Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa
File: AS150992.roa (raw, json)
Hash identifier: +eucDVX740pW7ani7y165y88lAEvWqfeJoCuDU/Fsw8=
Subject key identifier: 52:42:DB:AD:77:EF:8E:22:7F:CA:6E:DB:0C:81:F3:23:61:EC:82:11
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 141F0C87A9612E677FBD74F5DB94CC2EEECDD87F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa
Signing time: Wed 10 Jul 2024 02:39:47 +0000
ROA not before: Wed 10 Jul 2024 02:34:47 +0000
ROA not after: Wed 09 Jul 2025 02:39:47 +0000
asID: 150992
IP address blocks: 2001:df2:b040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1f:0c:87:a9:61:2e:67:7f:bd:74:f5:db:94:cc:2e:ee:cd:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 10 02:34:47 2024 GMT
Not After : Jul 9 02:39:47 2025 GMT
Subject: CN=5242DBAD77EF8E227FCA6EDB0C81F32361EC8211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:39:ce:1a:6b:8a:8a:37:59:2f:c7:f7:4d:
3f:be:60:70:7d:be:d3:a5:94:f0:8c:e3:ef:ba:95:
a6:26:0e:a3:38:c9:42:03:36:94:9e:a8:ee:b7:ce:
de:b1:2a:51:72:53:2b:ae:80:90:90:49:bf:be:67:
90:97:94:fa:8c:e6:59:8b:54:a8:ad:9b:8f:fb:25:
d3:87:4b:e0:92:f8:45:0d:fc:86:45:63:58:6a:82:
b1:35:51:db:8a:d3:c0:f5:4a:e0:6d:9e:6c:9b:77:
a3:38:61:ec:0a:68:0e:b9:c5:cb:bf:bd:c6:9a:a1:
d4:f6:67:4c:d1:d9:69:21:55:40:28:98:74:50:21:
32:cc:39:29:cc:7b:d4:5a:be:3f:fa:70:6c:b9:11:
e5:7e:af:81:a7:f9:b2:ef:19:ca:5a:07:45:23:39:
ff:f9:f8:22:c4:4c:b6:b3:61:ab:82:ca:7c:a9:72:
df:35:df:ad:ea:b1:96:a6:d8:67:1b:d0:59:cd:d3:
b1:c2:45:ad:ab:25:c2:c1:1f:53:77:2f:58:6b:0b:
29:e7:db:d4:20:9e:00:62:1d:31:c9:f2:02:bf:41:
0f:a1:1e:4f:cc:4e:df:20:b7:ea:6f:65:4b:bd:f9:
42:8d:84:3b:15:b0:86:20:62:ea:e9:c8:b1:b9:ab:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:DB:AD:77:EF:8E:22:7F:CA:6E:DB:0C:81:F3:23:61:EC:82:11
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:b040::/48
Signature Algorithm: sha256WithRSAEncryption
4c:96:dc:d1:2f:1e:4a:3f:b1:a6:b3:86:7e:4d:f0:86:e2:9b:
2a:83:c6:1a:07:ed:e5:90:62:30:e9:51:5c:f8:d9:6d:59:f3:
b5:09:81:68:d6:1c:e2:85:59:0e:d9:d1:88:40:5c:ab:ac:64:
a4:f8:ae:2c:da:b2:4b:74:4f:d8:29:8f:29:5e:e9:43:29:d9:
90:fe:b1:6d:29:eb:61:64:ed:fb:85:ce:33:39:12:53:a0:33:
96:2c:75:b7:bf:33:36:db:f2:8e:a6:55:8d:9d:7b:ff:31:28:
31:64:23:44:d1:30:2c:d0:16:74:e6:46:87:83:37:97:16:d8:
5f:e6:84:f3:9a:01:58:13:51:02:0a:78:6e:64:e0:fe:f5:1b:
95:39:64:b5:9c:98:fa:7b:9d:11:89:10:9b:42:5f:e1:45:4a:
8a:e0:40:d9:ce:6c:e0:ad:f9:ca:fe:42:6f:27:bb:78:71:cf:
c8:aa:07:d3:bd:22:30:79:ac:a9:f1:66:02:c9:48:c4:38:40:
e2:27:69:2b:e0:d0:56:a0:d6:11:00:b4:0f:8b:29:e3:bb:7b:
f7:23:30:59:9e:c7:9c:c0:3f:92:3b:e5:44:a5:43:f8:f8:dc:
da:b8:5c:72:bb:eb:3d:7a:1c:84:ef:a0:0a:d1:34:cb:b5:65:
ea:de:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:59 2025 by rpki-client