Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa
File: AS151992.roa (raw, json)
Hash identifier: FVCGerbfIDxPEfStzGmZgDaUj6a9pOqce2+k2a2g5GQ=
Subject key identifier: BD:31:19:03:F3:E4:E4:21:55:AD:44:B8:60:8C:4F:D5:3D:74:94:29
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2639583E78F05413F6108C68C4F36728BD1A27C8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa
Signing time: Fri 22 Nov 2024 04:00:00 +0000
ROA not before: Fri 22 Nov 2024 03:55:00 +0000
ROA not after: Fri 21 Nov 2025 04:00:00 +0000
asID: 151992
IP address blocks: 103.42.242.0/24 maxlen: 24
2001:df3:4b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:39:58:3e:78:f0:54:13:f6:10:8c:68:c4:f3:67:28:bd:1a:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 22 03:55:00 2024 GMT
Not After : Nov 21 04:00:00 2025 GMT
Subject: CN=BD311903F3E4E42155AD44B8608C4FD53D749429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:96:5d:b9:24:a6:44:c8:35:1f:3a:bb:7f:
dd:a1:47:c4:af:17:97:7d:64:cc:d8:df:27:6c:0e:
40:dd:b6:41:49:d4:2f:d8:6b:14:e7:c1:7f:7d:51:
57:b0:59:76:1f:d5:dc:3d:a6:97:2f:e0:ff:f9:16:
1f:ff:cb:71:e6:9c:4b:f1:49:11:e6:c0:03:bd:f3:
85:ac:c7:27:aa:15:b0:47:62:ab:ac:fd:e4:7b:49:
ca:f5:9e:d4:61:5d:e7:0e:f5:a3:62:e1:1a:ed:4a:
7f:5b:ca:4a:3f:fe:bb:63:c0:86:88:43:ab:d0:8d:
e4:30:cc:e4:64:49:7c:5a:f7:d4:dc:67:81:ac:1d:
e3:10:53:a9:95:79:0c:3d:94:6f:ec:05:d9:07:58:
e0:d5:e7:35:27:6b:48:1c:f9:e4:07:77:10:a6:1e:
29:51:60:d3:ea:8b:ba:b5:cf:c7:d5:0c:34:19:74:
e0:8a:ea:89:27:cb:05:61:f9:9f:1e:83:b5:5d:b7:
68:30:1f:58:5e:48:65:bf:6f:41:4c:d2:56:49:2a:
76:21:f3:fb:c1:fd:9e:28:3d:4f:19:1d:9f:07:1f:
27:7e:1f:90:32:50:85:56:dd:21:6a:cc:f9:df:0c:
28:2c:2e:94:44:4d:6b:db:e9:58:7b:6f:fb:4a:b4:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:19:03:F3:E4:E4:21:55:AD:44:B8:60:8C:4F:D5:3D:74:94:29
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.242.0/24
IPv6:
2001:df3:4b40::/48
Signature Algorithm: sha256WithRSAEncryption
56:7a:92:38:16:1c:fa:ae:ae:3f:7e:18:92:7f:9a:32:6e:83:
00:c6:03:ab:1a:f1:8b:4f:92:27:56:5f:d5:f9:de:cf:a7:86:
5a:41:7c:6e:90:86:8c:74:a0:09:da:f1:f0:d9:f0:6e:ce:22:
89:08:b2:f6:75:84:3d:a5:16:5d:87:ce:f9:53:b3:81:d7:93:
d0:fc:80:bf:ca:72:c7:c9:eb:ba:85:a1:1a:20:ca:fb:80:52:
9c:fe:d7:95:3a:6d:85:11:7e:29:8c:91:22:e5:53:d7:10:65:
43:6d:aa:b4:74:31:18:8d:90:65:60:40:a4:58:f7:01:83:e9:
19:46:8f:04:73:8c:da:17:c9:73:af:a9:2f:bb:ec:68:cf:b7:
17:1d:29:97:39:58:3d:36:e0:bd:18:17:ee:75:b4:d6:b9:10:
8d:b5:85:82:03:03:d1:1b:ae:75:8c:fc:a8:1a:a4:66:19:93:
e9:f7:73:41:76:03:06:c7:e6:17:3b:0a:fd:5b:57:c4:70:76:
ca:bf:f4:04:96:e6:d8:76:1f:58:49:87:fb:aa:85:20:31:42:
c8:e4:75:f9:2d:da:77:d5:7f:3b:bb:bd:ec:ff:6a:ff:8f:5a:
1a:d5:06:ec:85:40:de:d6:33:81:31:bb:63:fa:d1:69:1a:d3:
50:71:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:44 2025 by rpki-client