Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa
File: AS142330.roa (raw, json)
Hash identifier: Du8KR8fR4DA6rwpvMiZORl2RYBiRFnZpfj1KFCiOVbE=
Subject key identifier: 20:B9:BE:BA:CD:E0:88:61:9A:30:4C:E6:C1:B6:F0:4E:59:6E:65:E6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1F41752EAABB91AD07893941A2E0949614AE875C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa
Signing time: Tue 10 Dec 2024 05:00:27 +0000
ROA not before: Tue 10 Dec 2024 04:55:27 +0000
ROA not after: Tue 09 Dec 2025 05:00:27 +0000
asID: 142330
IP address blocks: 103.168.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:41:75:2e:aa:bb:91:ad:07:89:39:41:a2:e0:94:96:14:ae:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:27 2024 GMT
Not After : Dec 9 05:00:27 2025 GMT
Subject: CN=20B9BEBACDE088619A304CE6C1B6F04E596E65E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:38:2f:2e:44:cb:0d:3f:ab:bd:58:f9:8d:
e4:5d:56:16:f5:b5:b9:03:f2:44:30:6f:34:2f:89:
6d:74:6f:2b:db:9f:d5:52:b5:81:a5:e2:9d:9c:f9:
c1:76:16:3b:17:82:3e:15:d2:3e:44:a6:72:02:86:
f4:ba:b2:a7:c4:12:f2:ec:e8:c1:ac:35:32:f3:b1:
bc:99:b3:d9:77:f8:61:2a:a9:2e:95:a6:80:69:27:
cf:8e:d7:ab:4d:3e:23:ac:96:1b:b2:de:7f:0f:21:
73:f2:ba:9e:d0:aa:3c:4a:01:2f:9a:65:10:a1:9c:
ed:0e:65:ad:f0:bb:45:05:b1:9b:ae:a2:b7:fa:5a:
c0:c6:5d:15:4d:65:fb:a3:8d:4e:e3:8b:6d:29:3c:
f9:62:fb:c3:bd:6d:9f:e5:31:13:57:b7:b8:14:33:
5b:5b:88:bd:d9:e2:ee:2a:4e:9f:4d:f9:7b:96:02:
3a:50:33:88:2e:61:34:e5:f3:ee:13:14:02:38:9d:
6c:2c:3c:58:fa:cd:de:52:2b:39:1c:5e:30:27:fd:
8a:52:71:57:0b:f9:fd:a9:26:72:1e:aa:3e:1a:da:
09:dd:8f:fe:e4:d3:70:01:e2:fe:c7:bb:c7:f6:d8:
d3:ad:00:15:96:c3:a4:12:04:06:45:78:da:5b:04:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:BE:BA:CD:E0:88:61:9A:30:4C:E6:C1:B6:F0:4E:59:6E:65:E6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:74:d7:74:fb:29:82:c6:b5:1d:e0:50:03:58:64:76:3e:19:
bb:ab:bf:4a:af:ee:e7:52:a7:a7:64:ba:d9:45:be:44:a7:81:
ac:fc:03:d5:e2:9c:f9:19:09:06:52:c5:e9:b0:99:6b:2c:21:
4d:c3:d8:16:3d:ea:b4:ae:ef:3e:2e:5e:01:9d:08:4c:f0:38:
e7:4e:dc:6d:e7:80:75:14:de:1b:bb:ea:d6:e0:27:96:1f:b4:
69:77:91:2b:4c:90:6e:c6:d1:34:a4:ff:e0:06:c0:ac:26:4b:
66:28:eb:de:88:a9:bf:26:b0:fb:f7:84:af:f6:9c:6d:1e:22:
d5:80:62:16:9d:ba:7f:25:b1:a5:8b:f0:15:33:d4:cd:e0:e0:
ae:90:6f:db:bf:7c:e5:2d:52:3d:4a:bf:97:d2:e6:1f:9e:02:
2e:f0:c6:a5:76:99:07:eb:e4:e1:2a:ab:a6:c2:7a:4e:2f:75:
e3:51:3b:af:6b:87:46:80:51:85:e6:64:ea:fc:06:d2:b0:7c:
8d:3b:9d:c7:4e:f8:ea:f2:ba:25:ae:2e:a5:ec:c1:e9:ca:24:
82:21:6e:14:22:c5:b7:8c:bd:97:72:b9:ba:58:f7:f2:89:5e:
dc:1a:bf:2f:6d:d3:03:d0:df:76:cd:76:d9:e3:d2:22:1b:e3:
24:ce:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:04 2025 by rpki-client