Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa
File: AS147078.roa (raw, json)
Hash identifier: ngDhgxOZq1a7x0nhsc5Jmys3wCDQW0GM6s6nQGxpZIM=
Subject key identifier: 06:8B:EF:25:3C:D6:C4:15:C6:FC:1D:7F:C2:60:8E:D8:A8:36:13:84
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21FEF852FE9F6890134729DBDD51F4A7A76AA9FA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa
Signing time: Tue 31 Dec 2024 01:57:01 +0000
ROA not before: Tue 31 Dec 2024 01:52:01 +0000
ROA not after: Tue 30 Dec 2025 01:57:01 +0000
asID: 147078
IP address blocks: 2001:df3:b9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fe:f8:52:fe:9f:68:90:13:47:29:db:dd:51:f4:a7:a7:6a:a9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 31 01:52:01 2024 GMT
Not After : Dec 30 01:57:01 2025 GMT
Subject: CN=068BEF253CD6C415C6FC1D7FC2608ED8A8361384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:48:6e:fc:03:69:aa:28:92:a6:8f:9f:49:
33:57:56:1e:c7:9c:46:a3:35:01:3e:95:1a:f0:06:
45:e4:69:77:dc:34:f3:de:52:6c:03:e4:05:4b:20:
83:c2:4b:b2:f6:b1:70:80:fa:b0:8d:cb:69:44:b2:
12:51:98:0d:2c:cc:6c:3a:46:e6:0e:4d:19:57:39:
ad:82:3f:2c:70:8a:06:4c:06:e1:06:f9:d6:38:6c:
a6:71:5a:76:29:26:71:db:d8:01:fc:af:3c:29:92:
0d:1c:4b:40:92:49:b7:72:fd:39:5d:56:70:86:96:
b8:c8:39:2e:8e:08:e4:bc:7c:17:9a:6f:24:1f:3b:
d8:dd:39:5a:48:f8:77:fc:0b:ae:67:da:db:52:5a:
9d:64:c6:e2:01:39:8b:80:f3:4a:82:bc:51:95:c9:
fc:5d:e9:c6:0b:66:53:b5:c9:3a:ba:0d:5b:61:95:
27:3d:19:a5:59:47:66:ee:d5:19:db:8c:51:78:5c:
42:43:05:f8:41:82:5d:2a:45:57:fc:b4:7b:12:1a:
56:a8:cd:a8:85:c6:17:5f:74:6e:54:0b:6f:62:81:
c4:1d:be:4d:8f:b2:b7:0f:77:cc:f8:05:3e:94:29:
d4:b0:5c:e4:6d:24:1f:7a:ca:80:16:09:7c:c6:c1:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8B:EF:25:3C:D6:C4:15:C6:FC:1D:7F:C2:60:8E:D8:A8:36:13:84
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:b9c0::/48
Signature Algorithm: sha256WithRSAEncryption
60:79:63:a0:f8:dc:45:b3:d7:bb:04:49:12:db:db:c0:b3:32:
a2:8b:c8:da:4c:1e:49:23:24:d8:76:87:aa:ee:aa:0e:9c:be:
28:ea:06:9b:ce:13:81:f2:98:c1:ab:55:24:15:aa:92:08:b2:
c5:f9:fc:05:e5:d8:58:19:4f:0d:69:04:4a:d6:ba:e3:5c:1a:
77:5a:e3:c4:27:f1:56:e5:63:4b:dc:f2:ac:12:b4:2f:f4:97:
2b:14:18:11:0e:84:0c:48:16:b8:1e:cc:f0:6a:17:13:3b:ae:
18:bd:a2:f4:8c:57:c6:84:8d:46:6a:ba:a8:e0:f4:bb:28:1c:
2b:3f:36:76:86:b0:91:c6:f6:a0:d4:39:b6:e8:c7:7e:f4:ef:
40:03:86:28:d8:e1:b7:b4:a8:3a:23:99:77:84:6c:92:91:ea:
8d:31:5f:8e:d2:c4:c7:6e:17:6c:67:13:ab:18:5e:40:a8:51:
18:03:01:c6:98:87:b6:9f:73:21:38:c8:11:a1:d6:be:fa:95:
72:df:20:6c:83:c9:ab:c9:33:b5:b2:74:21:06:62:0b:fe:7d:
b2:31:d3:21:2c:d2:db:b2:91:6c:f0:3f:11:af:70:5e:5b:4e:
f1:93:8d:b6:3b:31:00:f8:4f:62:ec:05:2b:1f:bd:28:0c:2d:
d1:78:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:07:29 2025 by rpki-client