Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138829.roa
File: AS138829.roa (raw, json)
Hash identifier: no3SfmiAUnGC8jpNSYROqOYTUucqkheKHGcxePgWS48=
Subject key identifier: 6C:E9:80:10:C3:6D:87:3A:A1:05:62:7B:B6:87:A9:8B:F4:52:F5:E7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6939A93210DA2D7C917D72813B2621B630B3C656
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138829.roa
Signing time: Tue 10 Dec 2024 07:00:00 +0000
ROA not before: Tue 10 Dec 2024 06:55:00 +0000
ROA not after: Tue 09 Dec 2025 07:00:00 +0000
asID: 138829
IP address blocks: 36.50.253.0/24 maxlen: 24
103.11.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:39:a9:32:10:da:2d:7c:91:7d:72:81:3b:26:21:b6:30:b3:c6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 06:55:00 2024 GMT
Not After : Dec 9 07:00:00 2025 GMT
Subject: CN=6CE98010C36D873AA105627BB687A98BF452F5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:4b:97:fc:9b:1f:4d:71:d5:f8:21:65:c5:
51:96:b9:dc:46:3d:0c:07:28:17:3d:60:29:e9:c7:
c2:7a:8e:d5:5a:e3:59:3b:cb:d5:4d:31:dd:7c:d7:
81:5c:b8:74:e9:1b:8a:b0:76:4b:09:c6:01:c4:17:
50:3f:23:bc:41:2c:88:f1:9e:f3:ce:b3:4f:37:37:
10:98:dc:38:80:2f:61:30:4f:ad:dc:56:22:c4:d2:
38:c0:59:fa:cf:98:f4:eb:25:b3:bf:28:5b:7e:6a:
17:a0:67:9a:9f:c4:dc:35:23:fc:67:8f:49:e2:1b:
a9:57:ec:32:0e:9b:86:06:2b:96:76:ec:24:0d:b1:
16:97:22:5d:f4:2e:ba:a3:21:39:65:c4:5d:1f:f9:
3f:e4:cf:f3:75:d4:da:7c:1f:04:ca:4b:6d:7a:7b:
3f:c1:65:d7:cd:c3:b8:41:3f:15:9b:5c:a4:12:a9:
db:75:6d:5b:94:8b:9f:a1:e0:74:37:d1:39:ed:f3:
fe:93:f4:a7:e3:ec:93:11:97:50:e1:b4:f7:4d:35:
04:8e:88:ef:78:03:82:e0:bb:76:0a:80:57:4d:15:
36:90:f1:46:78:ca:7a:d2:be:31:f2:1c:5e:85:cd:
f7:f6:e8:84:3b:cf:a1:12:11:d4:a6:d5:ee:94:38:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:80:10:C3:6D:87:3A:A1:05:62:7B:B6:87:A9:8B:F4:52:F5:E7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.253.0/24
103.11.132.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4f:0a:37:92:dc:c9:5c:b1:48:27:7d:ec:89:91:d7:43:a8:
e4:63:61:73:cb:56:ca:0c:4a:e9:8c:9f:ea:63:91:19:69:ab:
32:97:67:24:03:f9:a1:cf:06:77:57:b8:b1:4c:ac:53:3e:88:
b1:a8:49:09:19:97:6b:f1:c6:da:e5:20:0f:fd:06:94:cf:eb:
db:45:6a:fa:e8:c9:1d:9e:e8:bf:b7:aa:44:0d:46:cc:e4:2e:
6a:c2:e5:4d:60:7a:55:12:71:73:9b:4f:bf:61:b3:49:f4:01:
67:19:de:4d:1f:78:a7:92:0f:0b:83:d1:1b:f1:2d:a6:fd:d9:
34:08:e8:7c:b4:75:ee:ec:20:8d:e3:df:e4:02:4c:c5:2f:3a:
3a:52:d4:19:38:67:a4:ed:b4:df:81:7c:0b:f0:9b:ac:98:a3:
92:40:91:40:70:79:49:e6:d9:41:95:a4:d4:a1:f6:1f:bd:5c:
de:ae:fd:15:34:0c:2f:17:52:31:e1:da:23:38:2b:09:65:0f:
6d:05:2c:ba:5a:72:b2:60:a7:81:a4:3d:11:98:18:78:7a:f5:
33:b6:fb:46:ca:1e:fe:e8:0f:52:03:7e:56:d2:93:ae:2c:a8:
48:73:b5:bf:4a:09:b0:5a:a8:fe:13:4e:f8:d3:37:66:f4:88:
ae:5d:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:37:39 2025 by rpki-client