Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa
File: AS151521.roa (raw, json)
Hash identifier: YKZW7J3HVGz35Q7yREtxZ5eKS7Sxtuaq1n9JX+CxiEo=
Subject key identifier: A8:A2:E1:4A:BC:78:BA:69:37:EE:D3:0B:80:8C:D0:86:BA:8E:81:E4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 457039F83BDF6CD86A2194D2E3C60675E047BBD0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa
Signing time: Mon 11 Nov 2024 02:51:22 +0000
ROA not before: Mon 11 Nov 2024 02:46:22 +0000
ROA not after: Mon 10 Nov 2025 02:51:22 +0000
asID: 151521
IP address blocks: 103.176.143.0/24 maxlen: 24
103.234.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:70:39:f8:3b:df:6c:d8:6a:21:94:d2:e3:c6:06:75:e0:47:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 02:46:22 2024 GMT
Not After : Nov 10 02:51:22 2025 GMT
Subject: CN=A8A2E14ABC78BA6937EED30B808CD086BA8E81E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:39:a1:b3:69:6e:04:bf:43:fa:44:5f:69:
d4:e2:be:b2:e8:20:b8:61:28:78:c6:c7:f4:2e:33:
4e:04:3d:ac:80:43:37:a1:4e:71:20:c1:ab:22:97:
89:8e:6e:a7:7c:38:fa:39:70:99:46:bb:d2:75:5f:
20:f2:67:fc:f9:e5:03:0c:cc:7b:ad:6a:4b:d4:cc:
55:df:ec:5c:5f:59:91:bc:a2:d4:ce:03:3e:84:0e:
56:f2:1c:25:2e:dc:25:c6:7f:53:f9:e7:80:22:b9:
a5:20:93:b4:8b:70:eb:33:83:88:dd:1e:d4:f9:97:
39:d0:91:27:46:cc:22:1d:8c:be:9f:72:6a:5a:ce:
62:08:23:de:54:e5:d8:df:6a:ed:b8:fb:22:60:c8:
ea:3c:1f:89:1c:5e:49:79:4e:9b:b9:18:c5:66:ee:
d1:c4:4e:18:ad:27:c1:3f:ac:0a:09:78:31:84:70:
ce:a6:ee:b1:ec:b0:88:d6:b3:77:2a:db:c0:69:db:
00:62:dc:ec:82:3b:80:00:2f:fa:78:67:cd:b0:d7:
89:13:7a:f0:10:45:d9:24:d2:1e:55:95:ab:92:90:
fe:4f:d7:77:f7:5e:eb:8f:f9:4c:c0:4a:21:74:63:
54:9a:ce:36:64:91:c8:f3:a2:83:0f:89:ae:a8:be:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:E1:4A:BC:78:BA:69:37:EE:D3:0B:80:8C:D0:86:BA:8E:81:E4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.143.0/24
103.234.34.0/23
Signature Algorithm: sha256WithRSAEncryption
66:a2:6c:cd:68:a5:71:89:84:e8:a9:fa:d3:83:e9:88:b1:3c:
48:81:3f:6f:da:02:90:ab:47:10:06:3c:99:cc:b5:e0:f0:80:
3c:0a:eb:f7:df:dd:f4:0f:d3:87:59:a1:8d:b5:9f:45:bc:e8:
53:55:2f:ea:ed:32:3f:af:11:56:c5:3d:07:f2:38:13:41:9c:
e6:a4:2b:03:0f:52:2d:5e:71:cb:5f:84:10:33:c5:7d:94:26:
d7:03:d8:da:a0:12:b2:0b:09:e4:39:db:fd:d8:2b:a5:0f:d6:
2f:34:92:07:fb:db:b7:75:94:ce:a5:1d:da:e6:83:45:d8:7b:
48:f3:b2:51:1f:0e:42:c2:df:57:96:c8:bd:00:e0:25:c3:d0:
30:4c:c7:cb:ed:bc:20:93:5f:b4:40:71:a2:7d:1c:28:7e:a1:
f2:cc:20:c8:dc:4e:3b:64:62:91:72:37:cd:e5:77:10:a9:36:
fd:13:ce:c6:9f:d5:34:76:e5:ca:ad:d1:28:c2:1d:92:ab:49:
ef:53:4a:28:ef:16:a5:10:ca:41:b6:6d:ed:77:7e:6d:46:ba:
39:d3:d9:fe:e4:28:ce:b0:5d:47:97:49:17:bc:01:b9:0b:fd:
86:dc:2e:77:8b:1a:a8:14:06:95:45:9a:82:fc:09:fc:3e:f5:
19:14:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:45:34 2025 by rpki-client