Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa
File: AS152344.roa (raw, json)
Hash identifier: MayAoxWnRN/Fep2twr6HCDrZyAvlhhZYcFu3QHIJSmc=
Subject key identifier: D0:5F:6D:90:9D:9E:01:CE:60:3C:96:41:CE:90:02:D8:7C:8C:CC:56
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 4CD6435BF2B73C6FF408C1AF3C3CB1773C53E2C6
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa
Signing time: Thu 06 Feb 2025 10:44:52 +0000
ROA not before: Thu 06 Feb 2025 10:39:52 +0000
ROA not after: Thu 05 Feb 2026 10:44:52 +0000
asID: 152344
IP address blocks: 157.10.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d6:43:5b:f2:b7:3c:6f:f4:08:c1:af:3c:3c:b1:77:3c:53:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:52 2025 GMT
Not After : Feb 5 10:44:52 2026 GMT
Subject: CN=D05F6D909D9E01CE603C9641CE9002D87C8CCC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:ae:10:a7:68:8c:c8:17:8c:0c:1f:af:29:
af:4a:a5:67:dc:e0:8f:e0:39:24:7a:7a:ec:c2:4f:
02:64:e9:8e:89:eb:1a:cb:47:ce:bf:47:c3:9e:26:
b2:61:ef:88:ad:73:4d:ff:4d:c3:ad:82:ab:d5:bb:
a1:5d:15:c4:4a:49:38:02:73:23:7b:98:d4:6e:31:
1c:a1:78:37:d1:51:05:4e:fa:bc:42:33:49:f9:ae:
0d:32:08:99:a2:9e:dc:cb:0d:70:7e:2b:2c:51:0d:
3a:50:00:6c:ac:82:a2:50:90:9e:4a:45:11:bd:8c:
06:79:26:b6:e2:f7:96:21:09:80:ed:0a:e5:64:0e:
f1:ab:cc:69:66:fd:0a:c1:11:b3:08:6f:c1:4e:45:
c9:37:e2:49:4d:8c:c2:48:f4:c2:c7:37:77:08:a6:
ab:25:09:61:9c:5e:a3:2d:69:30:9f:9f:89:6f:dd:
38:cd:7d:85:a5:77:5d:6d:94:21:88:22:3f:e2:0b:
d8:8d:90:39:d5:97:71:25:58:c7:62:a6:99:34:b8:
6f:0f:c8:b6:2d:10:bc:90:2d:43:bc:54:44:9e:e3:
57:99:9f:4a:22:63:c0:fa:a3:a0:56:fe:17:c4:a7:
62:cb:04:ec:49:35:19:22:e7:91:e8:db:86:21:42:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5F:6D:90:9D:9E:01:CE:60:3C:96:41:CE:90:02:D8:7C:8C:CC:56
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.182.0/23
Signature Algorithm: sha256WithRSAEncryption
92:d3:8e:e9:3d:1a:e1:b6:e1:95:fb:a7:34:d9:a5:e7:40:68:
a9:e9:b8:e0:0b:cb:01:eb:31:e0:91:3c:05:9c:05:35:34:2b:
69:0e:c1:98:7b:3f:fe:2f:a1:3f:10:af:19:70:d8:ee:3c:5c:
09:a7:ba:a7:62:55:ba:65:d9:1d:4b:87:34:87:55:49:59:7e:
75:b8:9d:f6:9d:65:81:a2:9c:fd:e4:f4:d8:34:21:b0:45:e3:
67:3b:ae:37:94:5d:8a:93:a8:6a:a3:ec:24:10:5f:0e:1f:d7:
f1:ab:7b:e2:ca:0f:77:a2:5c:5d:ef:e5:02:16:b9:58:87:45:
04:9e:a4:93:c3:49:00:cf:62:1b:d9:42:c0:3a:ab:51:6e:3f:
c9:42:60:6c:a3:96:48:ea:37:fc:9f:81:1a:71:b9:a5:36:e5:
1e:94:84:7a:70:9a:46:20:04:d6:9d:34:5b:e7:34:b0:f8:09:
ee:bd:ff:bc:01:59:94:aa:60:87:89:1c:d1:9a:1d:eb:54:1e:
fb:2b:b3:d7:27:12:a1:43:2a:0f:c2:21:01:da:e1:d9:a4:98:
c8:c7:cc:9a:49:f2:a5:bf:5c:13:bb:5f:6c:39:96:04:92:aa:
da:33:60:42:28:3c:4f:7c:86:d9:0b:24:34:c4:fa:38:7a:73:
7c:bf:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:31:34 2025 by rpki-client