Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa
File: AS138842.roa (raw, json)
Hash identifier: 0t/SbbpLQBFSDArrRZ5TqoQUO6geAX0b34iyG/6HZgQ=
Subject key identifier: E2:C7:08:70:17:2B:5D:36:0B:04:DB:83:EA:8B:54:BD:DF:0F:14:21
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7D60319CA977CDCE41542F6D6CB1E859EDB04687
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa
Signing time: Thu 06 Feb 2025 10:44:53 +0000
ROA not before: Thu 06 Feb 2025 10:39:53 +0000
ROA not after: Thu 05 Feb 2026 10:44:53 +0000
asID: 138842
IP address blocks: 160.19.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:60:31:9c:a9:77:cd:ce:41:54:2f:6d:6c:b1:e8:59:ed:b0:46:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:53 2025 GMT
Not After : Feb 5 10:44:53 2026 GMT
Subject: CN=E2C70870172B5D360B04DB83EA8B54BDDF0F1421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:15:67:62:6a:82:f4:50:1f:e4:a3:bf:47:
2a:20:03:26:05:f9:7b:ea:9f:16:9f:e5:8d:24:ab:
51:6a:5e:f3:a4:96:72:fc:a8:d8:db:2c:f6:8a:a5:
e3:93:e7:b6:35:3f:3c:da:ff:9b:38:93:dd:19:0f:
11:9e:b0:ed:fe:31:a7:6e:1c:b9:c9:7f:c8:af:52:
a0:68:cb:68:39:a8:c7:45:95:08:ef:20:af:a6:19:
ac:0a:c2:83:df:e9:39:a7:92:fd:49:66:3e:ac:a5:
b0:dc:63:d1:70:d3:4e:a0:d1:38:15:28:61:9f:b3:
c3:3c:42:08:92:e9:67:0d:a5:15:5b:2b:fa:34:3d:
f6:3b:a3:0c:b3:aa:bf:b4:08:67:a6:c8:cb:c8:c1:
e7:4f:f2:df:2e:7d:ea:42:f5:cf:d1:06:8d:d1:e4:
f3:0f:b2:46:f4:69:4f:0e:6c:3b:45:4e:4c:93:72:
52:3e:59:57:96:b9:1e:c2:81:ce:a0:9b:83:a5:c1:
25:3b:4f:1a:79:a6:65:6e:b9:19:4a:72:44:42:ca:
69:10:0c:84:49:26:c2:94:97:c1:65:33:f8:61:d1:
df:b5:ca:70:2b:0d:a3:28:98:cb:d3:67:fc:1a:3c:
79:6f:96:a6:f8:73:5e:05:de:2e:18:4b:3e:a7:2a:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:08:70:17:2B:5D:36:0B:04:DB:83:EA:8B:54:BD:DF:0F:14:21
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.32.0/23
Signature Algorithm: sha256WithRSAEncryption
60:d0:e9:c0:9e:d1:0f:d3:78:c2:39:3a:a7:fa:ec:cc:50:71:
0e:5e:24:98:5c:32:06:1e:6c:28:90:13:a3:47:89:35:59:ca:
12:7a:9e:1d:ae:67:4a:48:8e:9f:a9:ae:4d:88:43:40:ca:88:
d2:57:f7:12:60:ab:3d:c2:d8:6b:38:54:82:f2:ab:dc:65:ab:
40:34:a0:31:db:34:ad:43:4f:9d:4d:09:10:15:a1:7d:69:5a:
d5:71:3f:b4:6b:b5:3b:6a:92:92:51:f8:1b:03:17:38:fc:36:
0a:df:8a:b0:d6:56:2f:10:a8:74:03:97:dc:6a:52:5e:eb:1d:
84:64:1b:b4:7a:23:f7:87:91:a0:a5:ee:0c:a6:50:12:c8:a8:
2f:f3:ba:04:7a:d9:7b:36:71:a8:b4:06:93:4e:6b:89:14:1b:
cf:7f:77:80:39:c5:35:91:8f:96:30:d8:87:c5:bb:c4:54:a1:
47:98:b1:ad:34:35:25:e8:7c:07:b3:ee:a4:cf:64:8e:7a:7a:
66:cb:5a:ea:bf:2e:a8:c8:fb:77:3e:fb:de:57:ba:73:af:43:
50:0c:0d:81:d3:0a:34:2c:6c:4c:b9:d3:9f:60:4b:dc:14:35:
21:d2:59:f0:50:b3:c7:32:68:ca:e3:96:27:a3:67:86:4a:7e:
a2:45:4a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:47 2025 by rpki-client