Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa
File: AS133637.roa (raw, json)
Hash identifier: RBr3Pfqwe8ocl0+1Rto1i35bFS0AUVR7zpHN3MjstyM=
Subject key identifier: 1A:67:51:D8:06:65:E8:21:8F:05:05:0D:6F:5E:D8:EF:DE:CD:A5:D1
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5997D73FBE44719E6FA234C885381FE8BEEE2C77
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa
Signing time: Tue 18 Feb 2025 03:00:19 +0000
ROA not before: Tue 18 Feb 2025 02:55:19 +0000
ROA not after: Tue 17 Feb 2026 03:00:19 +0000
asID: 133637
IP address blocks: 160.250.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:97:d7:3f:be:44:71:9e:6f:a2:34:c8:85:38:1f:e8:be:ee:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 18 02:55:19 2025 GMT
Not After : Feb 17 03:00:19 2026 GMT
Subject: CN=1A6751D80665E8218F05050D6F5ED8EFDECDA5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:47:93:dc:94:08:b4:95:65:95:21:2c:5a:
f8:17:da:dd:75:2e:5a:2e:59:a8:e4:04:9a:4c:59:
71:3e:f4:50:02:b9:ba:76:40:78:00:00:9a:83:9d:
84:d6:5a:81:0c:6c:73:0f:5d:83:cd:ca:c1:5c:ee:
c4:08:b6:e7:a5:90:f5:5a:19:fa:6d:2c:19:08:c4:
73:42:db:27:8d:60:26:e2:de:9d:fe:8a:79:98:da:
6b:d4:b5:1b:8b:f1:ba:3a:37:d4:6a:7a:e9:7d:58:
4e:66:d2:a5:43:9b:33:04:0f:16:7d:6d:c5:21:78:
67:71:ab:50:78:60:5e:13:9e:a5:53:45:2b:33:ba:
81:57:01:2b:f7:ec:17:23:3e:17:e1:4a:bd:df:94:
3f:54:95:2b:f2:ed:32:38:07:63:00:dd:54:20:71:
0c:34:ee:8c:8a:9f:3e:37:da:e0:05:20:cf:22:5e:
ef:ce:f9:a1:fe:0d:7b:49:a7:77:ea:9a:d2:b2:ff:
ef:b2:4f:96:61:8d:24:1f:45:a4:3e:07:72:a8:a3:
68:87:47:45:dd:8a:b0:79:88:b2:35:9a:cb:9e:fa:
c2:e9:ef:b6:70:06:50:04:c1:80:d8:2b:19:eb:fa:
48:96:33:ed:fb:4d:ef:ad:36:5f:c0:54:42:1c:a7:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:51:D8:06:65:E8:21:8F:05:05:0D:6F:5E:D8:EF:DE:CD:A5:D1
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.250.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:01:8e:93:dc:e8:fb:fd:be:cf:2e:98:4e:28:36:72:27:bf:
97:6e:ed:7b:2e:5a:ad:c7:8f:06:03:2f:15:37:ee:90:fb:9a:
47:91:7d:62:5d:8b:29:e2:42:4b:4a:d4:6d:98:07:cf:ad:83:
3e:12:77:ab:ac:fd:d1:c7:c4:a2:0c:d3:17:60:00:c8:16:8d:
46:a2:39:64:ef:30:22:a3:d5:3c:94:05:ab:8c:af:d8:d5:ac:
0a:48:2e:6d:a8:59:37:da:86:bf:28:46:9d:14:56:51:78:fd:
1d:ef:01:50:63:09:70:8e:f3:5b:ae:31:c9:a4:e6:f9:b7:3d:
c4:74:05:ce:d4:ac:5f:04:88:f1:62:c4:d2:18:38:58:8b:38:
b3:47:24:c1:2d:1e:d4:b1:96:3d:13:7d:ae:57:a0:2e:e8:92:
6b:2b:5c:cc:30:51:95:e1:af:a0:a8:be:53:1a:94:35:90:49:
30:bc:97:cb:b7:d3:02:59:f4:8b:9a:6b:61:3d:81:32:83:29:
13:ce:0d:8b:69:fc:e0:7d:fc:b9:1f:b3:c4:3c:e2:56:3f:bb:
3c:73:90:b3:a7:4c:b5:3a:58:cb:0d:2c:aa:62:70:68:82:16:
88:67:13:5f:a7:0c:4c:a1:66:b2:63:f4:f0:b1:80:f0:ab:e8:
4d:16:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:29:31 2025 by rpki-client