Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa
File: AS151583.roa (raw, json)
Hash identifier: RUTd2T8YhudlXLdGYALHYnSUrmPDNufTdwQKL9w9gVo=
Subject key identifier: 7C:EB:2D:E4:91:25:88:A7:6D:C4:FD:C9:33:7B:09:7C:E0:6E:B3:64
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 599BB939D777BC525516C5EF867E302705ECC39A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa
Signing time: Thu 12 Sep 2024 10:00:00 +0000
ROA not before: Thu 12 Sep 2024 09:55:00 +0000
ROA not after: Thu 11 Sep 2025 10:00:00 +0000
asID: 151583
IP address blocks: 103.236.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9b:b9:39:d7:77:bc:52:55:16:c5:ef:86:7e:30:27:05:ec:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 12 09:55:00 2024 GMT
Not After : Sep 11 10:00:00 2025 GMT
Subject: CN=7CEB2DE4912588A76DC4FDC9337B097CE06EB364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:70:e9:61:44:7a:ba:90:2f:8f:e3:be:8f:
f5:16:ea:98:81:a0:38:5f:76:f2:95:ac:39:77:eb:
ee:29:29:12:e4:a6:3f:7b:4a:6f:7b:3c:7e:bd:54:
2c:e5:c1:20:1e:a3:50:f2:c3:33:e7:4b:d8:6d:18:
5f:7c:d1:66:11:a3:fc:6a:d3:ef:05:88:2f:d5:a5:
e6:38:35:e8:dc:f7:20:d8:6d:67:62:ec:a8:48:58:
42:77:13:76:77:d4:6f:c0:92:8c:17:6a:9a:27:c5:
7a:9e:0f:42:9a:b3:fa:f1:55:52:d3:c5:75:3b:11:
3d:7c:8c:a4:54:55:be:c7:86:12:50:f9:ce:e3:c5:
9f:3c:84:5f:3f:f0:af:15:4e:7a:41:8d:78:a2:0b:
0a:6e:e2:c3:19:89:03:da:63:55:13:8e:1c:d7:8c:
fe:52:28:15:2a:b0:c9:dc:81:c8:37:a6:08:2c:5f:
d0:b2:02:d8:33:08:5d:90:bd:ff:63:8b:d9:84:6b:
89:aa:21:d4:7f:f4:72:d4:ed:ee:cd:18:fc:8b:5b:
93:06:8f:63:bf:c6:32:3d:48:e0:87:54:64:37:68:
ca:66:ee:47:ff:77:2d:35:86:7f:fa:01:1d:d0:b3:
cf:87:8d:ef:a1:00:04:39:ad:93:59:0a:ea:27:b7:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:2D:E4:91:25:88:A7:6D:C4:FD:C9:33:7B:09:7C:E0:6E:B3:64
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a9:0f:5f:4b:2a:50:88:ef:ae:ea:24:ae:ea:ba:b4:2b:e3:
af:62:88:f4:76:16:c6:7a:28:54:9c:a7:d8:71:87:3f:32:d6:
f9:8f:44:34:07:db:74:88:ee:46:7e:4a:21:d2:b0:46:55:4b:
c8:60:72:64:03:6b:00:a1:e3:3c:92:26:9c:b3:81:c9:9b:e0:
87:08:c7:36:e0:20:f0:bf:2f:69:0d:b8:60:81:e9:47:69:cb:
a7:6e:d4:62:55:e0:6a:4f:6a:6e:85:43:61:6b:5e:d2:9e:4e:
8f:ac:5b:b0:72:a3:7a:a8:b3:d0:08:60:f9:ce:b5:ae:56:80:
b2:ec:41:5c:8b:34:8b:40:52:8a:7c:1a:e6:02:bf:7a:8b:b2:
9f:14:2c:d4:f2:88:6b:ff:a4:af:ff:5f:f1:7f:81:15:a6:12:
33:eb:ab:e5:1c:61:b9:4b:ca:c6:12:7e:e6:50:98:33:67:2f:
f8:ba:cb:f4:2b:36:5b:28:a5:a4:17:27:65:f4:ff:49:f8:d8:
fd:b9:29:31:b4:8d:f2:79:cf:23:3e:7e:9a:01:e4:9e:14:c4:
7e:a2:41:3b:4f:00:40:b8:e7:28:aa:82:8d:35:91:9c:95:86:
ed:30:15:c7:86:32:83:5b:fb:11:80:a4:c2:b5:f2:95:12:2f:
55:b7:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:43:23 2025 by rpki-client