Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa
File: AS151993.roa (raw, json)
Hash identifier: +v+u9DHJonyvk35ZVMF24gTz4IeDDQFFZaFXd/aLb80=
Subject key identifier: C9:4D:5E:71:66:B4:2C:68:1F:14:76:2B:3D:08:A4:33:B5:CC:E0:79
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2B818A6E672F94697C4566DEE352946D1A8054B9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa
Signing time: Wed 20 Nov 2024 07:00:00 +0000
ROA not before: Wed 20 Nov 2024 06:55:00 +0000
ROA not after: Wed 19 Nov 2025 07:00:00 +0000
asID: 151993
IP address blocks: 203.111.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:81:8a:6e:67:2f:94:69:7c:45:66:de:e3:52:94:6d:1a:80:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 20 06:55:00 2024 GMT
Not After : Nov 19 07:00:00 2025 GMT
Subject: CN=C94D5E7166B42C681F14762B3D08A433B5CCE079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:b7:b4:fe:0a:ea:25:0f:bd:f4:5f:50:11:
6f:c5:5d:de:52:43:25:cb:2c:74:b2:b4:d4:9a:7c:
1c:67:e4:76:c6:3f:28:1e:46:20:da:0d:fc:c5:d1:
74:ab:b6:39:17:a8:a8:43:4c:c6:8c:b0:e5:38:f0:
7d:15:34:00:9f:27:4a:b2:df:5f:00:a4:31:88:cd:
c2:cd:56:9d:a9:87:f5:be:1e:be:59:5d:37:31:4e:
17:0e:01:5b:93:3d:67:90:5c:a5:a5:0b:01:7b:0a:
9b:3b:26:55:0f:e3:d5:35:54:2f:0b:b1:07:de:93:
8d:cd:4c:5d:94:89:73:ae:94:f4:72:03:76:e3:08:
82:39:9e:dd:5d:85:b8:b4:b1:a9:e9:d0:fe:1c:b1:
b1:10:b2:dd:e9:a4:23:f1:45:8d:0d:ba:93:a0:4f:
9f:80:a2:9e:e3:d3:77:8e:2d:e5:b2:f4:4c:e5:ad:
f3:c7:32:74:0e:46:c1:eb:99:46:ce:64:b7:5d:4b:
9a:a1:6d:df:7c:45:ee:38:0d:27:8c:52:9a:29:44:
95:72:98:87:08:0d:5b:01:fd:49:ba:95:46:bf:a5:
c3:95:a2:d2:9b:9c:3a:ed:17:75:45:ed:56:77:73:
16:21:db:61:2d:d6:44:0c:3e:95:e1:9b:cd:7e:90:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:5E:71:66:B4:2C:68:1F:14:76:2B:3D:08:A4:33:B5:CC:E0:79
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.111.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2e:cf:cd:f7:c8:94:18:7d:2a:b9:77:85:d0:d2:b6:2c:36:
5c:71:3e:b6:4f:ae:2f:13:a1:9a:94:3d:08:c7:43:47:d3:c4:
f0:bb:ed:ee:31:4a:af:08:95:eb:93:5e:62:f9:f0:b0:ef:59:
e7:e9:91:9b:30:ec:f6:37:d9:a5:2a:7b:0d:59:ed:97:3a:35:
63:81:09:76:67:b3:6a:7a:f9:45:70:13:99:d3:f0:aa:29:d2:
3d:64:80:d6:fc:59:e2:f2:b3:92:a9:3e:3a:df:bb:92:26:7c:
6f:0e:c2:2e:7e:17:1f:19:78:d7:14:14:c0:68:07:92:f1:f5:
45:dd:ae:4e:05:0b:b9:a6:89:19:f7:9e:ec:64:11:d7:9f:b0:
e7:20:3b:37:97:75:a8:60:c0:b8:2d:a2:06:b2:f9:a5:2a:a9:
d3:b2:9f:4f:5e:2d:03:b8:78:d8:e6:00:8c:0a:50:f7:21:b9:
19:a9:5a:28:c4:3c:18:c8:25:ca:5b:03:01:5a:21:26:ac:10:
8b:66:14:00:b7:16:f6:6e:8d:33:9a:80:87:4e:1e:ef:62:7d:
a3:cc:c3:67:d6:d8:0e:0e:1a:43:81:de:8e:0f:c4:92:97:77:
6d:98:44:bd:76:f7:f1:fb:ab:cd:49:cb:01:f9:54:b0:b3:17:
32:4f:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:43:55 2025 by rpki-client