Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa
File: AS142391.roa (raw, json)
Hash identifier: s8xADLh9LNYhuhiSW8UM1LFmrh4W3uwIHU7ZUl+sSJQ=
Subject key identifier: C6:81:08:FF:5A:3A:BE:71:88:6A:BC:34:CD:C0:5E:69:93:FD:59:93
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 51FF10DC34F8DD703B7E966ACFF2591E7A7A5FAC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa
Signing time: Tue 10 Dec 2024 05:00:01 +0000
ROA not before: Tue 10 Dec 2024 04:55:01 +0000
ROA not after: Tue 09 Dec 2025 05:00:01 +0000
asID: 142391
IP address blocks: 103.169.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ff:10:dc:34:f8:dd:70:3b:7e:96:6a:cf:f2:59:1e:7a:7a:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:01 2024 GMT
Not After : Dec 9 05:00:01 2025 GMT
Subject: CN=C68108FF5A3ABE71886ABC34CDC05E6993FD5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:5d:83:f6:a3:dd:42:4e:de:8f:38:8a:01:
30:bc:42:b0:c5:78:d7:dd:48:8d:c6:57:b3:92:7c:
2b:01:2a:53:44:5e:09:34:3e:04:e0:8d:a4:82:d6:
6d:f8:33:6d:ab:f7:63:67:a3:89:8f:70:b7:02:ee:
b0:7a:1f:dd:c3:c8:9c:1b:e0:ad:0c:e9:ba:cc:4c:
f7:ad:cc:eb:67:b5:b2:cb:3b:0b:0a:79:48:bb:d8:
bc:77:95:63:30:10:9e:74:53:bb:e6:c0:b0:87:22:
c3:cb:92:20:cf:2c:56:02:2d:92:c5:ca:1f:ec:55:
0a:b6:9e:6b:96:a3:af:f6:58:78:a5:e5:4e:52:86:
31:19:24:f8:a5:6d:ec:95:fd:9d:bb:14:90:c2:8a:
10:7d:ed:80:5f:9e:cf:cf:ba:c2:d9:0b:40:bd:43:
cd:f7:c6:87:1b:a4:33:38:60:b7:01:02:17:c8:8b:
ea:c5:11:21:0e:cd:b4:14:c4:8f:02:01:d7:5e:e5:
78:64:f8:e3:f8:9f:27:83:e1:f6:8c:cf:26:3c:9a:
39:2a:51:fc:04:80:c2:8f:e3:72:a0:70:d6:f8:e3:
d2:ea:b7:40:fa:0b:d5:19:1b:80:ce:5f:d0:ad:d6:
c5:f6:0b:7b:2d:78:78:30:c3:28:c7:dd:45:1d:8a:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:08:FF:5A:3A:BE:71:88:6A:BC:34:CD:C0:5E:69:93:FD:59:93
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:c6:c6:43:06:1b:52:f0:d7:c5:7d:5e:7e:c0:f4:80:7a:64:
a8:2b:b6:d4:a8:0c:41:e8:35:7b:2a:5b:f0:3b:79:39:a8:f7:
5c:41:c1:50:90:10:d1:76:be:07:10:cc:75:70:c6:4b:e0:8d:
c8:44:84:e3:97:0a:fb:dc:e7:72:19:fe:10:2f:d1:92:39:6c:
18:52:c4:02:3d:73:cd:7f:05:c4:59:d2:ac:c7:54:38:c5:2d:
44:bc:19:dd:aa:1a:48:e5:64:0e:7b:b1:50:90:e9:cb:79:1c:
82:58:b6:b3:7b:9c:10:39:2c:4b:33:de:81:15:13:a2:f4:7e:
42:7f:14:de:42:bc:d6:7a:ef:73:98:46:6f:5d:fb:15:61:90:
0a:73:d6:b4:9d:67:2e:91:21:a8:7b:a4:c9:e1:3b:97:6c:f5:
b9:ac:68:9b:9a:8e:d9:4b:c8:66:52:11:df:f8:8d:7d:44:dc:
2a:ad:f5:43:73:6c:c8:25:5a:fa:68:4a:f4:d7:d3:f1:81:a4:
e0:8c:4d:4f:11:0c:72:0d:fe:c2:35:7d:bf:43:16:30:98:c4:
c9:8d:f0:bd:72:8d:41:69:6c:eb:ff:95:9d:4d:62:69:3b:c9:
94:48:3b:99:55:3f:80:43:44:ff:ed:6e:38:4d:cd:a5:f8:7f:
d9:95:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:37 2025 by rpki-client