Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa
File: AS142317.roa (raw, json)
Hash identifier: x8G2XBnEttANkDTkg/dPBGYIb3Wi+cdxmqFLv4q9jx4=
Subject key identifier: F4:4C:C6:97:FA:5B:BE:21:6B:D9:3D:A9:F2:68:A8:82:3F:24:8F:9A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 42255E71309513E8B47E3B220678FDC6598C6A7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa
Signing time: Tue 10 Dec 2024 05:00:25 +0000
ROA not before: Tue 10 Dec 2024 04:55:25 +0000
ROA not after: Tue 09 Dec 2025 05:00:25 +0000
asID: 142317
IP address blocks: 103.168.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:25:5e:71:30:95:13:e8:b4:7e:3b:22:06:78:fd:c6:59:8c:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:25 2024 GMT
Not After : Dec 9 05:00:25 2025 GMT
Subject: CN=F44CC697FA5BBE216BD93DA9F268A8823F248F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:03:92:bb:f6:39:a5:bb:bb:94:7b:d7:56:
b1:88:44:9e:77:98:37:dd:83:a4:01:0c:bf:b5:60:
a0:2a:a3:2a:dc:26:31:19:32:c3:73:05:0c:48:56:
c7:b3:37:17:e4:7a:a0:1d:de:d5:a5:79:0d:44:1c:
07:e0:c3:84:91:dc:68:d6:69:5b:41:fe:2e:74:59:
21:70:11:e5:41:a5:4f:0f:a0:c9:ac:32:02:6d:a0:
26:98:c5:3a:20:a5:61:e4:41:d5:fb:fa:11:43:36:
5a:1a:f1:fa:e7:99:67:c8:f5:57:22:25:d3:0a:5c:
8f:c5:2f:5b:c3:17:48:60:0b:66:aa:4d:bf:20:53:
f0:a1:a7:34:f0:4b:b8:27:46:64:8a:9b:c2:31:57:
e4:9d:0f:58:43:55:df:74:25:16:ae:d5:5a:52:57:
bb:b1:09:9d:6c:70:ca:60:be:e0:25:de:29:13:1b:
01:56:3a:8f:b0:af:75:1f:43:e5:e5:fe:54:33:a9:
73:a3:0a:b7:1d:68:99:ce:00:54:96:a3:f7:78:82:
d0:8d:d0:d7:7c:66:c4:11:fc:f2:9d:d1:09:93:1d:
53:5a:1e:05:a3:86:9d:5a:5d:e2:ff:3e:d3:e0:0b:
23:fe:35:0b:79:75:b9:7a:55:c3:f4:9d:db:2c:ef:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:C6:97:FA:5B:BE:21:6B:D9:3D:A9:F2:68:A8:82:3F:24:8F:9A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.158.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d6:fa:c4:b9:d3:34:e4:5b:ca:b9:b5:39:f2:5a:7c:a7:bc:
43:84:76:d4:9d:07:e4:39:4e:aa:31:c1:69:73:ae:23:9d:42:
7d:20:eb:cd:bb:eb:86:6b:20:a2:c6:b8:37:28:92:b7:46:22:
a9:5e:a2:26:a2:df:6d:c3:59:8c:85:7a:fc:c6:97:18:0c:31:
b7:e4:ba:1f:d2:95:53:eb:b7:df:74:21:57:87:af:35:35:dc:
a4:56:61:de:76:c3:f2:97:15:18:e1:6d:21:86:b1:82:c2:7c:
98:db:7d:32:49:89:cb:4b:ee:49:b8:9f:84:dd:92:6e:5f:dc:
e1:ac:c5:d6:41:15:54:68:83:c1:16:08:68:bd:c8:6c:4c:3b:
76:91:18:41:8c:7c:be:a9:6d:ae:a8:b2:f7:6f:02:ef:4d:80:
f6:0e:b5:fd:3d:63:cf:48:8b:0a:55:14:e0:72:15:8f:42:b9:
a0:95:02:44:c4:51:7e:6f:27:cc:8a:fa:0c:d1:b5:e4:6a:36:
6c:fb:32:70:8f:6b:0f:d6:e3:44:fb:f1:21:fc:2d:34:da:02:
c2:af:95:62:8d:8a:fb:4d:66:05:8e:52:64:83:c2:05:d0:af:
53:8f:d6:99:f8:20:24:3c:e6:dd:ad:4f:98:78:d9:03:51:34:
af:da:11:d7
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQiVecTCVE+i0fjsiBnj9xlmMan8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyNVoX
DTI1MTIwOTA1MDAyNVowMzExMC8GA1UEAxMoRjQ0Q0M2OTdGQTVCQkUyMTZCRDkz
REE5RjI2OEE4ODIzRjI0OEY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIJA5K79jmlu7uUe9dWsYhEnneYN92DpAEMv7VgoCqjKtwmMRkyw3MFDEhW
x7M3F+R6oB3e1aV5DUQcB+DDhJHcaNZpW0H+LnRZIXAR5UGlTw+gyawyAm2gJpjF
OiClYeRB1fv6EUM2Whrx+ueZZ8j1VyIl0wpcj8UvW8MXSGALZqpNvyBT8KGnNPBL
uCdGZIqbwjFX5J0PWENV33QlFq7VWlJXu7EJnWxwymC+4CXeKRMbAVY6j7CvdR9D
5eX+VDOpc6MKtx1omc4AVJaj93iC0I3Q13xmxBH88p3RCZMdU1oeBaOGnVpd4v8+
0+ALI/41C3l1uXpVw/Sd2yzvdZMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT0TMaX
+lu+IWvZPanyaKiCPySPmjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMxNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeonjANBgkqhkiG9w0BAQsFAAOCAQEAJdb6xLnTNORbyrm1OfJa
fKe8Q4R21J0H5DlOqjHBaXOuI51CfSDrzbvrhmsgosa4NyiSt0YiqV6iJqLfbcNZ
jIV6/MaXGAwxt+S6H9KVU+u333QhV4evNTXcpFZh3nbD8pcVGOFtIYaxgsJ8mNt9
MkmJy0vuSbifhN2Sbl/c4azF1kEVVGiDwRYIaL3IbEw7dpEYQYx8vqltrqiy928C
702A9g61/T1jz0iLClUU4HIVj0K5oJUCRMRRfm8nzIr6DNG15Go2bPsycI9rD9bj
RPvxIfwtNNoCwq+VYo2K+01mBY5SZIPCBdCvU4/WmfggJDzm3a1PmHjZA1E0r9oR
1w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:40:04 2025 by rpki-client