Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa
File: AS45312.roa (raw, json)
Hash identifier: C9QxK670oOi9Git6hAe4Cj5/xnYYdDwiVrBjaiU5jr0=
Subject key identifier: 86:1C:57:75:7D:0A:20:42:A7:1B:CA:7F:37:B9:16:C9:90:10:99:1A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0E61FE9CD68EBF6D4655777FA66BF50C13735E7C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa
Signing time: Tue 10 Dec 2024 05:00:09 +0000
ROA not before: Tue 10 Dec 2024 04:55:09 +0000
ROA not after: Tue 09 Dec 2025 05:00:09 +0000
asID: 45312
IP address blocks: 103.134.66.0/23 maxlen: 24
2001:df7:bd00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:61:fe:9c:d6:8e:bf:6d:46:55:77:7f:a6:6b:f5:0c:13:73:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:09 2024 GMT
Not After : Dec 9 05:00:09 2025 GMT
Subject: CN=861C57757D0A2042A71BCA7F37B916C99010991A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:7b:71:b9:94:57:7a:70:40:5b:62:43:cc:
eb:83:6e:e0:1d:df:21:3a:c4:70:52:df:5b:2c:be:
af:f8:72:00:b6:e9:16:27:b3:be:5c:e4:39:0e:b1:
fa:a1:f8:22:b3:47:7a:b7:78:44:19:fc:c5:65:3e:
6a:2c:7c:31:98:ab:84:70:a8:b2:ba:b8:16:98:8f:
2c:36:5a:af:18:4f:d5:58:7f:0d:cb:dd:03:d6:0c:
9c:24:cd:ec:00:cf:de:08:77:14:62:5d:d4:ac:0f:
c8:0c:30:a7:53:61:d0:e2:88:08:ec:29:df:92:e2:
6c:4e:b3:23:a1:e9:ae:33:c4:41:27:a5:ef:c1:93:
40:51:6b:53:c9:39:2f:d1:11:2c:bd:38:61:be:bc:
d5:85:d0:d2:44:98:62:dd:fd:64:84:fd:c2:7a:ae:
08:cb:b1:c7:ee:0c:06:b3:d0:fa:a3:90:b6:cf:04:
3d:16:0b:b8:fb:b5:c7:60:af:70:67:52:68:10:49:
f5:e7:36:b4:6a:89:54:c6:19:db:a0:70:5d:fe:94:
b7:ef:9c:24:c4:93:b1:d1:fd:0a:35:de:4c:58:48:
c6:82:f4:4a:7d:e9:ae:e4:68:c6:80:49:bd:ea:48:
c0:b3:95:54:31:e9:b6:73:e6:93:c9:11:f6:8e:5f:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:57:75:7D:0A:20:42:A7:1B:CA:7F:37:B9:16:C9:90:10:99:1A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.66.0/23
IPv6:
2001:df7:bd00::/48
Signature Algorithm: sha256WithRSAEncryption
44:47:a5:90:6f:34:42:27:7f:46:c4:1f:24:01:99:98:bd:1c:
0b:47:d1:71:86:b9:cc:5c:5f:ae:40:ba:bf:20:94:07:a2:ca:
4a:32:02:bb:c1:07:3a:3c:ba:2d:50:24:1d:d4:79:48:95:a1:
b9:61:63:62:f9:78:f5:e2:9d:ff:03:1d:5d:0f:2f:a5:f3:ee:
14:98:2a:9d:cf:f9:11:f1:8f:c1:c8:4d:5c:34:b0:b9:55:7f:
61:01:f0:45:c1:41:fa:10:ef:36:c7:05:e0:f2:9e:9b:53:25:
e1:f9:4a:84:a8:d9:df:32:d9:e2:70:6a:5e:88:ad:e8:8d:63:
6a:8a:07:d2:89:26:2f:a1:92:48:c5:d1:9c:d1:0c:1b:d8:21:
0c:91:5b:20:d2:08:d1:09:e4:e9:9d:af:f5:9d:b0:c5:e5:bd:
22:9b:4e:53:9a:54:82:64:6f:46:d4:47:8e:c1:93:62:76:d6:
22:0e:fe:0c:76:1f:97:9e:e8:28:f4:9e:fa:e0:bf:de:05:50:
2c:9a:87:61:50:36:1a:5b:c6:d8:b2:d7:ef:0c:cc:f2:21:8a:
3f:2f:b1:d2:f1:18:c3:22:6a:b2:a7:84:f2:83:fd:33:9d:59:
c6:7a:44:28:ba:09:2b:fe:84:4b:20:94:df:f1:99:e4:5b:46:
e1:d1:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:34:14 2025 by rpki-client