Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa
File: AS153108.roa (raw, json)
Hash identifier: baDJSeFsej2ZI2uSGDLLyov3fV4Kdmv0U2u/sxheI6c=
Subject key identifier: 7A:E0:A4:89:EF:9D:C1:EE:F2:58:09:E2:DD:6A:6A:CF:3B:26:70:A5
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5FBFB87F45EBA2B586CD1B06ECB30F5F33BDDD37
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa
Signing time: Thu 06 Feb 2025 10:44:55 +0000
ROA not before: Thu 06 Feb 2025 10:39:55 +0000
ROA not after: Thu 05 Feb 2026 10:44:55 +0000
asID: 153108
IP address blocks: 160.25.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bf:b8:7f:45:eb:a2:b5:86:cd:1b:06:ec:b3:0f:5f:33:bd:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:55 2025 GMT
Not After : Feb 5 10:44:55 2026 GMT
Subject: CN=7AE0A489EF9DC1EEF25809E2DD6A6ACF3B2670A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:51:a3:25:b7:4c:23:1a:85:fd:a8:3c:3d:
df:86:5c:41:b2:32:38:08:c2:dd:4c:24:9c:03:8d:
82:ed:a4:a6:19:7c:43:bc:43:6f:36:0b:20:5d:89:
71:1c:8e:ac:69:4a:cb:ec:00:7a:68:b0:ae:e2:e4:
0a:cb:90:8d:2d:2d:47:78:7a:13:b3:b8:1b:01:4f:
b3:93:e7:18:95:a9:a5:3a:82:ae:db:7b:0b:28:da:
d5:de:c9:ff:a0:1a:45:5c:68:a7:dd:7b:06:44:41:
fd:2f:88:72:3a:3a:48:ba:c1:44:8e:5d:cf:64:8a:
6d:00:3c:40:a8:c7:3c:91:b2:c7:cd:62:e8:02:95:
94:af:8a:3f:00:4a:6f:9d:6a:2e:3a:b0:1d:6f:c2:
80:dd:26:a9:5e:cb:6f:6b:81:a7:72:9a:11:d5:77:
30:7e:d2:50:2b:27:ef:0e:8d:a7:ba:cd:05:c7:6c:
83:93:09:24:45:30:84:39:ed:77:e8:b8:11:86:7b:
7e:46:42:3e:68:1c:b7:35:2e:eb:31:f8:c7:0b:2a:
75:c4:91:6e:3d:de:97:d5:ae:74:f9:25:a3:f6:cb:
94:b5:f7:a4:ad:a2:77:3b:96:c0:dc:16:eb:5f:71:
e1:e1:cf:73:21:15:51:28:0e:01:4f:57:6a:45:b9:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:A4:89:EF:9D:C1:EE:F2:58:09:E2:DD:6A:6A:CF:3B:26:70:A5
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.203.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b6:a2:4e:d1:2f:cd:44:11:5d:84:38:3d:49:e9:46:23:11:
3d:7e:e8:0f:6d:98:e4:16:bb:9a:bd:3e:00:93:e0:3c:09:79:
dd:a9:ec:f9:a2:cb:4f:4d:ea:d2:96:0e:2e:ff:ab:45:ec:67:
76:0f:4d:75:00:85:fb:a5:30:f7:33:49:14:18:19:b0:fc:26:
69:97:a8:9e:af:e5:23:40:19:4c:19:7d:bd:1f:ac:bb:a3:4f:
e2:2b:c9:23:21:2b:54:5b:a4:ee:0e:cb:5d:4a:95:22:70:68:
45:e4:56:b9:86:33:ca:b9:0e:fd:d3:37:d5:7c:d1:5e:33:cf:
5b:11:12:40:21:14:b7:dd:01:7e:f3:1f:74:a5:1e:f9:e6:15:
a3:a2:12:53:e5:f7:c7:bc:a2:71:d6:4c:f9:ee:28:34:b8:62:
9f:7a:0c:2f:d1:c8:7d:94:07:67:f3:cf:bf:ba:26:a0:4a:b0:
75:22:66:f2:8a:2d:fe:56:6b:c4:09:3f:66:cb:49:57:e6:9f:
72:b4:45:d7:56:b4:69:42:df:cb:36:b8:f7:29:4c:2e:c5:1f:
c4:bc:6f:f9:2e:b9:a1:0d:16:10:e9:07:d3:50:58:9e:ac:ec:
c1:6f:e3:52:a9:45:a2:55:74:ce:0f:fe:83:ac:22:8d:e6:4b:
f5:ce:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:33 2025 by rpki-client