Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa
File: AS150208.roa (raw, json)
Hash identifier: +IOz1cjIJJCsy21gfQ34R5r/UlDXM5w86aof16wd8Bw=
Subject key identifier: 2B:28:30:E6:54:7D:90:82:90:0A:D6:BD:C3:F4:B5:F1:29:06:16:D3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 04593AFD3D50FF1522EDE52FCBB96E3691685600
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa
Signing time: Wed 08 May 2024 06:57:15 +0000
ROA not before: Wed 08 May 2024 06:52:15 +0000
ROA not after: Wed 07 May 2025 06:57:15 +0000
asID: 150208
IP address blocks: 2001:df3:c440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:59:3a:fd:3d:50:ff:15:22:ed:e5:2f:cb:b9:6e:36:91:68:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: May 8 06:52:15 2024 GMT
Not After : May 7 06:57:15 2025 GMT
Subject: CN=2B2830E6547D9082900AD6BDC3F4B5F1290616D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:89:61:10:7a:0b:de:fa:b1:ac:79:39:ca:
6b:b1:91:d8:13:e0:bf:f1:51:59:0a:e8:cb:cd:dd:
58:50:41:81:5b:9c:d2:34:80:3d:b4:14:c5:43:98:
05:e6:b0:6a:42:12:90:66:b3:7c:8d:00:a9:a5:72:
c5:d1:37:08:05:af:e2:4e:90:62:b9:cd:be:79:9c:
15:49:50:81:1c:3b:92:75:32:dd:83:a7:9a:74:66:
75:67:21:78:d8:a8:72:43:3e:8f:1d:3a:5c:8f:38:
36:aa:db:e1:39:38:9c:71:86:84:e1:0e:de:f9:68:
d7:ec:1d:86:ab:cf:79:08:99:0e:fc:09:4d:96:65:
b4:5f:2d:b4:e8:8b:8b:43:04:4e:92:1d:c1:38:e0:
2e:f7:2a:0b:68:35:ad:9a:72:8e:0a:f9:48:00:11:
9a:f3:b8:21:f3:53:e4:6d:18:e6:ff:54:16:e3:47:
a3:54:46:2b:ac:13:b3:03:c1:57:ad:87:d2:b4:e9:
db:d2:df:e6:b3:57:25:67:34:3f:e6:7a:d5:17:45:
1e:2a:23:11:87:61:f8:a6:59:3c:45:15:58:0b:5c:
c5:95:80:57:8e:7f:67:c4:61:18:cc:6e:fa:0a:51:
fa:d0:d2:6e:40:f6:d3:3c:4e:11:4c:9e:2d:48:be:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:30:E6:54:7D:90:82:90:0A:D6:BD:C3:F4:B5:F1:29:06:16:D3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c440::/48
Signature Algorithm: sha256WithRSAEncryption
3c:af:7f:48:25:dc:35:7d:23:5b:2c:ff:31:64:3a:6d:1a:78:
05:c2:b1:e5:71:cc:c5:31:64:f7:7d:c9:68:11:d0:7d:90:9d:
02:d9:9d:87:3e:4c:2e:c6:32:d6:46:41:32:63:83:60:35:ec:
ac:7d:bb:3f:69:92:5f:8d:11:8a:b2:67:2d:d6:69:6c:4e:3c:
1d:a4:6a:ad:d7:79:bc:51:3e:32:e8:11:0c:d5:80:54:95:6f:
86:cf:a9:33:e4:4e:5f:81:a1:46:d9:f7:ee:ba:c5:c6:40:11:
59:6f:fd:19:20:6b:4c:5e:1e:0e:a0:ea:a2:07:bd:79:10:0e:
98:a0:f3:46:82:cf:e8:37:61:05:a5:59:e8:25:59:4b:7e:f2:
e7:32:08:b6:94:aa:dd:5b:94:59:ee:0d:bd:3e:64:ac:32:04:
65:62:dd:94:ba:b3:7f:c8:b0:9c:42:db:d2:b7:8a:70:45:18:
3f:e7:ac:ae:b7:b5:50:22:df:91:46:02:95:01:c2:4c:63:6a:
9f:bb:8d:6b:fe:6c:90:70:05:3a:f0:6e:50:f2:3f:d1:dd:72:
e2:16:61:25:26:80:b8:9b:2d:86:7b:40:c3:bd:3e:29:9c:6e:
cc:ea:a1:55:c5:b6:76:a0:b5:1b:fe:62:ab:d5:be:29:c3:70:
19:56:4a:d0
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUBFk6/T1Q/xUi7eUvy7luNpFoVgAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwODA2NTIxNVoX
DTI1MDUwNzA2NTcxNVowMzExMC8GA1UEAxMoMkIyODMwRTY1NDdEOTA4MjkwMEFE
NkJEQzNGNEI1RjEyOTA2MTZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJjiWEQegve+rGseTnKa7GR2BPgv/FRWQroy83dWFBBgVuc0jSAPbQUxUOY
BeawakISkGazfI0AqaVyxdE3CAWv4k6QYrnNvnmcFUlQgRw7knUy3YOnmnRmdWch
eNiockM+jx06XI84Nqrb4Tk4nHGGhOEO3vlo1+wdhqvPeQiZDvwJTZZltF8ttOiL
i0METpIdwTjgLvcqC2g1rZpyjgr5SAARmvO4IfNT5G0Y5v9UFuNHo1RGK6wTswPB
V62H0rTp29Lf5rNXJWc0P+Z61RdFHiojEYdh+KZZPEUVWAtcxZWAV45/Z8RhGMxu
+gpR+tDSbkD20zxOEUyeLUi+MTMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQrKDDm
VH2QgpAK1r3D9LXxKQYW0zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIwOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfPEQDANBgkqhkiG9w0BAQsFAAOCAQEAPK9/SCXcNX0jWyz/
MWQ6bRp4BcKx5XHMxTFk933JaBHQfZCdAtmdhz5MLsYy1kZBMmODYDXsrH27P2mS
X40RirJnLdZpbE48HaRqrdd5vFE+MugRDNWAVJVvhs+pM+ROX4GhRtn37rrFxkAR
WW/9GSBrTF4eDqDqoge9eRAOmKDzRoLP6DdhBaVZ6CVZS37y5zIItpSq3VuUWe4N
vT5krDIEZWLdlLqzf8iwnELb0reKcEUYP+esrre1UCLfkUYClQHCTGNqn7uNa/5s
kHAFOvBuUPI/0d1y4hZhJSaAuJsthntAw70+KZxuzOqhVcW2dqC1G/5iq9W+KcNw
GVZK0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:42 2025 by rpki-client