Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa
File: AS141350.roa (raw, json)
Hash identifier: FobLMQ2CQXkiMUHMMeEd65I9dBncoCfK1u3zH73rZv4=
Subject key identifier: 68:F9:A0:B4:AD:E1:E1:31:2D:26:3E:EF:05:33:EB:66:99:F8:3A:A8
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 3599330A674F8372E879CC16C9C79AB3E6D1FB3C
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa
Signing time: Tue 04 Mar 2025 01:18:03 +0000
ROA not before: Tue 04 Mar 2025 01:13:03 +0000
ROA not after: Tue 03 Mar 2026 01:18:03 +0000
asID: 141350
IP address blocks: 161.248.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:99:33:0a:67:4f:83:72:e8:79:cc:16:c9:c7:9a:b3:e6:d1:fb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 4 01:13:03 2025 GMT
Not After : Mar 3 01:18:03 2026 GMT
Subject: CN=68F9A0B4ADE1E1312D263EEF0533EB6699F83AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:77:b4:5a:86:83:24:4a:52:e1:f0:d6:c0:
af:12:5f:d5:ff:47:7f:77:33:9e:7f:a3:8c:b7:44:
7e:6f:4f:dd:92:60:d3:76:3e:f7:36:8a:79:c1:79:
36:75:71:42:07:cb:d7:1f:75:b6:5b:9a:7c:a9:ab:
82:d3:b3:8f:dd:2a:6c:be:57:7f:a4:8d:43:ae:6c:
39:9e:b9:ba:9e:a4:3c:62:cb:44:b9:e6:4e:59:47:
82:f3:32:22:a0:67:66:09:a5:46:c9:1a:2d:0e:37:
5b:03:20:bc:e3:92:8e:66:21:29:8c:90:9b:7f:70:
03:9d:81:f2:d9:12:96:32:ee:35:d5:3f:4f:17:81:
3d:d5:98:34:b9:33:5c:76:43:d6:fd:be:c0:04:73:
95:8e:23:af:74:24:7b:10:60:ce:41:2a:bc:1e:7a:
75:03:ab:e4:44:5f:be:db:0f:b0:42:a5:10:35:d4:
5a:f6:59:13:62:92:e4:ca:33:0b:d6:dd:82:51:dd:
fc:fb:ed:84:1a:cd:6a:6a:6f:b5:0a:a6:54:14:11:
40:38:56:d9:50:1c:78:84:0e:7b:ed:8a:9f:40:8b:
fe:ed:b1:ec:a6:9d:47:61:f4:26:26:b8:dd:82:66:
a3:31:eb:0c:4c:10:90:16:11:1a:55:4a:ee:5c:03:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:A0:B4:AD:E1:E1:31:2D:26:3E:EF:05:33:EB:66:99:F8:3A:A8
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.248.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:21:3d:11:07:23:ea:a1:b6:c5:c2:e3:64:ea:69:2b:e1:05:
c4:bf:ea:e8:da:51:a2:68:08:be:c9:78:dc:c7:8e:87:f2:47:
e4:16:2a:26:80:3f:a1:f8:f5:f8:6f:05:6d:81:45:5c:68:71:
9e:bc:79:16:c8:54:60:e2:13:9f:99:1d:77:08:28:1c:01:e6:
72:63:99:82:92:56:2c:c4:5d:b7:2b:a9:e1:3b:c2:74:10:18:
ca:0e:fd:72:2b:d3:58:d0:a0:d8:65:77:e3:cd:5d:ea:8c:19:
30:04:56:3b:a8:9d:28:90:16:69:bb:c5:93:ab:ba:26:59:f2:
9b:5c:c4:8e:27:ee:bd:3a:ab:33:f4:35:1a:dd:f4:0b:23:dc:
8c:99:53:18:b1:4f:d2:c7:42:40:fc:77:e1:48:2d:1c:d4:cf:
a8:62:09:19:21:fc:a9:b3:2e:63:c6:e2:bd:5b:a9:7f:9c:54:
3d:3c:a5:bc:01:78:e6:9f:fc:25:1d:ad:c9:7a:b6:cf:a5:44:
dd:81:32:13:46:95:50:3b:64:ab:0d:f3:28:aa:a7:89:23:dc:
d3:99:c1:36:7b:39:19:39:c1:5e:8a:a6:6b:f6:88:bc:27:bc:
e9:a5:1b:45:52:17:65:6b:23:4d:9a:8c:b5:b9:38:25:64:97:
27:f2:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:31:59 2025 by rpki-client