Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa
File: AS150493.roa (raw, json)
Hash identifier: 9P8cnpqVgZrkzouGAs8VGVJcPOcEohG0NxrRv22bMfo=
Subject key identifier: 68:A9:D0:CE:E6:15:C4:6F:78:3D:F4:BF:01:46:6C:FA:A3:FD:49:99
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5761CAE37C7C5857AFB7BF3689AEDDFCB2E10BC2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa
Signing time: Mon 28 Oct 2024 05:00:00 +0000
ROA not before: Mon 28 Oct 2024 04:55:00 +0000
ROA not after: Mon 27 Oct 2025 05:00:00 +0000
asID: 150493
IP address blocks: 2001:df1:e8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:61:ca:e3:7c:7c:58:57:af:b7:bf:36:89:ae:dd:fc:b2:e1:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Oct 28 04:55:00 2024 GMT
Not After : Oct 27 05:00:00 2025 GMT
Subject: CN=68A9D0CEE615C46F783DF4BF01466CFAA3FD4999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:7b:f3:33:7d:50:be:18:ea:9f:11:d2:12:
e5:44:e1:b8:15:d5:1c:0d:f1:ac:dc:ca:62:4a:91:
d2:e9:1c:60:bd:7d:2e:6d:bb:46:f9:50:70:de:a6:
f0:9b:9d:f1:64:28:55:7d:a3:57:f2:db:60:b3:d8:
ae:05:ac:41:72:55:3b:33:2c:74:40:a6:08:b4:ae:
e4:2d:da:18:7a:24:a2:20:58:8b:e1:16:fd:3f:e5:
13:93:5f:2b:61:f5:00:42:d1:4b:55:f4:a0:5a:9d:
5e:85:49:c8:2e:c9:49:96:82:6e:60:9a:c6:cd:1d:
da:95:1c:29:c6:c9:08:e7:86:b4:73:3b:75:9b:f9:
47:07:56:ff:69:6f:cf:8c:3d:e6:bf:8a:d0:c4:11:
4e:03:77:1a:64:e8:d2:d5:76:e3:68:6c:72:df:e1:
c9:27:7e:3a:82:0e:45:aa:e7:55:7a:69:ac:4a:1c:
94:41:49:d2:56:fb:ba:69:60:8b:d0:34:25:2e:37:
a4:5d:b0:12:85:a0:8d:52:17:58:75:b1:80:aa:48:
83:53:f8:37:70:f2:12:58:73:dc:2b:5d:8d:b0:1c:
12:e3:4e:17:36:9c:d9:04:4f:01:de:02:3c:ac:01:
ce:9a:58:4b:aa:42:e3:c4:cd:dc:f2:e7:3f:7a:a2:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:D0:CE:E6:15:C4:6F:78:3D:F4:BF:01:46:6C:FA:A3:FD:49:99
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:e8c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:3a:36:93:51:8c:2f:82:a7:99:44:3e:15:d4:57:6f:fb:50:
67:e5:c2:4c:bd:91:b5:aa:3c:26:70:45:98:88:91:27:e8:f8:
96:48:bd:f6:c0:e3:a1:31:1d:c3:4f:c2:61:eb:7f:11:8e:c0:
44:ec:23:6d:ec:fb:94:eb:1e:a1:64:54:af:fb:08:1a:62:86:
61:7d:70:70:0d:c6:3f:15:f4:19:64:84:fa:8f:0e:6b:7b:93:
21:65:03:bf:84:dd:09:22:b1:ef:29:d3:34:02:f5:35:23:6b:
6b:0f:41:f8:67:84:78:72:70:5e:2f:d8:b3:e5:46:5c:35:2e:
cc:da:f3:bd:18:11:c7:65:06:49:f2:82:88:cb:bf:9b:c2:57:
6a:ca:a8:19:12:13:57:0a:43:7c:d2:e2:f4:8a:c5:15:ca:c8:
0c:3d:2b:4e:3a:94:0f:fa:f4:b4:53:36:4b:05:32:a5:e3:71:
e8:d9:3c:7e:60:ba:0b:7f:63:c9:8c:53:dd:cd:85:81:0d:da:
6b:59:de:ae:26:de:a6:f7:ec:2a:a5:3a:6f:79:09:d8:3a:0d:
0c:90:79:72:b9:f1:51:a2:40:44:8c:21:c7:2b:47:91:83:bd:
f6:17:0a:97:5d:50:c8:8e:b1:dc:f7:bb:d9:7d:3d:01:19:e4:
02:83:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:09 2025 by rpki-client