Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa
File: AS142390.roa (raw, json)
Hash identifier: sEgWMVECAQBbzGLnBSlOr9GSCLJh2PIbi5Tj6tdqOUU=
Subject key identifier: 2C:6B:05:E0:94:EC:D5:36:73:9F:CD:1C:2C:1F:26:85:92:F3:D4:BE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 67BD2E21BFE000C76F6594AC6759B9B18C624D31
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa
Signing time: Tue 10 Dec 2024 04:00:00 +0000
ROA not before: Tue 10 Dec 2024 03:55:00 +0000
ROA not after: Tue 09 Dec 2025 04:00:00 +0000
asID: 142390
IP address blocks: 103.171.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bd:2e:21:bf:e0:00:c7:6f:65:94:ac:67:59:b9:b1:8c:62:4d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 03:55:00 2024 GMT
Not After : Dec 9 04:00:00 2025 GMT
Subject: CN=2C6B05E094ECD536739FCD1C2C1F268592F3D4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:e3:c9:c2:71:f5:53:61:3d:3a:ed:01:94:
e0:e5:ca:e1:36:cc:cb:f7:a4:a8:04:8d:46:05:e8:
2b:5a:57:dc:bd:63:5f:45:1f:b4:de:18:7c:f8:9a:
36:06:0c:86:27:3c:09:ed:3c:8e:2f:75:b1:80:ae:
71:f7:fb:8e:97:db:e2:07:17:28:3d:7e:15:e0:8c:
52:10:4e:92:25:69:7d:8a:7f:a8:02:a6:50:87:1b:
2f:a8:99:2c:21:83:12:73:2f:b9:dd:7e:c4:3d:53:
47:e5:83:59:b7:aa:57:11:4d:e5:39:49:cf:ff:1d:
e1:17:8d:0c:ff:c4:dc:2c:4f:10:84:2b:b5:19:08:
db:29:9d:0d:a5:49:da:07:6f:72:33:fe:b6:a4:42:
4d:00:7b:b5:72:94:eb:30:db:46:94:e9:7e:d7:ea:
f2:9b:c4:a0:0f:dc:ed:55:20:bd:23:56:0f:b9:e9:
2e:d2:ea:3f:98:e0:fd:6c:29:f8:a0:38:5e:c2:42:
3c:cf:aa:21:52:2e:58:9f:f1:5b:7f:09:02:09:61:
48:75:63:97:f8:6e:e4:f4:51:05:2f:0f:3c:13:4e:
c2:82:8d:45:0e:c6:f1:a5:12:80:9c:5d:f0:d5:0b:
97:93:e7:12:4e:bc:1a:3d:ce:eb:5f:db:37:1b:ba:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:05:E0:94:EC:D5:36:73:9F:CD:1C:2C:1F:26:85:92:F3:D4:BE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.240.0/23
Signature Algorithm: sha256WithRSAEncryption
20:76:2d:4e:66:01:b4:f3:91:2e:9c:e9:80:88:97:de:7d:39:
f2:94:4f:bc:c1:bf:e0:64:b7:d1:bd:06:b5:b6:07:cd:c8:49:
8b:28:26:2c:22:03:6f:77:36:2f:1f:7e:37:4b:4b:fd:ec:8a:
6b:0a:b7:c6:d0:7e:22:98:12:06:bd:0f:55:22:f2:42:08:89:
34:06:fa:40:98:3f:ed:8f:7b:65:ba:dd:d9:26:1d:d9:20:79:
d1:93:18:bb:88:8a:09:ff:58:eb:34:ec:e6:29:8d:ae:44:f2:
a7:73:76:c0:ea:ef:f0:40:ad:d6:59:2b:1f:fc:8e:32:22:5e:
40:f4:ce:dd:92:42:3d:a8:28:3e:af:bc:1a:2d:93:b6:9c:ac:
02:6c:61:28:aa:d4:33:3b:15:00:b3:74:02:f9:ea:7a:8d:0d:
6a:ce:28:08:d5:a5:6f:53:05:52:aa:73:d2:c5:c7:e7:a0:3a:
c3:6b:fa:5d:40:2d:fa:cd:6d:71:ab:39:ef:a5:cb:58:d9:72:
ad:6d:dc:8f:6b:43:48:51:0f:7d:31:ca:05:da:31:df:f5:8e:
44:0c:28:76:d6:4b:b5:00:bf:03:70:38:d5:df:d1:34:95:7c:
49:01:ec:86:92:2e:e4:1e:19:25:af:69:2b:4f:76:27:f9:05:
4c:de:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:57 2025 by rpki-client