Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa
File: AS138128.roa (raw, json)
Hash identifier: Pdp1kIC1v0zIb3Zpc5A7LjkctlgtV5KngpPVt6zf7fQ=
Subject key identifier: 4C:D1:36:D4:C1:0B:22:BC:12:44:ED:ED:39:EB:ED:CF:30:E2:DF:2F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 322E30911348F1B1E69281891CDF18FC86257A7D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa
Signing time: Wed 17 Jul 2024 06:27:01 +0000
ROA not before: Wed 17 Jul 2024 06:22:01 +0000
ROA not after: Wed 16 Jul 2025 06:27:01 +0000
asID: 138128
IP address blocks: 103.185.36.0/23 maxlen: 24
2407:7c0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2e:30:91:13:48:f1:b1:e6:92:81:89:1c:df:18:fc:86:25:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 17 06:22:01 2024 GMT
Not After : Jul 16 06:27:01 2025 GMT
Subject: CN=4CD136D4C10B22BC1244EDED39EBEDCF30E2DF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:f9:00:d1:2f:99:55:95:ed:64:30:81:5a:
df:c2:60:97:52:93:49:95:52:15:23:03:e1:96:04:
01:85:65:1f:d4:52:d3:8b:de:f5:ec:27:47:89:4c:
6d:6c:30:c4:25:9c:cf:b7:10:89:3f:71:1f:b0:cc:
88:de:ad:af:bc:d0:b1:96:a9:18:c6:0e:1f:c2:06:
19:90:99:84:d0:b6:5f:e0:ca:76:87:d2:fb:c9:df:
20:6f:9d:64:99:ae:33:d6:19:1f:37:05:3d:d2:7f:
01:20:34:92:cc:5c:c7:02:67:80:09:3b:0e:74:c9:
b2:92:55:49:5c:4b:26:b5:77:77:f7:9f:70:71:14:
f7:16:49:a2:7f:f0:21:24:bb:1c:4b:fa:6a:59:f1:
b7:9e:94:3d:3e:d8:3e:7d:3e:19:a3:67:54:85:43:
0f:94:45:82:43:78:ac:4d:2f:f7:93:58:00:6b:c5:
12:9a:a0:ad:74:e4:e9:a4:13:1b:29:b6:70:ef:79:
ee:16:4c:34:fd:d7:04:c8:42:5b:ed:4e:30:31:b8:
a7:e4:e7:f1:9f:27:39:9b:b2:15:38:0a:fb:67:1f:
81:1c:e5:b7:95:af:d2:d9:63:66:6b:a9:2a:48:e4:
93:49:b0:97:af:2c:0f:28:ca:9a:db:03:11:d7:15:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:36:D4:C1:0B:22:BC:12:44:ED:ED:39:EB:ED:CF:30:E2:DF:2F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.36.0/23
IPv6:
2407:7c0::/40
Signature Algorithm: sha256WithRSAEncryption
4b:46:de:c6:16:88:0e:65:e3:5a:5b:44:a4:3c:38:9f:fc:11:
f2:e2:58:90:fc:ac:ed:7d:2b:90:6d:68:87:d2:d1:2e:8a:d0:
04:fc:f3:9a:6c:17:15:cf:cf:65:1e:dd:97:a9:35:6d:f5:1f:
32:d6:50:91:d2:bb:df:da:d4:02:61:48:8a:b9:65:88:2e:f3:
d3:6e:22:8f:04:00:f2:1a:dd:c5:b7:ae:d8:26:c1:09:a4:d3:
6a:2f:4a:09:42:ea:c4:43:49:44:97:f6:88:97:51:3f:31:2f:
97:6d:59:0a:52:59:c2:26:3d:55:13:e7:37:cc:20:35:5f:1c:
ae:e1:d9:ee:7a:f9:e9:63:89:42:c5:9c:dd:d2:ca:92:94:e1:
da:e9:09:3d:ae:06:0d:d9:31:c3:8c:2e:8c:42:ad:28:3c:06:
c0:8d:47:94:39:d4:53:3b:95:d8:99:77:21:4f:48:1f:4e:21:
f7:d9:3b:06:a7:3a:dd:e0:58:bd:d4:c6:3c:3c:bf:a5:c7:d1:
e3:a3:e5:d5:ac:e7:3e:e7:92:b3:3e:2e:6b:8a:aa:5b:43:9a:
d9:72:b0:17:91:59:4a:bf:3b:a3:66:56:68:37:97:0f:cd:3c:
ae:7f:26:91:d4:0a:e1:3f:bb:25:76:f0:bc:8a:40:a6:d0:05:
5f:2a:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:51 2025 by rpki-client