Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa
File: AS142329.roa (raw, json)
Hash identifier: zSnJwF20fEUBYc8FghpxTAuBpyg0UXHZO+t0NPHV8+M=
Subject key identifier: 78:8A:17:74:D5:5F:84:7E:1C:12:49:78:B2:BC:3B:8F:F2:13:00:75
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3B5E7195E79202EFFD57741FE0051F5707044E21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa
Signing time: Tue 10 Dec 2024 05:00:08 +0000
ROA not before: Tue 10 Dec 2024 04:55:08 +0000
ROA not after: Tue 09 Dec 2025 05:00:08 +0000
asID: 142329
IP address blocks: 103.168.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5e:71:95:e7:92:02:ef:fd:57:74:1f:e0:05:1f:57:07:04:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:08 2024 GMT
Not After : Dec 9 05:00:08 2025 GMT
Subject: CN=788A1774D55F847E1C124978B2BC3B8FF2130075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:10:4a:86:e5:78:2e:32:09:1f:fd:ed:36:
d7:e2:2d:fa:c4:f9:42:7b:67:ee:12:78:a0:2f:ec:
c3:2b:9f:87:23:5c:fa:f3:cc:b0:a8:5b:b2:06:77:
2b:2c:fc:f1:5a:0b:f6:02:4e:2c:86:d8:29:04:90:
b6:1e:44:b3:2c:c8:6b:14:cc:4c:c6:88:9d:f9:5a:
9b:cd:49:17:6c:99:dd:72:14:35:ec:e8:f2:7f:aa:
15:9e:5f:8b:de:e7:ec:02:2e:2e:5e:e3:81:c3:d9:
69:9a:c1:81:b0:2a:11:57:c3:93:72:c4:85:7b:47:
3a:f9:d9:a3:e9:55:fe:33:ed:4d:b4:41:5a:1c:b7:
4b:83:81:55:08:81:10:77:3c:4e:00:1c:be:bf:fe:
08:c2:9c:39:d1:fb:35:b0:63:a2:31:c6:c5:46:0c:
d8:1b:44:04:d1:95:10:91:80:7f:74:e6:d0:1a:10:
77:93:5a:78:e8:95:5f:20:92:0e:52:48:84:27:f4:
b7:03:ae:49:73:aa:7a:fb:5c:4e:b6:62:1d:21:a4:
18:6d:53:2b:24:f9:e0:d9:ee:c4:52:c1:30:21:11:
2f:4d:8f:12:14:17:dc:63:f5:fa:9f:11:c8:e9:24:
e2:f4:c5:43:9f:a1:7b:fd:36:36:be:22:12:1b:23:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8A:17:74:D5:5F:84:7E:1C:12:49:78:B2:BC:3B:8F:F2:13:00:75
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:df:c0:90:30:e6:21:4e:97:3d:6d:d2:c8:ae:e9:f0:fb:f1:
32:8c:74:79:6b:be:43:9f:54:1a:8c:11:74:98:d6:fd:78:ad:
ff:dc:b1:aa:c4:4a:43:ab:ce:e3:d1:62:0d:55:0f:c6:be:13:
ed:bb:2d:92:69:bf:96:ff:f5:7f:b7:91:ae:76:60:f1:45:0e:
39:f3:43:10:4f:d7:44:cd:8c:47:5b:ee:bc:e0:f2:0c:f8:57:
29:45:44:4f:e5:0b:33:75:65:e0:a8:f9:4a:48:cd:c8:a8:77:
5f:38:d1:4d:67:78:a4:66:86:81:1a:a6:9b:8c:48:75:a7:42:
03:6c:e0:53:48:3e:7f:3f:9c:04:d8:2d:0a:b3:0e:d7:78:16:
89:e7:23:41:22:1f:0b:50:0a:2e:c6:35:22:90:c0:f3:e4:88:
ca:83:24:c7:20:49:f2:09:59:f9:7b:47:ad:38:6a:8f:80:bd:
11:00:d1:93:18:aa:96:4a:64:71:21:cf:97:2d:6c:95:f7:6e:
b5:18:f1:a2:e1:b5:f1:c3:d9:7a:3b:a1:e3:5f:b6:e9:38:9f:
b6:d7:32:bd:10:91:e4:6c:e5:7b:d3:85:53:28:a7:93:37:76:
00:23:33:dd:b9:78:d6:0f:31:70:a0:a9:47:16:f8:d2:e1:0d:
a7:7c:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:09 2025 by rpki-client