
Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa
File: AS149676.roa (raw, json)
Hash identifier: mvR6NSJULHzOlcE9hhoZnHnqJ7QC5iRpIDJCO7qyDMs=
Subject key identifier: 2B:79:9F:F9:3B:0D:AA:23:E3:87:AF:18:B5:E8:B9:75:41:4A:70:E1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 096D04621A7BFF3A8E9D244B6EA0FB6EFE2176C2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa
Signing time: Thu 14 Nov 2024 10:02:08 +0000
ROA not before: Thu 14 Nov 2024 09:57:08 +0000
ROA not after: Thu 13 Nov 2025 10:02:08 +0000
asID: 149676
IP address blocks: 2001:df1:cd40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6d:04:62:1a:7b:ff:3a:8e:9d:24:4b:6e:a0:fb:6e:fe:21:76:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 14 09:57:08 2024 GMT
Not After : Nov 13 10:02:08 2025 GMT
Subject: CN=2B799FF93B0DAA23E387AF18B5E8B975414A70E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:2c:19:94:b1:39:0b:70:d0:99:5b:6f:52:
e6:c1:c1:45:bd:e7:70:2c:69:31:b0:fc:86:7b:de:
68:1f:5a:1d:e5:78:0b:23:06:20:d8:35:3d:06:8e:
f8:ad:34:1f:fe:88:ca:67:bd:22:9e:65:74:54:6b:
e6:30:ea:e5:93:5c:45:6b:33:c1:ae:92:d9:8b:8d:
af:41:0d:46:33:39:a5:27:3f:15:eb:5c:f1:86:de:
51:f0:d1:81:ce:cc:c4:6d:02:4f:1b:2b:e7:13:b1:
0c:be:0d:63:0b:f4:fb:eb:86:e4:8e:d0:96:27:38:
9c:77:e5:f8:3b:81:35:81:f0:5c:98:85:92:45:9d:
3f:39:8c:cc:0b:32:3f:60:9c:1c:51:a9:da:7e:69:
25:07:9d:d4:4e:5d:f6:1d:b7:52:d6:0d:3f:73:08:
c6:92:02:96:d5:f4:9f:a0:4c:6a:8a:92:e0:7f:8e:
0d:72:f3:f5:6d:d4:14:a1:45:16:c4:7c:09:92:74:
15:6b:ca:3e:ce:1b:4d:5a:43:0c:e3:85:c6:67:2b:
dc:e1:b0:8d:9d:75:f5:45:40:0a:00:2b:b5:1a:2c:
c2:04:a3:64:01:18:e0:3d:ed:8c:1c:e7:a4:e5:3e:
fb:55:aa:ba:56:4b:b1:93:96:ac:04:33:ac:75:d6:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:9F:F9:3B:0D:AA:23:E3:87:AF:18:B5:E8:B9:75:41:4A:70:E1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:cd40::/48
Signature Algorithm: sha256WithRSAEncryption
2c:09:c1:c3:51:94:44:ae:fe:3c:c5:c0:04:ea:00:d6:48:ab:
f1:88:eb:83:8b:cd:43:d7:f2:6c:27:31:e7:85:c4:11:08:e0:
c8:a2:c5:f2:71:c2:a1:51:6f:3c:aa:ea:16:d3:04:cc:18:ec:
46:c8:48:75:da:4a:29:d6:c0:c0:a9:5a:ce:2c:7c:ec:08:ea:
c5:b1:77:f9:ce:78:d8:0a:e5:5c:69:06:4d:28:01:16:f8:6b:
38:35:60:74:7d:6d:01:7b:fd:66:f5:45:82:8a:b3:a4:c4:69:
dc:d8:ec:c2:9f:30:23:72:aa:18:7a:e3:6e:21:f0:84:f7:d7:
e5:79:2b:49:20:7b:4f:17:80:3f:f3:eb:96:bc:a8:bc:80:a1:
c7:cb:2c:1c:2d:36:fc:c8:b7:45:da:b9:ff:28:a7:ed:35:50:
64:ad:b0:6a:e2:d7:7b:3d:cd:46:3d:2a:8a:16:9f:f3:99:fa:
7b:5a:3f:ce:5a:f1:65:ae:c9:57:ad:37:2f:32:35:46:ef:0d:
01:9b:a4:15:20:98:29:ed:a2:01:f7:83:9d:85:b8:2b:28:6a:
29:5e:8d:e0:6f:0c:25:fb:c5:fe:4f:81:38:b3:5f:ad:b9:1c:
60:15:a8:d2:86:c4:db:8d:28:8d:7f:0e:c1:04:aa:1d:00:bb:
28:0c:82:ce
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUCW0EYhp7/zqOnSRLbqD7bv4hdsIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExNDA5NTcwOFoX
DTI1MTExMzEwMDIwOFowMzExMC8GA1UEAxMoMkI3OTlGRjkzQjBEQUEyM0UzODdB
RjE4QjVFOEI5NzU0MTRBNzBFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALpXLBmUsTkLcNCZW29S5sHBRb3ncCxpMbD8hnveaB9aHeV4CyMGINg1PQaO
+K00H/6Iyme9Ip5ldFRr5jDq5ZNcRWszwa6S2YuNr0ENRjM5pSc/Fetc8YbeUfDR
gc7MxG0CTxsr5xOxDL4NYwv0++uG5I7Qlic4nHfl+DuBNYHwXJiFkkWdPzmMzAsy
P2CcHFGp2n5pJQed1E5d9h23UtYNP3MIxpICltX0n6BMaoqS4H+ODXLz9W3UFKFF
FsR8CZJ0FWvKPs4bTVpDDOOFxmcr3OGwjZ119UVACgArtRoswgSjZAEY4D3tjBzn
pOU++1WqulZLsZOWrAQzrHXWo88CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQreZ/5
Ow2qI+OHrxi16Ll1QUpw4TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY3Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfHNQDANBgkqhkiG9w0BAQsFAAOCAQEALAnBw1GURK7+PMXA
BOoA1kir8Yjrg4vNQ9fybCcx54XEEQjgyKLF8nHCoVFvPKrqFtMEzBjsRshIddpK
KdbAwKlazix87AjqxbF3+c542ArlXGkGTSgBFvhrODVgdH1tAXv9ZvVFgoqzpMRp
3Njswp8wI3KqGHrjbiHwhPfX5XkrSSB7TxeAP/PrlryovIChx8ssHC02/Mi3Rdq5
/yin7TVQZK2wauLXez3NRj0qihaf85n6e1o/zlrxZa7JV603LzI1Ru8NAZukFSCY
Ke2iAfeDnYW4KyhqKV6N4G8MJfvF/k+BOLNfrbkcYBWo0obE240ojX8OwQSqHQC7
KAyCzg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:36:14 2025 by rpki-client