Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa
File: AS147079.roa (raw, json)
Hash identifier: OdW366I1qZpXXtJIBNbNdHFKCLGHaqJR4R3xg0pTGrM=
Subject key identifier: 83:ED:E8:24:A2:81:82:5F:73:D8:53:AB:FE:6A:80:B1:AB:DE:59:1A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6879E2571D65D7C686DFDD6145898DD2227ACC68
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa
Signing time: Wed 01 Jan 2025 04:00:00 +0000
ROA not before: Wed 01 Jan 2025 03:55:00 +0000
ROA not after: Wed 31 Dec 2025 04:00:00 +0000
asID: 147079
IP address blocks: 2407:ed40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:79:e2:57:1d:65:d7:c6:86:df:dd:61:45:89:8d:d2:22:7a:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 1 03:55:00 2025 GMT
Not After : Dec 31 04:00:00 2025 GMT
Subject: CN=83EDE824A281825F73D853ABFE6A80B1ABDE591A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:27:35:a7:bf:76:c2:23:18:f6:76:3e:ee:
34:ee:e6:37:48:57:ca:d7:52:44:01:74:79:07:38:
bf:29:4a:0e:b3:46:70:e4:28:e7:03:84:53:5a:62:
0a:66:6b:4b:83:9e:5c:9b:90:f9:68:04:96:24:6c:
6e:d5:2f:78:1a:62:4c:3b:72:87:19:09:0d:04:1e:
b6:3d:2a:bd:01:03:86:5d:23:60:fa:f5:22:40:07:
37:5f:77:b0:6d:a7:c4:75:7a:c5:34:5b:e8:fe:1e:
6e:79:5f:b2:17:e8:a2:61:2d:85:58:f2:6c:a7:d4:
87:32:a4:b6:1a:22:15:6c:a9:b6:90:39:a2:4d:ba:
e8:a6:ca:63:9f:73:4f:c9:9a:8c:ac:5f:de:7a:cc:
61:d0:20:9c:13:2d:15:cd:0e:ec:53:d0:c7:9a:85:
0c:45:3c:85:53:95:d3:87:f7:1b:6b:0d:6b:ff:92:
44:cc:70:c8:e9:36:01:00:f7:82:e9:ad:db:6b:41:
91:7a:69:72:9e:52:20:44:81:87:01:e6:8f:91:85:
0b:a1:f6:bf:97:5a:65:5a:ab:c1:94:99:3e:fe:cb:
0d:c9:d0:50:7d:f7:a8:8e:e9:fb:7e:ac:c2:33:6c:
aa:d3:d7:97:d8:2e:10:d6:69:6f:36:84:22:cb:23:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:E8:24:A2:81:82:5F:73:D8:53:AB:FE:6A:80:B1:AB:DE:59:1A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
02:6b:57:28:02:23:e2:be:ab:fd:f9:e7:f1:d8:cb:9d:fd:71:
56:dd:d4:72:21:f0:53:d3:80:f6:44:f3:f1:ec:c3:9a:9a:31:
96:32:b5:f2:07:4a:63:d2:cb:3a:f3:d7:eb:48:21:ec:17:40:
da:4b:f1:97:3a:d0:5c:ab:46:d7:cb:a9:0f:fe:83:88:52:86:
1f:77:2f:f1:d2:21:4e:55:24:2a:28:1c:aa:92:25:57:3b:60:
6a:c6:75:54:d9:a2:83:ac:fe:79:98:2e:e3:f2:e2:0f:f5:c6:
66:e7:72:a1:45:71:0d:2a:37:35:35:e1:d1:9e:25:ec:7c:ab:
c7:14:81:14:48:ea:db:11:f2:9d:5e:44:1f:e7:3d:72:12:48:
9e:95:1b:46:8a:c8:b0:80:e1:3d:7b:0d:59:44:d0:41:86:52:
f3:ba:ee:98:42:a2:29:53:1b:dd:ea:db:0c:f7:0f:36:83:23:
e6:ff:c4:be:2b:f6:80:0b:e1:9a:44:21:7f:06:f8:a5:8c:2a:
3a:f5:f7:38:f2:4c:11:35:ef:25:e8:77:62:2e:fe:73:dd:ee:
c1:1a:d7:5b:e6:4b:96:00:ff:39:9b:b5:8e:95:5e:87:c8:0d:
4e:b2:fd:bd:11:f3:b3:f9:6c:70:0b:ba:32:fa:ee:31:c6:05:
49:57:b9:4f
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUaHniVx1l18aG391hRYmN0iJ6zGgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwMTAzNTUwMFoX
DTI1MTIzMTA0MDAwMFowMzExMC8GA1UEAxMoODNFREU4MjRBMjgxODI1RjczRDg1
M0FCRkU2QTgwQjFBQkRFNTkxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQWJzWnv3bCIxj2dj7uNO7mN0hXytdSRAF0eQc4vylKDrNGcOQo5wOEU1pi
CmZrS4OeXJuQ+WgEliRsbtUveBpiTDtyhxkJDQQetj0qvQEDhl0jYPr1IkAHN193
sG2nxHV6xTRb6P4ebnlfshfoomEthVjybKfUhzKkthoiFWyptpA5ok266KbKY59z
T8majKxf3nrMYdAgnBMtFc0O7FPQx5qFDEU8hVOV04f3G2sNa/+SRMxwyOk2AQD3
gumt22tBkXppcp5SIESBhwHmj5GFC6H2v5daZVqrwZSZPv7LDcnQUH33qI7p+36s
wjNsqtPXl9guENZpbzaEIssjLvkCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSD7egk
ooGCX3PYU6v+aoCxq95ZGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQH7UAwDQYJKoZIhvcNAQELBQADggEBAAJrVygCI+K+q/355/HY
y539cVbd1HIh8FPTgPZE8/Hsw5qaMZYytfIHSmPSyzrz1+tIIewXQNpL8Zc60Fyr
RtfLqQ/+g4hShh93L/HSIU5VJCooHKqSJVc7YGrGdVTZooOs/nmYLuPy4g/1xmbn
cqFFcQ0qNzU14dGeJex8q8cUgRRI6tsR8p1eRB/nPXISSJ6VG0aKyLCA4T17DVlE
0EGGUvO67phCoilTG93q2wz3DzaDI+b/xL4r9oAL4ZpEIX8G+KWMKjr19zjyTBE1
7yXod2Iu/nPd7sEa11vmS5YA/zmbtY6VXofIDU6y/b0R87P5bHALujL67jHGBUlX
uU8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:35 2025 by rpki-client