Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa
File: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (raw, json)
Hash identifier: lJ+K/DlAtKOy+yqWkqi+uYB2zojkRgURiGFnKXNpVGQ=
Subject key identifier: 98:B5:37:39:99:71:6D:C6:8A:3D:99:B5:1A:80:F6:95:C4:42:FA:E7
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 31817B28F364B1D031F4E6AF2C01F14D1B7D8074
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa
Signing time: Tue 10 Dec 2024 10:27:50 +0000
ROA not before: Tue 10 Dec 2024 10:22:50 +0000
ROA not after: Tue 09 Dec 2025 10:27:50 +0000
asID: 153140
IP address blocks: 160.187.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:81:7b:28:f3:64:b1:d0:31:f4:e6:af:2c:01:f1:4d:1b:7d:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 10:22:50 2024 GMT
Not After : Dec 9 10:27:50 2025 GMT
Subject: CN=98B5373999716DC68A3D99B51A80F695C442FAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:7a:69:6f:7d:14:3f:cf:d4:fc:7f:4f:9e:
3d:16:d0:b6:d1:f9:c6:56:b1:9d:53:56:3b:08:4b:
6e:a7:af:37:9e:7f:4a:38:0e:39:ef:e8:35:e5:23:
86:5d:b0:bd:9a:67:8b:f9:d9:1f:e8:e3:13:71:53:
29:22:f3:39:33:83:5d:90:76:f0:ab:cd:a8:5d:18:
5a:37:04:e9:f0:df:3a:c2:a8:04:b8:a0:c8:fa:7e:
5f:d9:0d:d6:cc:01:7a:85:fa:d6:9a:6c:15:08:07:
a9:6f:02:a6:88:42:9f:0e:32:1b:c7:5b:8b:db:38:
44:53:7c:43:71:ce:23:b2:c5:b0:21:46:2d:36:ae:
7e:57:ff:2c:e1:4a:fe:3c:84:7b:3b:92:16:c0:a9:
3d:1b:b3:d0:f6:62:37:fb:ff:c9:1f:3f:cd:72:9e:
c0:d0:2d:aa:18:38:6d:2e:d6:6d:0a:ad:89:2d:db:
57:79:98:49:fc:40:01:d1:7c:aa:81:25:4c:54:b4:
51:af:b2:9c:de:e0:1b:56:f8:7c:02:27:a9:54:ba:
ac:70:c5:87:73:23:e2:8e:b6:95:12:a5:d7:08:b7:
f0:72:84:2d:46:33:50:b8:41:d0:91:c0:07:3e:ba:
33:6f:a1:cf:07:0e:d8:36:fc:d7:45:6e:eb:b6:6c:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:37:39:99:71:6D:C6:8A:3D:99:B5:1A:80:F6:95:C4:42:FA:E7
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b8:45:da:56:87:5e:67:5f:a3:68:2b:bf:2e:d6:55:72:3f:
b7:27:53:39:29:55:6d:eb:3a:ed:21:51:b3:00:5c:d0:21:f9:
54:16:e0:21:ed:20:52:67:f8:64:08:74:90:84:35:ca:33:f6:
b3:b7:fe:fb:b7:26:ab:85:2d:9f:f1:d5:22:c9:56:4e:e9:2f:
71:b5:80:93:b3:f4:27:9b:d3:a9:c0:5d:05:d9:3c:33:eb:0e:
51:db:c8:7b:cb:d5:9b:92:5c:db:5e:d9:39:f8:a6:3b:b1:30:
c2:fc:c6:3d:56:f8:7c:be:ed:5b:76:b6:ba:62:1d:8b:30:f6:
bf:59:64:c7:98:f8:90:ab:15:3b:75:e7:f7:64:68:c8:6f:9c:
dc:d6:d6:fe:b0:94:99:03:4f:ca:79:e2:ac:60:6c:9a:25:2c:
fb:0f:d7:e6:3a:0e:c5:be:8b:12:3d:4e:c2:1f:29:f5:83:99:
9f:b6:ae:93:6a:47:55:a6:30:5d:3e:3d:ec:1f:fa:17:d7:c8:
41:6d:3a:44:57:5a:ca:4f:15:19:4d:3a:41:c9:52:c5:dc:20:
ca:16:19:7c:62:1b:c7:ad:65:9a:79:95:6c:cc:32:1a:1f:91:
6b:9a:05:45:22:39:a5:04:c7:bf:29:14:e2:74:97:4d:ed:ab:
98:47:79:57
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUMYF7KPNksdAx9OavLAHxTRt9gHQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIxMDEwMjI1MFoX
DTI1MTIwOTEwMjc1MFowMzExMC8GA1UEAxMoOThCNTM3Mzk5OTcxNkRDNjhBM0Q5
OUI1MUE4MEY2OTVDNDQyRkFFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANBjemlvfRQ/z9T8f0+ePRbQttH5xlaxnVNWOwhLbqevN55/SjgOOe/oNeUj
hl2wvZpni/nZH+jjE3FTKSLzOTODXZB28KvNqF0YWjcE6fDfOsKoBLigyPp+X9kN
1swBeoX61ppsFQgHqW8CpohCnw4yG8dbi9s4RFN8Q3HOI7LFsCFGLTauflf/LOFK
/jyEezuSFsCpPRuz0PZiN/v/yR8/zXKewNAtqhg4bS7WbQqtiS3bV3mYSfxAAdF8
qoElTFS0Ua+ynN7gG1b4fAInqVS6rHDFh3Mj4o62lRKl1wi38HKELUYzULhB0JHA
Bz66M2+hzwcO2Db810Vu67Zs628CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBSYtTc5
mXFtxoo9mbUagPaVxEL65zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM4MzcyZTMyMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzQz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC75zANBgkqhkiG9w0BAQsFAAOCAQEAb7hF2laHXmdfo2gr
vy7WVXI/tydTOSlVbes67SFRswBc0CH5VBbgIe0gUmf4ZAh0kIQ1yjP2s7f++7cm
q4Utn/HVIslWTukvcbWAk7P0J5vTqcBdBdk8M+sOUdvIe8vVm5Jc217ZOfimO7Ew
wvzGPVb4fL7tW3a2umIdizD2v1lkx5j4kKsVO3Xn92RoyG+c3NbW/rCUmQNPynni
rGBsmiUs+w/X5joOxb6LEj1Owh8p9YOZn7auk2pHVaYwXT497B/6F9fIQW06RFda
yk8VGU06QclSxdwgyhYZfGIbx61lmnmVbMwyGh+Ra5oFRSI5pQTHvykU4nSXTe2r
mEd5Vw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:51:05 2025 by rpki-client