Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
File: AS140480.roa (raw, json)
Hash identifier: 9hPuTP+lZngTcMw2v1IjoC6YTHSXGJsHBolxhpH2DxM=
Subject key identifier: B2:30:67:46:E0:EB:09:BB:63:38:2E:74:9F:6B:ED:56:B6:32:B3:1B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6DC0EE99C2A30D8427C62471ED78A7FBD555E6D5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
Signing time: Wed 06 Mar 2024 07:00:00 +0000
ROA not before: Wed 06 Mar 2024 06:55:00 +0000
ROA not after: Wed 05 Mar 2025 07:00:00 +0000
asID: 140480
IP address blocks: 103.198.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c0:ee:99:c2:a3:0d:84:27:c6:24:71:ed:78:a7:fb:d5:55:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 6 06:55:00 2024 GMT
Not After : Mar 5 07:00:00 2025 GMT
Subject: CN=B2306746E0EB09BB63382E749F6BED56B632B31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:5b:f1:1e:58:b1:32:11:6e:e7:e7:e8:34:
a0:c4:17:d3:ad:0f:0a:4f:42:51:f0:5a:fa:bf:f0:
5b:5b:8c:f4:3b:53:4b:ae:e1:9c:98:48:a0:cd:cd:
ac:5f:6f:b6:12:d4:7e:18:23:24:02:40:a2:03:a7:
70:dd:c1:a1:a3:74:f1:81:cf:94:2b:8f:39:02:38:
b8:e7:5c:4b:8e:4b:01:fe:2c:ec:09:e8:d6:9e:d2:
b6:6b:df:91:b3:eb:69:da:b8:6b:d3:59:e4:4c:14:
6a:85:4c:95:c9:00:7d:d6:08:98:6b:c5:8e:e2:00:
4b:c5:b9:91:8b:25:8e:af:59:72:31:4e:12:85:a2:
7b:aa:2d:1f:90:24:28:53:84:2e:12:71:a4:b0:27:
d6:ca:0a:b7:58:26:f3:5c:b9:16:bb:58:da:be:e9:
ae:9e:78:98:15:f4:8d:a1:f4:97:86:4c:dc:02:f9:
68:16:c9:52:53:de:e6:62:15:67:23:4e:3a:29:d9:
36:9c:8b:fc:86:d0:87:b0:41:57:38:69:95:29:4e:
21:d6:d9:92:c4:97:10:c0:89:d9:26:dd:95:23:dc:
83:01:69:7a:ac:88:d9:5f:55:52:99:1d:42:fc:80:
ec:1a:e1:fb:52:00:78:43:e7:8c:0c:cf:54:16:a8:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:67:46:E0:EB:09:BB:63:38:2E:74:9F:6B:ED:56:B6:32:B3:1B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a1:db:36:f1:bc:f5:a2:78:37:6e:1d:89:d1:76:76:cf:f7:
b7:67:8c:ea:be:e0:00:f7:00:77:d4:bf:85:93:69:03:0f:b5:
d6:07:35:b8:9f:ea:a8:35:c6:5e:b1:28:91:f1:40:b0:19:12:
1b:fc:83:ed:57:97:c9:9d:45:97:90:b3:f3:cc:9a:08:17:cf:
50:78:e9:b4:aa:43:65:e5:0b:3a:51:4e:a8:0c:a0:28:50:1f:
84:7a:c1:79:9b:22:cb:1a:c5:91:90:fe:45:88:b2:b7:95:ed:
b5:27:24:a5:d1:bb:8e:9c:df:fe:b0:af:18:dd:e5:43:1b:45:
5e:a6:a8:cd:71:24:98:8a:5d:a1:14:1b:2e:6d:5a:4b:b6:88:
e4:25:be:e2:65:2d:c7:c3:2a:86:53:09:26:8e:85:96:c3:5d:
22:a3:a0:28:e1:26:d9:3a:45:f8:67:a3:65:bb:c6:3d:5f:85:
34:65:ae:54:78:68:0c:13:52:51:47:2c:fa:00:bc:b1:dd:de:
46:90:e9:ea:ba:ce:9f:92:4c:c0:cf:68:56:83:3a:a0:6e:c9:
80:bd:6c:8a:21:d2:64:c7:f8:a5:53:18:27:f3:39:0f:f5:12:
6b:40:ea:a9:5c:fb:b9:e7:d5:8e:f3:82:59:8a:be:e4:2a:61:
ab:cf:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:55 2025 by rpki-client