Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
File: AS147129.roa (raw, json)
Hash identifier: vlx7lgZPaCDUaYEFxcXDyaQ+d842h7ASO0RRc2iYFJU=
Subject key identifier: 7A:C5:72:66:B7:FD:9A:14:BA:26:5D:FB:1B:87:50:FE:51:69:11:71
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 133130E60589DA119ECE24EE3E472B1892E451EF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
Signing time: Tue 10 Dec 2024 05:00:20 +0000
ROA not before: Tue 10 Dec 2024 04:55:20 +0000
ROA not after: Tue 09 Dec 2025 05:00:20 +0000
asID: 147129
IP address blocks: 103.176.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:31:30:e6:05:89:da:11:9e:ce:24:ee:3e:47:2b:18:92:e4:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:20 2024 GMT
Not After : Dec 9 05:00:20 2025 GMT
Subject: CN=7AC57266B7FD9A14BA265DFB1B8750FE51691171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:b3:c0:bb:ce:74:82:80:c0:8b:f2:48:17:
8a:bf:90:0f:82:fe:d8:00:b0:de:c1:be:b5:73:db:
22:88:2d:35:d0:a5:aa:67:59:47:9d:5b:e8:fa:3f:
77:68:a9:1f:0b:b2:af:90:eb:87:b1:34:ad:74:49:
9b:db:a5:87:01:92:12:d2:5d:fc:6f:7f:a1:7e:5b:
e0:f2:09:b6:7c:52:8a:5e:8f:de:df:35:21:f9:c7:
67:ef:90:2e:c8:9c:db:63:58:c0:9e:9e:7b:fa:e5:
c4:15:7c:8e:78:66:fe:54:82:d1:c1:36:da:bd:dd:
ab:ca:98:e4:5d:98:a5:13:d1:fe:6a:db:8d:3e:ef:
c9:a5:77:73:fd:09:f4:01:03:82:5d:47:64:69:7d:
7b:96:df:04:b4:ae:48:ba:cf:c2:52:c2:47:3a:48:
55:a6:6d:9a:3d:b9:92:09:3f:7d:00:22:99:a3:39:
ce:bf:06:a4:44:7a:b9:26:ae:08:f3:24:fc:e4:77:
16:cd:c6:00:27:72:08:d8:54:e8:f5:5a:80:83:0b:
35:bb:89:14:ac:c7:70:be:bd:aa:89:47:83:ca:1e:
3e:33:ad:19:91:25:9c:03:d0:6a:12:c4:89:83:5e:
de:25:26:de:5f:cc:67:6d:6a:5a:0b:5d:ac:b4:ea:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:72:66:B7:FD:9A:14:BA:26:5D:FB:1B:87:50:FE:51:69:11:71
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d2:c3:b5:c9:8c:88:e5:1e:48:ab:46:f3:ea:b1:25:f5:a6:
36:a3:84:ec:46:6d:ae:1a:41:51:d6:9c:9c:35:3e:f5:fd:d9:
ed:2c:19:f1:a1:80:b4:1f:85:ce:f7:ef:f3:d3:9e:97:37:f5:
db:c3:76:ea:20:6e:ce:19:69:3c:e4:4a:56:8d:85:ca:c2:78:
58:e5:f7:ac:27:75:a9:a0:10:c5:26:b9:f2:9a:e5:f0:39:62:
f5:0f:71:d4:c3:03:9f:61:4c:35:b8:9d:21:97:58:b0:6c:7f:
da:2d:1b:a1:64:78:50:70:1c:66:54:b7:11:fc:19:d7:67:1c:
c1:2f:fd:58:87:b5:bb:1e:97:c2:38:69:e7:1a:34:f8:70:61:
b0:dd:1d:f2:b6:2a:7a:e5:32:63:8c:79:40:03:4e:9d:2f:ac:
79:28:6b:8d:81:6d:81:6d:c1:36:b2:b7:0e:b3:c5:51:86:24:
0b:5c:b7:0a:5f:5b:60:4a:71:34:d3:06:c1:36:b2:5c:9d:ae:
ab:10:47:90:2c:c7:79:ea:c2:f1:55:22:31:74:b2:ee:b8:47:
6b:60:b9:e3:f4:2f:d7:1b:67:0b:9a:a7:fc:91:8f:2e:0a:49:
e6:37:e2:bd:29:3a:bb:74:24:58:a8:81:b8:4c:6c:6c:03:a6:
2c:c6:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:40:06 2025 by rpki-client