a9:0b:29:d6:15:a3:e3:
91:79:8f:ec:2b:29:46:3c:cd:67:3f:c2:35:8c:8c:90:93:3c:
96:f1:d4:a3:03:79:bf:3d:9f:bf:e3:76:60:5d:54:21:3b:ed:
ff:12:e0:58:8d:d2:ed:8c:0c:1b:23:df:66:a8:30:76:c6:e4:
06:4a:98:ec:1f:bb:35:ed:15:9a:df:09:54:6a:ae:60:4d:7c:
6e:da:ce:e2:a0:1c:7e:3b:85:3d:69:14:dc:7f:cd:e9:cb:b9:
5b:ee:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:16 2025 by rpki-client