Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa
File: 3135372e31352e37332e302f32342d3234203d3e20313530313837.roa (raw, json)
Hash identifier: t2VrTm3ILxBZ28QFDpa2SYM9PMSIbG1LZi1IprZUZRQ=
Subject key identifier: 15:F3:91:BA:19:78:2E:13:5C:0C:F8:37:0D:0E:EA:03:56:CD:AA:FA
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 3F36F3A51780AB9BB3CC6AE715EF3FA52C47EB24
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa
Signing time: Mon 13 Jan 2025 04:00:00 +0000
ROA not before: Mon 13 Jan 2025 03:55:00 +0000
ROA not after: Mon 12 Jan 2026 04:00:00 +0000
asID: 150187
IP address blocks: 157.15.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:36:f3:a5:17:80:ab:9b:b3:cc:6a:e7:15:ef:3f:a5:2c:47:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 13 03:55:00 2025 GMT
Not After : Jan 12 04:00:00 2026 GMT
Subject: CN=15F391BA19782E135C0CF8370D0EEA0356CDAAFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:9a:61:7e:bb:c0:7c:5f:f1:8f:d7:f2:f8:
d9:46:17:2f:c2:39:93:87:d0:81:5b:b4:11:5b:53:
4d:97:c4:1b:5c:3d:d8:e3:16:8d:e4:2d:30:02:ef:
93:7a:23:e4:18:8d:bb:40:b8:73:36:6e:60:59:6c:
7c:58:93:62:42:e7:d8:70:c1:eb:0c:a1:c7:fb:b9:
c6:c4:6a:30:98:3d:b5:e0:7c:a7:4b:f3:0d:9d:27:
cd:a6:d2:5f:52:66:79:94:09:69:7e:b5:65:3d:ec:
37:bd:1e:b8:8e:96:9d:1c:66:95:2c:33:87:d4:20:
0e:f8:bf:80:10:d7:20:7d:0b:6a:71:99:ae:e4:f2:
6d:3d:29:c0:2a:4f:4e:5e:67:95:ba:90:85:eb:ea:
82:9e:7f:a5:b8:82:76:e7:4c:81:f3:77:b7:16:b8:
87:97:7f:b9:eb:6e:f4:87:68:5f:2d:74:e6:77:d3:
86:bc:e8:ce:17:02:0e:e7:c3:f9:11:bb:ff:db:4c:
ba:0e:2d:45:43:5d:49:fc:99:2a:ff:71:f5:81:30:
50:7e:34:fa:d4:1e:9e:85:88:57:ac:bb:8e:c3:dd:
e8:bb:71:bb:26:0f:80:3d:8b:09:a7:e3:a9:eb:66:
2d:f0:0b:ac:2d:e5:7f:53:61:4c:fd:03:e5:52:c9:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:91:BA:19:78:2E:13:5C:0C:F8:37:0D:0E:EA:03:56:CD:AA:FA
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.73.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4e:b4:15:6c:f4:61:54:dc:f8:a0:c6:35:9f:20:0a:3a:60:
fb:60:b1:99:82:84:6c:b8:4f:02:ba:99:7f:30:ba:f3:e2:26:
86:ab:d5:81:c5:1c:ba:8d:64:11:d0:e3:38:6d:d2:60:c2:32:
7d:7c:0a:7a:2f:ef:ca:d6:c5:f5:c6:11:05:9c:b3:5d:ef:42:
b3:c9:d3:54:a9:a7:52:29:23:e6:3e:59:e8:0a:f1:cd:cd:e3:
3b:3a:78:d3:dd:d4:ed:27:68:d0:94:c2:0c:e1:80:c6:5d:b6:
99:4c:8d:63:ea:3a:1e:e0:21:01:8c:aa:71:bd:20:0e:66:5c:
fc:d1:89:58:8c:1a:dc:76:c9:26:f8:b4:7c:30:33:af:b0:ca:
88:61:d6:93:ac:96:33:d0:b5:2f:d6:7f:f3:52:2c:9c:b3:6c:
00:91:68:9e:26:90:87:c5:d7:3c:6f:79:5c:49:c9:a5:a4:4d:
4c:c7:c1:01:5e:6c:0c:ab:01:27:96:ec:d0:65:c1:75:7b:6e:
a4:7c:75:ea:2b:c3:46:fc:35:77:a1:51:c8:4e:b8:e6:cb:a2:
32:18:fc:e4:b9:c3:37:49:39:95:86:36:a1:c4:f9:f9:0a:37:
5d:79:2c:1e:ec:25:79:33:e3:13:c4:d4:d0:0f:7c:13:92:85:
0a:22:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:44 2025 by rpki-client