Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa
File: AS151588.roa (raw, json)
Hash identifier: 9EmpCvBaDdgBRIDLIamiiYVpsEz+O95aeVmbaQSzj7s=
Subject key identifier: D6:F7:24:08:1E:92:4F:69:21:55:FF:B7:BB:41:BB:D2:7C:EE:54:AC
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7CF54AA88883DE896DDC365A045628597E5BA5D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa
Signing time: Mon 18 Nov 2024 02:57:33 +0000
ROA not before: Mon 18 Nov 2024 02:52:33 +0000
ROA not after: Mon 17 Nov 2025 02:57:33 +0000
asID: 151588
IP address blocks: 2001:df3:6740::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f5:4a:a8:88:83:de:89:6d:dc:36:5a:04:56:28:59:7e:5b:a5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 18 02:52:33 2024 GMT
Not After : Nov 17 02:57:33 2025 GMT
Subject: CN=D6F724081E924F692155FFB7BB41BBD27CEE54AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:62:7b:b4:e5:bd:de:51:1c:5a:80:f3:f2:
e1:40:c8:6e:4a:6d:af:61:90:87:1c:8e:ad:75:10:
73:f4:e6:b3:cc:15:87:b3:6d:0f:b1:65:9e:ce:d0:
d3:80:ba:6f:a9:ac:7f:c1:e0:d7:5a:0a:f3:6c:78:
4a:2e:d9:8e:7d:f9:03:df:3a:2c:0a:00:e6:30:59:
cf:99:db:f0:0c:47:89:92:e6:7a:e5:39:31:e5:c7:
82:7c:c5:5e:40:74:da:a8:dd:15:7d:90:fb:b3:64:
b3:ab:a0:54:01:03:7f:8d:76:8a:6b:db:28:5c:33:
7b:3e:56:ab:f2:db:ea:d5:61:d5:1c:64:2f:42:0a:
8d:71:62:88:92:79:1d:f1:69:1e:79:e2:04:99:ae:
05:03:69:a6:24:d6:51:14:66:ef:0d:dc:4e:70:40:
59:c9:ff:ef:85:28:f2:03:bd:72:46:83:a6:26:0c:
1d:27:17:6e:ec:ba:3c:64:a4:29:21:0f:31:70:d1:
cb:da:9c:e4:54:25:8c:b0:95:71:81:15:e4:20:0b:
cd:d2:6e:56:36:1b:24:fc:7c:bb:d4:7a:70:81:d1:
f8:f7:0b:89:b2:ed:3f:f0:db:88:d0:2c:ce:00:a5:
c9:97:94:af:3d:e9:64:81:4d:c6:c0:db:9a:9f:1f:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:24:08:1E:92:4F:69:21:55:FF:B7:BB:41:BB:D2:7C:EE:54:AC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6740::/48
Signature Algorithm: sha256WithRSAEncryption
3a:2f:82:14:5e:f1:43:62:57:5b:0c:6a:12:93:e9:21:e8:dc:
75:ff:de:d3:68:6f:61:90:f2:17:2d:80:ce:12:c5:fe:a3:f0:
ee:67:81:1b:ef:18:8c:d6:14:8a:87:e4:b4:99:b2:36:bb:5c:
7b:20:7c:8c:fb:59:02:bd:83:65:1a:1a:40:ac:7e:8c:fe:aa:
4c:6f:d4:13:b1:d7:29:49:87:3f:57:bb:4c:9f:a0:1c:69:ce:
30:ad:71:d7:d5:af:f4:4c:da:ed:2a:27:88:ad:c4:f0:00:90:
9f:17:96:7c:81:95:0e:28:d4:1e:8f:82:12:68:07:8c:de:ac:
8a:9b:b4:a3:e1:64:aa:18:91:41:6e:fb:3f:65:4b:07:ad:b9:
12:50:d0:29:8f:db:49:a4:57:e5:d6:74:f8:e6:e0:f5:a5:e3:
c8:e9:0d:3b:cc:58:8a:c9:59:52:45:10:64:4e:99:0f:6e:56:
65:8c:40:70:40:b8:66:9b:d6:61:b8:2a:ca:07:4e:95:e6:2a:
af:31:83:4a:53:05:59:a6:4b:fb:7e:9c:c6:1d:9f:d4:e6:6b:
3c:9b:4a:62:58:68:b0:9b:0d:a6:5f:55:f5:32:eb:06:b1:42:
05:4d:bc:4f:ef:4c:32:14:61:24:30:65:94:06:ae:11:25:f6:
98:87:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:00 2025 by rpki-client