Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150268.roa
File: AS150268.roa (raw, json)
Hash identifier: R64gU4BWeaKkRjwSfcSXm83PRXcjVZFAc99B/O5Z9ro=
Subject key identifier: DC:EC:27:A1:FE:4C:A0:A2:9D:36:63:84:4D:31:D1:37:69:43:36:BF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 14BADDF2EFE795C5A27B5E063010D80CE4DBF91C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150268.roa
Signing time: Thu 27 Feb 2025 03:00:00 +0000
ROA not before: Thu 27 Feb 2025 02:55:00 +0000
ROA not after: Thu 26 Feb 2026 03:00:00 +0000
asID: 150268
IP address blocks: 2001:df1:7140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ba:dd:f2:ef:e7:95:c5:a2:7b:5e:06:30:10:d8:0c:e4:db:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 27 02:55:00 2025 GMT
Not After : Feb 26 03:00:00 2026 GMT
Subject: CN=DCEC27A1FE4CA0A29D3663844D31D137694336BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:cb:97:81:cd:df:36:eb:06:e1:0f:88:f6:
00:37:c2:c2:df:9e:88:29:0d:d1:91:5f:c9:cc:ec:
e9:7e:17:d1:a1:ec:8f:cf:4c:a7:cf:f4:86:e4:88:
0e:d2:1c:77:99:7b:99:95:f2:23:03:f7:01:0f:5a:
13:3d:e1:d3:3f:ef:10:3c:48:da:d4:cf:a7:72:32:
59:15:c3:05:c9:8e:78:6d:f5:e2:79:0b:8e:34:2d:
bc:fb:d5:77:2b:3a:82:75:a2:ff:1f:cb:bd:d7:a4:
62:d2:96:c2:ad:ae:92:5e:a8:63:45:6e:a3:b2:7e:
bd:1c:cd:41:50:35:a5:0c:77:a4:7f:cd:5a:7a:19:
b3:4d:3a:c6:fc:fa:31:6a:e6:2a:e4:7b:84:7d:a6:
97:9e:5d:31:f8:04:9c:e3:fc:de:f7:76:5f:3d:cc:
c3:ed:13:6e:e1:a3:b6:c1:c9:b8:0d:2d:d9:f4:58:
cc:79:31:e4:74:53:c7:2e:26:61:29:6c:76:4c:20:
fb:bf:cb:a4:1d:b9:9b:1d:8c:00:79:97:69:9b:18:
fb:75:b4:ea:51:46:37:c6:ed:ee:d7:7d:b1:85:52:
b5:50:b0:72:6c:58:14:17:ce:9c:03:14:78:f3:81:
ba:10:d0:5a:2f:01:23:88:ff:f3:4d:9d:a0:b9:9e:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:27:A1:FE:4C:A0:A2:9D:36:63:84:4D:31:D1:37:69:43:36:BF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:7140::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4a:b7:3d:d7:b3:52:43:0f:56:3c:7d:b1:78:d5:cd:ed:76:
09:c8:ed:48:d4:50:f3:3d:61:c5:ae:64:fc:64:8a:9c:b1:6d:
9c:78:f5:f4:c8:11:00:89:54:da:1e:28:d8:20:23:ff:db:2d:
83:e8:1c:d1:b1:d8:e9:f9:bd:78:db:23:1a:f8:ac:67:8d:0d:
d3:e1:e0:e9:ac:89:99:3f:e3:2c:8f:14:02:c1:d2:80:15:73:
48:5a:e9:79:56:50:24:ad:0f:7f:43:cd:9a:66:fe:30:50:58:
fe:fd:e2:81:29:93:7d:6c:2a:51:02:9e:c2:29:d6:e0:b5:41:
ad:cb:91:9c:b7:fc:4a:73:a0:35:32:63:7d:2e:be:43:08:76:
bc:67:f2:45:f8:f5:43:91:a3:c7:80:eb:35:ab:13:26:d9:51:
62:1d:67:28:4a:dd:d8:fe:f8:b6:5e:b6:ac:97:31:cb:98:a9:
fa:d9:39:41:87:52:c8:0f:0c:7f:81:ac:3b:d1:36:d9:a4:6f:
11:a5:4f:32:e3:38:6d:d0:ff:6a:28:3d:42:9d:70:b3:36:d7:
ff:2e:69:94:f1:0c:b0:bc:a1:cd:62:ff:cb:22:37:fa:85:64:
fc:66:2f:4e:a0:ae:02:34:c9:f7:ea:a4:81:ff:f5:ec:21:30:
61:1d:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:36 2025 by rpki-client