Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
File: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=
Subject key identifier: 0A:03:A0:EA:D2:BB:F0:3F:4B:93:3E:AF:07:04:F6:06:39:13:24:A3
Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial: 1F53B39C16020C12505E7C63104696DB9B71F1FD
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
Signing time: Tue 29 Oct 2024 05:00:01 +0000
ROA not before: Tue 29 Oct 2024 04:55:01 +0000
ROA not after: Tue 28 Oct 2025 05:00:01 +0000
asID: 45305
IP address blocks: 103.51.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:53:b3:9c:16:02:0c:12:50:5e:7c:63:10:46:96:db:9b:71:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Validity
Not Before: Oct 29 04:55:01 2024 GMT
Not After : Oct 28 05:00:01 2025 GMT
Subject: CN=0A03A0EAD2BBF03F4B933EAF0704F606391324A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:3f:98:e1:a6:8e:30:51:b6:40:0e:be:76:
39:04:a7:0d:10:53:95:cf:ed:40:40:a8:97:0d:4e:
9c:6b:02:4c:4b:25:4e:e4:11:78:90:12:58:da:d9:
b5:d1:00:d4:1e:49:c9:7f:9d:03:27:d6:b3:77:aa:
a9:76:cd:d8:f9:16:92:eb:f6:26:72:62:6d:fc:42:
38:34:aa:99:2e:c8:53:6a:33:01:53:8d:c8:d5:94:
6b:27:d3:1e:07:ee:a2:2c:a4:f7:1a:f7:4a:7c:80:
55:09:e6:c4:29:f6:fd:69:84:4a:cc:bb:d4:79:a2:
bf:af:b8:2d:f7:97:0b:67:4b:5a:9e:ff:88:3b:31:
76:99:c6:63:01:e3:0d:f9:c4:78:a0:0b:0e:b9:cf:
23:34:02:2b:f0:64:f3:22:a6:00:47:81:fa:a8:07:
64:e8:af:eb:f9:47:a9:af:d1:d5:75:e4:e6:e3:49:
27:a5:57:f2:1c:4b:ce:ac:14:a6:e3:f7:2a:b1:97:
f7:9b:1d:4b:d9:44:1d:36:ff:2c:4f:47:a9:e0:a4:
b9:e7:1f:1b:15:28:82:f2:66:7f:81:f9:b2:f0:44:
b0:3e:a4:ac:2f:33:15:14:c7:41:a6:f2:4a:9a:b0:
6f:41:e7:96:f3:a4:0c:7b:40:35:bc:f8:b2:ed:b2:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:A0:EA:D2:BB:F0:3F:4B:93:3E:AF:07:04:F6:06:39:13:24:A3
X509v3 Authority Key Identifier:
keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0a:82:a9:fa:82:d7:5c:15:a2:d6:cb:e9:5a:c9:40:61:91:
7a:9f:e7:dc:6b:84:09:d5:dc:d2:ac:a6:86:b0:9c:ae:0e:9f:
1f:15:7c:6a:63:68:b6:f8:d8:1b:af:3c:89:97:d2:55:7d:63:
34:9d:78:9a:39:e3:76:0c:d0:d8:b7:51:5d:0d:09:10:66:79:
ce:37:6d:38:07:b4:9e:d2:d4:70:cc:db:98:1a:b5:e9:86:9f:
2a:e7:fe:1c:80:b5:bd:77:dc:c3:70:e1:07:72:5a:00:8c:6c:
71:75:31:7a:86:24:a3:51:70:81:29:41:b5:5a:26:39:6e:37:
19:42:2a:5c:1f:9b:06:1b:4e:d2:d2:1a:58:e6:d4:be:49:40:
21:84:46:f6:15:21:60:7c:e5:9f:e2:33:6a:9e:3f:50:5a:6e:
aa:96:55:ba:92:0d:f9:34:7c:73:dc:bd:dc:90:10:94:4d:c3:
85:c3:65:5f:de:fd:ce:5f:b4:1e:34:48:d0:94:cc:9a:db:bd:
3b:ab:42:8f:8f:6d:3d:19:fa:2b:30:c4:1c:77:09:2a:94:5e:
c3:4b:79:49:bc:34:07:e8:e8:1a:3d:9e:52:a6:d9:9d:4a:97:
cc:6e:a4:a0:2a:27:f3:02:bd:26:59:74:a9:26:b8:6c:db:fe:
39:43:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:16 2025 by rpki-client