Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa
File: AS152050.roa (raw, json)
Hash identifier: btOArcEkqcVj+43+kvhukRx0nCQjA3/A6/8reAVuoZk=
Subject key identifier: 48:8E:CE:62:1D:32:98:30:E9:0A:FB:F2:FB:49:E1:C0:95:83:76:32
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 740DB9EA817FA4FD625EA2B42C0AF5F235DE77C5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa
Signing time: Tue 10 Dec 2024 05:00:14 +0000
ROA not before: Tue 10 Dec 2024 04:55:14 +0000
ROA not after: Tue 09 Dec 2025 05:00:14 +0000
asID: 152050
IP address blocks: 210.79.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:0d:b9:ea:81:7f:a4:fd:62:5e:a2:b4:2c:0a:f5:f2:35:de:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:14 2024 GMT
Not After : Dec 9 05:00:14 2025 GMT
Subject: CN=488ECE621D329830E90AFBF2FB49E1C095837632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:50:e8:cb:62:b0:db:31:42:0e:cb:a4:32:
ec:af:fe:3d:49:76:fe:d3:fd:96:57:a6:23:4f:09:
73:98:48:1a:a1:7e:43:d1:9a:c5:11:ff:21:2a:f5:
50:0a:34:73:32:d9:bc:66:0e:ea:ca:71:fe:2a:b8:
c6:a8:ef:53:85:e3:5b:ef:4b:7b:78:3e:96:33:20:
7d:fe:fd:a1:2b:5f:d0:37:7b:b2:38:1c:c2:a5:bd:
a4:0f:34:69:56:7f:37:90:1e:73:26:7a:ed:e8:d5:
6f:4b:51:d1:5a:1a:56:46:4b:78:2d:2c:20:ed:a1:
8f:2e:1d:e1:39:89:7b:ee:d1:2c:e8:90:89:1e:99:
48:6e:3c:b0:6f:9a:69:02:5e:35:94:42:d9:80:84:
98:d5:c0:25:ab:f0:0f:58:af:25:ee:77:da:0d:67:
31:63:28:07:b5:f1:9f:35:28:e7:55:3d:e3:41:50:
39:f5:ba:39:7d:1e:92:58:24:f6:6f:86:8b:61:14:
aa:9a:83:a6:b6:20:3b:23:e3:78:d6:6d:1c:25:b3:
31:b3:20:b8:c9:32:88:f7:dc:e7:7a:af:c6:c7:70:
60:a9:13:eb:36:87:16:4a:3b:8d:4e:d8:a5:34:4c:
04:cb:40:39:54:80:0c:e6:ab:f8:b0:33:7f:65:61:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:CE:62:1D:32:98:30:E9:0A:FB:F2:FB:49:E1:C0:95:83:76:32
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.140.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1d:74:96:c1:0c:1c:a5:4d:98:ec:48:d8:f8:03:2a:33:6b:
16:db:3d:4a:02:de:19:e8:f8:6b:26:49:5a:51:42:5d:c4:80:
9f:02:49:b0:76:87:33:80:2d:a7:c2:c7:a6:cf:f7:8f:58:01:
a8:89:54:5f:ba:51:53:96:6a:0f:38:e5:1c:ce:ab:b8:e2:e0:
56:06:2e:5a:c9:99:e8:54:8d:18:af:20:a1:4c:3b:6f:c4:de:
f5:52:19:83:b4:bd:a2:e0:d5:05:a7:79:01:ca:c4:65:24:70:
f7:9a:2f:02:33:75:72:d4:75:12:d5:17:59:33:93:dd:5c:b3:
41:11:f8:92:82:9f:60:41:d6:31:ce:ed:4c:ae:01:2d:25:34:
97:bc:c6:88:b2:91:ad:f3:96:df:1b:bc:54:86:06:15:70:dd:
2d:75:f5:ec:d4:c5:2f:04:e9:7a:04:ee:d8:da:f0:db:73:de:
4f:88:b2:50:79:f5:58:e8:29:e3:28:48:f4:2d:19:bf:02:46:
f2:5a:5b:80:aa:33:7f:f5:4b:36:9f:30:b9:75:db:c3:9b:1e:
1a:71:a4:81:ae:c0:c9:55:48:60:8a:68:1f:ed:10:14:82:8e:
d8:10:de:7a:9c:d0:a0:bb:6f:3a:86:da:90:f7:ed:61:b7:ce:
e1:4a:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:20 2025 by rpki-client