Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa
File: AS139429.roa (raw, json)
Hash identifier: J3ARG/DzqVrQIldYZnMezNL1WdpH+fosZqwu1WbJGzs=
Subject key identifier: 19:C4:F7:21:D6:76:3B:51:95:EF:08:79:52:A4:B0:D5:23:0B:EA:D1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 41B2EFDB76475FFEE9740DD8026FEA8C014F9D63
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa
Signing time: Tue 10 Dec 2024 05:00:08 +0000
ROA not before: Tue 10 Dec 2024 04:55:08 +0000
ROA not after: Tue 09 Dec 2025 05:00:08 +0000
asID: 139429
IP address blocks: 103.144.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b2:ef:db:76:47:5f:fe:e9:74:0d:d8:02:6f:ea:8c:01:4f:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:08 2024 GMT
Not After : Dec 9 05:00:08 2025 GMT
Subject: CN=19C4F721D6763B5195EF087952A4B0D5230BEAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:52:31:fa:4a:41:ac:b4:eb:78:2b:f9:5e:
b5:b5:86:08:1e:fa:6f:d3:12:b5:b5:ad:74:86:67:
70:67:80:a3:54:74:2e:0f:3a:83:f5:04:e8:c7:34:
ab:62:28:34:bb:ff:9d:62:2e:86:df:73:3c:ee:5a:
66:d3:9c:ad:95:ed:72:6e:0b:6d:0f:02:61:f9:fa:
51:d7:d5:83:b7:83:ee:ed:57:87:ba:d7:25:54:f5:
05:b3:d1:4c:d6:f9:a9:9e:61:a1:cb:d9:67:95:4f:
ae:54:5a:45:49:24:07:b1:19:75:74:b4:20:c3:06:
0d:32:fe:d9:79:6a:7f:65:00:91:8f:da:9f:a7:e1:
de:fc:f2:39:56:96:7e:0a:f5:e6:fe:21:2c:16:11:
7c:8f:4f:0d:ac:7f:76:0a:8e:bf:7e:9c:a7:2b:e1:
8a:f0:43:1a:79:de:ac:f4:82:65:17:59:53:cf:9b:
9c:07:c8:3b:90:d9:b3:6e:50:e6:2e:40:bd:19:ee:
02:63:68:c0:9f:64:5a:3f:3d:12:d6:39:e4:9a:ba:
38:df:5b:1a:6b:39:45:a0:cf:2f:15:fe:ea:20:92:
9f:16:a6:8d:59:29:40:19:d4:62:4c:0c:b3:d0:57:
bb:23:5f:24:8a:ca:90:3f:7c:52:e6:7c:cc:18:f6:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:F7:21:D6:76:3B:51:95:EF:08:79:52:A4:B0:D5:23:0B:EA:D1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:92:1a:a4:11:4c:e6:20:37:8f:7a:8c:34:8a:21:3b:42:58:
a1:45:d6:f0:2e:db:d9:8c:c4:c9:52:4e:42:7a:86:ad:5b:8e:
fd:10:3c:8e:94:12:94:ac:df:b6:5d:9a:ac:4d:53:e4:c5:65:
f8:1d:1d:ab:95:90:a4:30:f8:8a:91:11:21:10:96:2f:91:6c:
a0:9c:b7:bf:3b:ff:e3:4c:96:c4:64:0b:0e:bc:fe:fe:e6:a4:
b5:9b:51:0b:c2:ae:e1:e9:79:ae:c2:92:cb:88:b5:35:92:e8:
80:a2:ed:f1:c7:96:15:8b:1b:27:ab:2a:66:56:f6:80:cb:a5:
ff:b5:d0:cd:70:06:04:5e:47:46:42:f1:fb:a6:a8:61:04:2b:
07:4a:cd:52:a9:aa:76:66:e4:b3:0a:6e:49:b0:07:cd:48:18:
d2:01:e4:e3:5d:2c:ce:7f:82:9f:e7:66:5e:58:4e:72:b3:62:
5e:d3:e3:74:b1:18:ab:de:bc:f3:36:fc:f1:b1:94:4e:73:a2:
9c:fc:ac:13:cc:20:db:1a:bf:b5:14:29:6a:64:e3:d6:57:a4:
76:73:24:18:8d:47:40:7e:9c:e2:1c:3b:d2:a4:e5:d9:2f:9d:
f9:cf:d0:64:16:88:53:35:35:6e:87:7a:8c:72:3b:16:2b:d2:
20:f8:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:55 2025 by rpki-client