Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa
File: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (raw, json)
Hash identifier: 5+IAAPz1BfpxLFB6OImwO+9tKy3enuKR84eAuCSq/a4=
Subject key identifier: 81:D4:A6:FC:A5:B0:73:A9:0B:3D:54:D8:E5:41:13:85:B8:77:90:4C
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 379C9B0E2577991883943AD2299D2940AAFA655B
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa
Signing time: Fri 28 Jun 2024 06:33:34 +0000
ROA not before: Fri 28 Jun 2024 06:28:34 +0000
ROA not after: Fri 27 Jun 2025 06:33:34 +0000
asID: 152782
IP address blocks: 160.20.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9c:9b:0e:25:77:99:18:83:94:3a:d2:29:9d:29:40:aa:fa:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jun 28 06:28:34 2024 GMT
Not After : Jun 27 06:33:34 2025 GMT
Subject: CN=81D4A6FCA5B073A90B3D54D8E5411385B877904C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:3c:07:88:e3:f7:28:01:ed:58:e0:b3:7d:
f2:93:e0:3c:af:a3:80:32:21:44:3c:da:a0:60:ca:
99:10:9f:e2:1b:49:94:3b:5b:8b:1f:14:7b:5d:71:
55:87:33:0a:4c:cc:e6:12:c9:f1:95:74:4e:6e:b6:
fd:99:e4:4f:5e:ba:03:7c:f3:3f:16:f0:02:e2:ee:
ca:2e:a0:d2:84:be:60:72:54:6a:25:c9:28:b1:8b:
90:98:8f:d4:33:54:e3:99:ad:89:49:a6:c3:07:e5:
5c:4e:d0:ef:f4:42:5f:02:94:07:9b:d3:a9:5e:91:
f1:1e:35:12:ef:5b:00:bf:33:49:1e:a8:f2:0a:e1:
af:1c:67:0f:9f:26:8e:5e:a8:4c:bf:bb:04:31:ab:
18:d8:d5:f9:2c:68:15:34:10:b4:ee:f8:9b:89:3b:
79:ae:6a:3e:9b:21:c6:66:2a:c0:44:f8:a2:53:f9:
4b:0b:91:f0:cd:52:b8:06:e8:ce:65:c6:64:0c:25:
14:76:1a:28:dc:e6:ba:12:7d:13:b0:51:54:42:7b:
fb:7c:28:25:ac:0e:0f:11:8d:bf:10:b4:cf:56:d6:
c2:d7:9f:57:62:46:d9:83:9f:ee:f5:ef:21:cb:36:
85:56:5f:96:23:b8:5e:2b:6b:17:0d:e4:1b:ab:ad:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:A6:FC:A5:B0:73:A9:0B:3D:54:D8:E5:41:13:85:B8:77:90:4C
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:af:4f:34:71:b6:77:68:88:32:ef:70:08:2c:07:7a:8e:01:
3c:9d:91:d2:37:2c:08:03:6a:29:48:d5:0e:0c:f6:1b:2d:a5:
d1:5c:e1:30:e8:aa:87:65:cb:40:a4:97:cc:3c:90:8b:0a:42:
1b:39:1a:4b:c3:c2:e0:5f:da:89:60:0f:9a:76:fc:89:39:2b:
fe:17:a4:90:39:72:b7:d1:b0:bd:18:b5:20:8b:be:a7:46:15:
53:f4:19:7a:65:db:41:a4:0e:5c:5b:80:85:00:14:4e:ca:f8:
cf:01:9c:f0:6d:21:71:cb:e2:a6:78:ba:d2:8e:87:aa:d4:98:
34:de:05:b0:5f:44:61:62:0e:8c:7a:52:b3:3c:be:7a:c8:db:
a4:e7:c7:e7:3d:0e:52:4d:83:c8:4e:3d:06:16:87:0f:0f:99:
11:f7:48:5c:a7:24:f7:dd:18:bf:34:06:99:28:f9:ce:b8:8f:
07:6e:13:41:bd:fd:1e:09:54:35:f4:09:64:26:d6:32:ae:38:
81:e6:14:41:a7:42:37:ed:e5:27:39:54:9a:bd:c4:cf:b7:9c:
0c:8b:b2:fd:7d:16:a4:f4:01:4a:12:9d:d8:e4:97:ce:11:42:
96:31:9f:55:67:20:61:eb:d5:14:3c:bf:4a:be:6d:68:06:8c:
54:87:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:16 2025 by rpki-client