Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa
File: AS153155.roa (raw, json)
Hash identifier: //3HcunTJau2rPKynW6ZsKKo6NnaB5JPdh8nyGOKfWg=
Subject key identifier: C2:B3:13:60:66:6C:7B:3C:A6:E4:6A:DE:40:09:4A:03:65:35:1C:42
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4397FAA186023DC46E58D9F4620BFF44CB916008
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa
Signing time: Tue 31 Dec 2024 01:40:50 +0000
ROA not before: Tue 31 Dec 2024 01:35:50 +0000
ROA not after: Tue 30 Dec 2025 01:40:50 +0000
asID: 153155
IP address blocks: 2001:df4:8fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:97:fa:a1:86:02:3d:c4:6e:58:d9:f4:62:0b:ff:44:cb:91:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 31 01:35:50 2024 GMT
Not After : Dec 30 01:40:50 2025 GMT
Subject: CN=C2B31360666C7B3CA6E46ADE40094A0365351C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:73:68:5e:e5:6f:a4:6c:be:b2:9d:23:37:
43:7f:a0:df:26:27:11:51:8e:99:df:28:6a:cf:50:
14:68:2d:8d:51:90:bf:22:9b:53:40:c0:7a:79:b7:
8f:d4:8d:8c:2d:1c:c1:cd:eb:76:94:61:f9:37:3e:
6f:c0:d6:b3:5d:08:db:e6:ba:9a:f2:c4:e0:f1:91:
a9:a9:a1:74:e3:1e:2d:70:15:a1:ce:5e:9e:8b:27:
f6:be:d3:2b:8b:06:73:fd:87:1d:f9:a0:97:f0:a8:
b2:d5:ad:a4:0c:16:45:32:10:b1:b7:63:72:f3:11:
a9:b1:48:26:a5:33:3e:0b:65:fe:28:7c:e8:52:fb:
51:ad:d3:90:e1:37:60:42:31:33:af:14:de:cf:80:
fe:7d:08:ba:74:1c:89:02:4b:9c:99:c7:97:26:fc:
47:fd:0f:60:fd:8b:d4:a4:2b:a8:a2:ab:33:19:6e:
70:22:cc:a2:e0:a7:9c:3d:9f:ee:e4:dc:e7:52:02:
93:9c:89:f6:77:df:11:b1:1e:b0:04:84:12:23:7d:
a0:ec:70:3f:b2:9b:65:54:b6:7c:99:25:55:e6:b3:
c6:9c:e5:e5:f7:b1:26:9c:c3:7a:d3:17:25:80:99:
f2:3a:22:85:0d:3e:e8:4b:c8:7f:a5:58:6e:ed:d0:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:13:60:66:6C:7B:3C:A6:E4:6A:DE:40:09:4A:03:65:35:1C:42
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8fc0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:d9:1d:79:07:24:f5:cf:16:b7:f6:dd:71:7f:c5:b8:fd:fa:
ea:18:92:16:29:40:c1:7b:78:d6:0d:53:f2:62:6b:34:5c:a8:
0b:1b:c4:48:42:e6:9f:b7:2c:54:7d:84:d6:bd:0a:20:a0:1b:
29:2c:dc:f7:23:be:2b:e9:21:e2:6e:c5:75:04:a7:1e:6e:d9:
25:d0:34:67:69:f0:06:73:65:77:04:b3:d6:39:62:31:66:48:
bb:9a:b3:b1:bc:2f:ad:a8:ae:05:c6:09:07:b4:a6:8f:a5:b3:
d4:5b:27:7b:ad:9e:3b:9a:c7:04:b4:0c:40:f0:0d:72:21:1b:
d8:aa:b8:2a:74:42:b0:aa:88:0b:2c:1d:27:7c:69:27:cd:7d:
26:d5:eb:ce:8f:24:73:ab:31:91:79:40:cd:4c:1e:51:e5:b0:
1f:eb:f3:93:96:7d:11:83:0d:4f:8a:96:84:23:18:42:48:94:
0e:cf:fc:33:3c:f8:59:7e:ca:e3:ea:29:2d:ff:d1:cb:12:43:
35:cd:58:9b:3b:71:ba:02:68:8e:40:ac:17:2f:db:2c:d2:04:
fa:c1:2e:b1:12:13:05:41:e7:38:8e:34:b3:5f:01:84:39:e7:
fe:34:89:c3:79:55:1e:7a:7b:4a:98:f4:bd:35:14:7a:b7:70:
ba:87:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:45:34 2025 by rpki-client