Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa
File: AS141898.roa (raw, json)
Hash identifier: ftDUyRt2nYAdaXmKkI93jl3eZoFkqmMJ4huMGB+q3+g=
Subject key identifier: 78:AD:07:96:86:CE:47:6E:D9:FC:11:EB:E4:46:58:89:9F:35:17:27
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 065BE8F9AD443B2E9476446BE64C14F4601AA68B
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa
Signing time: Thu 06 Feb 2025 10:44:48 +0000
ROA not before: Thu 06 Feb 2025 10:39:48 +0000
ROA not after: Thu 05 Feb 2026 10:44:48 +0000
asID: 141898
IP address blocks: 157.10.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:e8:f9:ad:44:3b:2e:94:76:44:6b:e6:4c:14:f4:60:1a:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:48 2025 GMT
Not After : Feb 5 10:44:48 2026 GMT
Subject: CN=78AD079686CE476ED9FC11EBE44658899F351727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:32:07:80:ee:1e:bd:dd:5c:34:88:f2:80:
ab:7f:4e:5b:de:6f:30:ef:b2:8c:3f:39:b1:09:14:
1a:01:83:5a:3b:01:bd:1c:34:7d:7c:51:bd:54:a6:
b2:ba:95:a9:f2:47:83:63:92:5a:3c:c1:e6:dc:6f:
3e:ee:7c:43:6b:1d:1a:eb:cf:07:a7:b0:bb:61:d3:
2d:67:e8:9c:a7:4e:70:33:7d:06:97:5a:f5:25:4f:
e6:a2:67:27:60:4a:d7:64:a5:43:2e:62:35:11:ee:
d7:5d:6f:86:15:34:ad:a0:d3:e7:45:00:41:80:9f:
06:f6:21:74:25:d0:b1:b2:2d:ee:94:7e:ee:45:cc:
f8:ba:12:57:bc:bd:2b:63:90:cd:53:30:56:36:45:
60:cb:1f:6c:02:19:fa:3b:d2:7a:6b:53:a1:7b:67:
9c:0e:34:d6:ff:47:2c:b7:ea:4c:60:dc:e6:34:d3:
c7:6b:bd:36:08:88:75:29:4f:64:27:00:41:ba:4f:
8a:b8:86:64:2d:c0:bf:24:3c:02:56:21:cc:a7:2e:
11:78:11:58:8d:2d:13:b5:ff:a9:01:ac:3f:d8:0d:
57:6d:43:47:b4:aa:90:9f:89:b2:80:04:61:98:bc:
d3:0f:59:ca:52:4b:f6:da:52:4f:91:d2:63:4f:2c:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:07:96:86:CE:47:6E:D9:FC:11:EB:E4:46:58:89:9F:35:17:27
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.222.0/23
Signature Algorithm: sha256WithRSAEncryption
91:fc:ab:43:a7:8b:d5:12:c6:95:44:fb:2b:71:f0:3d:33:74:
55:58:4e:7d:43:5f:ef:59:05:66:b9:fe:e6:6b:a4:58:7b:25:
e4:15:46:cc:38:64:f9:05:9a:50:6d:2b:97:dd:8d:e6:8f:ec:
08:7d:ab:10:90:b2:39:35:6f:6a:50:96:ec:20:7e:8c:17:8c:
17:c2:39:47:62:54:7b:c4:1d:bb:de:b4:49:7b:94:16:97:3f:
41:b3:a3:60:ae:8a:0d:73:62:74:08:3a:43:14:43:65:e2:1f:
5f:3c:d9:0e:72:c8:a3:db:59:d3:5a:25:f7:fd:f5:58:54:96:
d0:14:9d:4d:08:d6:d4:a1:03:14:ee:a1:ba:24:b4:35:8f:d9:
5c:ee:9f:7e:ce:fc:98:94:81:6e:68:28:a3:dd:ee:6f:db:2f:
19:5f:b8:a7:e1:2f:1e:8b:78:7a:18:2e:48:77:a2:72:c5:07:
ee:c3:c1:4a:85:e5:51:b8:40:c9:03:0c:b2:27:8c:c3:6d:5d:
49:e3:0b:09:c2:51:ba:ea:97:70:fe:8d:7b:b5:10:d1:9e:51:
a2:13:90:f0:19:60:b8:50:9d:e5:70:0e:81:8f:58:be:71:41:
f7:af:5a:df:bf:45:60:34:c0:d4:0d:f2:65:ae:c8:82:32:b9:
91:b9:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:28 2025 by rpki-client