Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa
File: AS139385.roa (raw, json)
Hash identifier: eBDlNLN5t05CJkVIb2ID6bj94Hy9X8c0pbn2MGYlL/w=
Subject key identifier: 5E:68:64:BF:3C:22:35:39:A9:2E:52:90:4D:74:01:82:30:0B:FD:DA
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2DAAD80F649E079C9C7692574498CB25C64CE188
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa
Signing time: Tue 10 Dec 2024 05:00:19 +0000
ROA not before: Tue 10 Dec 2024 04:55:19 +0000
ROA not after: Tue 09 Dec 2025 05:00:19 +0000
asID: 139385
IP address blocks: 103.143.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:aa:d8:0f:64:9e:07:9c:9c:76:92:57:44:98:cb:25:c6:4c:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:19 2024 GMT
Not After : Dec 9 05:00:19 2025 GMT
Subject: CN=5E6864BF3C223539A92E52904D740182300BFDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b4:95:e1:b5:69:e6:07:c8:2d:65:5d:87:24:
df:8e:28:3b:b7:7c:6e:31:da:e5:62:3e:06:e0:f6:
47:af:7e:da:c9:f1:1d:7b:04:03:1c:39:b6:b2:6e:
e5:38:ba:21:0d:e0:10:da:06:b2:93:b5:7e:72:69:
38:88:16:a2:27:75:5f:cd:2c:78:69:77:b4:cf:1a:
5e:d6:ce:0d:7d:a4:46:c8:c9:08:f2:93:84:44:11:
b7:8f:c1:83:37:d9:48:52:74:d2:43:ae:b0:ec:91:
df:c2:30:66:cc:6f:72:d6:14:cd:d3:81:a3:bc:09:
49:6b:02:a8:0a:3f:f5:ee:48:2d:6f:39:85:0c:51:
63:0b:aa:2f:91:74:7f:da:20:9e:f2:d3:a1:e4:5d:
b8:3b:3f:9b:8f:0b:ae:ff:70:c8:ee:01:cf:4e:9c:
23:73:3d:76:a5:d3:4a:ce:2d:29:e2:b7:0b:6d:2a:
74:cb:ec:6b:e7:bf:b0:76:80:26:1a:b5:4f:84:43:
11:9f:e3:e8:8f:36:41:f4:06:b0:9c:b3:aa:a9:00:
ab:dc:9b:a0:bb:a3:22:d8:56:3c:47:dd:f0:5f:65:
91:58:56:1e:29:c6:d2:e9:ec:5d:94:81:b2:97:bc:
8d:50:cf:f6:29:97:6e:1d:23:8b:42:69:02:85:07:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:64:BF:3C:22:35:39:A9:2E:52:90:4D:74:01:82:30:0B:FD:DA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.2.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3a:ea:da:b4:37:31:fa:63:36:10:0b:51:0c:33:26:a8:2b:
c6:22:56:d7:f5:ce:07:d2:3e:fe:7d:6c:b0:c0:ba:2b:70:da:
62:0e:52:ea:eb:32:32:60:3d:1f:98:05:ad:18:34:5b:23:b3:
5e:9e:12:39:a0:09:61:59:f9:2c:d4:8d:f5:68:3c:25:9a:7c:
0b:3d:92:65:af:56:68:cf:38:cf:8e:f8:19:c9:50:a5:6c:95:
33:d1:66:03:e1:1b:c4:b3:04:1e:89:fc:42:2e:15:a5:d8:21:
b2:b3:17:17:46:78:89:b6:a3:bb:be:8f:3b:92:e1:c7:ea:ae:
ab:0d:97:88:64:39:3d:54:9e:86:b3:8f:65:f9:1f:5a:58:15:
5e:f1:7b:f8:2e:b1:b8:5e:b0:ef:fd:0e:0e:e0:ee:e9:7b:84:
83:18:7e:56:35:85:4d:f4:f5:6a:fa:f5:18:d8:a4:9a:ec:0e:
cf:78:f6:0a:9d:92:60:56:b8:8f:24:56:24:c8:ac:3f:4e:5f:
88:e9:28:4e:bf:35:44:71:60:ca:68:26:41:1d:56:f5:38:e2:
01:1b:cc:b0:3e:a4:50:a8:56:2a:c6:96:28:35:fe:cf:ed:14:
33:a8:34:78:1f:7e:cc:a3:4c:f8:c4:8d:60:2b:0f:82:e6:fd:
9a:28:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:29 2025 by rpki-client