Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa
File: AS142401.roa (raw, json)
Hash identifier: nc0h1mfn/80XqyXJt9Q0Ncajv7PGrFHN1b27meySo/U=
Subject key identifier: 54:A5:B4:AA:77:A8:1E:2F:27:2F:CD:EA:8C:94:0D:33:BC:5B:F9:38
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3BD547BFD83C12B15A822B1240B4460B51D5EF46
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa
Signing time: Fri 11 Oct 2024 09:00:00 +0000
ROA not before: Fri 11 Oct 2024 08:55:00 +0000
ROA not after: Fri 10 Oct 2025 09:00:00 +0000
asID: 142401
IP address blocks: 2001:df1:9840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d5:47:bf:d8:3c:12:b1:5a:82:2b:12:40:b4:46:0b:51:d5:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 11 08:55:00 2024 GMT
Not After : Oct 10 09:00:00 2025 GMT
Subject: CN=54A5B4AA77A81E2F272FCDEA8C940D33BC5BF938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:cd:31:98:8c:fa:6d:b0:ea:50:bd:1a:66:
ce:cc:47:5f:67:16:6c:c5:fa:4f:ff:87:79:fb:39:
79:9a:4b:e2:dd:f6:50:41:19:3b:c5:a3:c5:f1:8b:
c5:2d:39:d0:ab:58:f4:42:8d:bf:85:b2:74:b2:55:
c6:8e:28:52:c0:13:8d:3a:5c:a4:a2:74:3a:bd:17:
ad:d0:1a:c2:b2:b9:94:d8:fc:f8:dc:8f:06:76:c7:
c0:16:d3:d2:8e:9e:18:60:05:bc:7b:c1:8d:0e:e0:
76:8e:04:e0:b5:6d:d5:8c:a1:c5:d4:03:b0:79:42:
73:a9:76:73:1b:7d:59:c3:1f:1f:c4:b3:90:05:bf:
e7:04:da:d6:fa:e6:d9:46:82:3d:ae:16:80:83:2b:
ad:73:63:7d:33:35:dd:77:f2:2d:25:0d:a6:ba:bb:
a1:b0:1a:b5:d2:b7:42:37:be:c0:b6:b1:b3:70:56:
10:3f:53:7a:bd:a2:6f:b5:e7:80:5e:78:9c:92:0b:
81:e1:e5:d4:4b:6b:c4:90:0c:92:34:86:fc:c0:af:
0f:cd:6f:2a:58:58:41:73:31:f5:64:24:e0:af:89:
ea:a2:ad:de:e1:e8:77:5b:ff:c6:ef:7a:15:b1:ef:
c8:57:09:7b:bf:9f:2e:f5:36:16:d5:54:cb:40:98:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:B4:AA:77:A8:1E:2F:27:2F:CD:EA:8C:94:0D:33:BC:5B:F9:38
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:9840::/48
Signature Algorithm: sha256WithRSAEncryption
16:54:46:d9:4d:20:59:c9:91:70:71:12:28:f6:db:44:52:2d:
7e:30:e2:5d:8f:13:a4:f0:b1:03:44:0f:71:27:f5:4a:98:f2:
d3:a8:e4:3e:53:7a:70:7a:1c:0e:08:fd:59:8e:9d:8f:1f:ef:
de:dd:47:07:93:b6:10:f0:a4:7f:16:e6:eb:b1:c1:98:9c:cf:
df:96:e5:b7:de:ea:90:b4:93:0d:bf:aa:b3:2a:dd:34:60:01:
53:6b:0a:e1:e8:55:fb:8c:6d:d9:b7:64:91:97:8b:0a:df:8f:
84:da:f2:3f:e0:23:03:c9:b7:96:e8:3e:77:b1:c3:c6:a6:3a:
8b:0f:cd:02:5b:81:43:e1:83:ed:6b:7b:7b:5f:0c:3f:90:2f:
aa:e2:64:24:d9:88:74:e5:56:48:b0:3e:dd:20:97:00:74:33:
5d:51:c9:5a:59:aa:41:e4:ab:e8:4d:9d:7a:1d:23:07:b8:ce:
e5:c5:7e:ee:c5:c2:96:ba:00:bb:cd:6b:9e:59:fe:67:b3:1a:
58:2c:78:a2:92:f2:87:a1:bf:82:ad:49:9c:23:8d:e9:53:32:
63:a1:75:d2:97:c6:81:3c:d2:47:b7:0a:7e:85:44:38:a2:b2:
3d:2e:4f:a3:00:f5:14:6e:41:96:65:b7:16:52:58:d9:d7:02:
85:79:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:47:39 2025 by rpki-client