Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa
File: AS150554.roa (raw, json)
Hash identifier: /mwj31+VMmxpTD23SeEhpU0i/eloHOkkY6Tq2JS2sFw=
Subject key identifier: D8:38:16:79:0C:65:D6:E2:63:64:66:4D:FD:FE:6E:DD:E1:77:7B:F9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1B977750289658E0918F8FCD910057882ABB427C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa
Signing time: Tue 05 Mar 2024 03:01:12 +0000
ROA not before: Tue 05 Mar 2024 02:56:12 +0000
ROA not after: Tue 04 Mar 2025 03:01:12 +0000
asID: 150554
IP address blocks: 2001:df3:83c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:97:77:50:28:96:58:e0:91:8f:8f:cd:91:00:57:88:2a:bb:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 02:56:12 2024 GMT
Not After : Mar 4 03:01:12 2025 GMT
Subject: CN=D83816790C65D6E26364664DFDFE6EDDE1777BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:b2:7b:6c:c8:3a:08:04:0c:b6:2b:3c:5c:
dc:8d:6c:f8:d9:5e:23:f8:bc:06:77:16:36:d5:1a:
b9:2d:d3:36:8f:b7:ca:ee:e3:45:b2:76:dd:83:3f:
20:c3:ed:44:ea:7c:04:c3:75:4c:34:84:f5:33:de:
72:7e:8f:96:85:0e:86:1b:2c:c8:d9:02:0a:bb:14:
92:bb:12:a5:b6:86:5e:46:86:75:89:89:31:b7:bf:
aa:79:e3:c7:1e:e2:6f:23:08:9c:07:2b:1c:72:90:
35:38:02:8c:db:37:73:e2:78:f9:1f:d5:fb:bd:63:
e4:9d:40:43:c3:42:d2:d4:84:4b:9f:e4:b1:45:85:
27:a0:a2:c8:da:3b:f7:a8:96:c3:fc:4f:79:df:5b:
0d:ea:8d:b5:fc:65:62:cc:4e:eb:ac:11:58:02:30:
ba:47:29:13:21:85:11:af:72:3f:bf:de:59:6f:61:
9f:9f:d3:f9:11:98:6b:56:0b:4b:49:13:15:21:79:
04:93:af:4e:3c:99:00:0d:fe:bb:93:b5:0f:50:83:
3c:75:f1:33:21:df:ca:b5:09:ad:1b:90:6a:01:35:
cf:7e:31:1e:80:27:71:18:de:7e:e7:d2:65:cf:a4:
3b:87:8c:a7:3a:c5:5f:49:05:60:28:82:d5:1a:b5:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:16:79:0C:65:D6:E2:63:64:66:4D:FD:FE:6E:DD:E1:77:7B:F9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:83c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:50:8c:1d:00:eb:94:ae:0c:fd:77:d8:65:f4:9a:4e:dd:20:
8b:2c:32:a2:81:7c:c5:4b:52:32:62:21:9e:46:a1:4f:f6:51:
48:e6:c5:21:72:f6:92:8a:fb:3c:5d:a8:7b:6d:17:39:a1:f6:
51:e7:39:ee:ea:c8:b4:a0:d1:af:77:26:01:a4:86:dc:8e:6b:
c6:f7:0b:c6:59:2d:5a:d3:85:00:42:50:c8:e2:ca:d6:cc:36:
6a:62:e5:e1:34:d5:38:3f:69:19:55:49:a4:bc:e5:94:48:4a:
91:cd:4d:40:e7:5b:a4:77:9b:33:23:71:5d:65:01:ff:37:e5:
f7:7d:8e:1b:67:14:c6:1b:26:6a:0d:6e:37:a2:28:9d:17:53:
35:42:b6:d7:1c:0b:ba:47:13:5e:8a:39:b1:a6:e1:74:78:b6:
b7:e9:1f:67:c1:ae:3b:71:3d:17:c8:de:74:28:95:8f:ce:47:
af:bb:50:dc:ff:90:f2:d7:3d:e9:4d:e1:9c:8f:6b:e8:78:58:
ea:dd:17:a3:d1:2c:68:cf:a1:df:89:ed:34:c9:1f:51:91:fd:
a8:79:12:91:aa:c0:be:3e:db:13:b9:69:bd:1c:61:7e:3c:a6:
9f:b5:88:93:b7:49:54:81:4d:7b:cd:50:a3:9f:d2:e1:09:75:
27:1b:17:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:40:09 2025 by rpki-client