Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa
File: AS147088.roa (raw, json)
Hash identifier: O14PW9CGLjFCGzwyX0zHpuZjvImCvsAig4qhr+xw8+8=
Subject key identifier: 50:41:EC:96:72:5C:54:62:32:EA:24:69:0B:67:E0:65:B9:F8:F8:11
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 79C0A65D66728E0A8FD2C52308381FFAB6661E26
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa
Signing time: Tue 10 Dec 2024 05:00:13 +0000
ROA not before: Tue 10 Dec 2024 04:55:13 +0000
ROA not after: Tue 09 Dec 2025 05:00:13 +0000
asID: 147088
IP address blocks: 103.172.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c0:a6:5d:66:72:8e:0a:8f:d2:c5:23:08:38:1f:fa:b6:66:1e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:13 2024 GMT
Not After : Dec 9 05:00:13 2025 GMT
Subject: CN=5041EC96725C546232EA24690B67E065B9F8F811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:aa:75:14:5b:44:c7:fc:86:c2:81:6c:78:
9a:46:b2:1e:1c:58:3e:8d:2b:4d:c3:0c:c5:f3:fc:
26:12:63:8a:60:90:0a:e9:fc:16:00:3c:0d:ce:64:
6c:c9:be:1a:80:1e:f6:47:ec:0e:0c:78:e6:2e:83:
5e:1f:a6:f5:6d:a4:c9:b4:a4:34:6f:34:c3:3d:41:
5a:2d:f9:1e:24:84:15:1a:63:fc:bf:f6:00:6f:b7:
9e:06:47:21:0e:4c:db:21:80:c7:86:b9:b6:4c:86:
26:89:f3:b6:4e:7a:b1:8a:a9:18:74:2c:75:71:80:
c3:97:54:d2:43:ca:ef:a2:86:58:cd:b2:6d:d6:d0:
e2:fd:bf:13:22:52:e0:b0:0f:dd:6e:3c:99:c2:5b:
5b:03:02:b8:f0:d7:9d:db:de:f4:83:82:fe:20:27:
3e:f0:75:6f:fe:7e:55:c5:01:38:ae:70:59:a7:6f:
4b:c9:8e:d0:05:7b:61:fc:3c:90:3d:36:a3:2f:69:
0b:32:42:81:1b:75:87:c6:ff:f0:e4:e8:6f:84:4b:
1e:2a:f7:f6:e2:9a:bf:1f:ad:14:14:1b:67:8d:f7:
a3:c2:52:b6:b9:d3:c3:8e:93:b7:18:80:29:b1:84:
4d:f2:63:67:3b:51:95:dd:07:09:ee:76:99:62:94:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:EC:96:72:5C:54:62:32:EA:24:69:0B:67:E0:65:B9:F8:F8:11
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.172.0/24
Signature Algorithm: sha256WithRSAEncryption
04:13:d9:38:0b:89:3d:98:cc:32:6b:47:53:47:ce:60:18:be:
1b:42:d8:1d:99:1a:20:14:bc:f7:3a:c5:9b:5c:59:f3:d1:c9:
5b:dd:de:a3:8d:82:64:b8:80:c2:3d:88:50:ad:64:db:be:1d:
dd:8a:2a:93:56:79:7c:1e:8d:45:fd:0c:be:7e:36:78:a8:ee:
80:c9:0f:be:9d:bd:ed:69:6e:6b:1a:db:50:27:58:54:31:c8:
01:b8:89:83:08:5b:bb:ce:5f:c5:d3:b8:dd:d6:37:f1:68:2d:
4b:47:62:02:77:51:81:89:09:85:57:66:a5:b6:11:6b:3c:a9:
69:3e:6a:05:fd:c7:8c:4e:34:0a:25:00:9d:c5:57:ca:79:a2:
59:88:26:24:c2:71:8c:f5:b1:d0:17:0d:96:55:59:ba:81:35:
4c:d7:0e:3c:cc:93:44:2a:3c:04:f7:c9:8f:49:52:49:5c:d2:
95:6f:bc:71:e0:ab:30:03:12:18:48:78:78:a1:eb:c3:07:3f:
8c:3d:77:0c:d9:df:1a:a7:d8:e8:bc:e5:5b:0e:35:07:0d:da:
83:e2:05:ca:2e:dd:53:29:f1:5e:33:b0:c5:9d:e9:65:55:3d:
41:ba:5a:c9:33:84:e2:ec:52:88:d1:8e:6d:57:32:82:32:f9:
34:3d:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:37:42 2025 by rpki-client