Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa
File: AS153609.roa (raw, json)
Hash identifier: L4hfiNpkFnmsU6c5y7aCFY4mPTM62vDGQIGzIGz7R/c=
Subject key identifier: 68:F2:FA:78:97:AF:7B:80:FE:39:55:54:54:A1:B4:89:2E:AB:11:52
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 72F7605F0DFBF7FD6E0E10C63628E1BB41CCF62D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa
Signing time: Tue 18 Feb 2025 04:22:16 +0000
ROA not before: Tue 18 Feb 2025 04:17:16 +0000
ROA not after: Tue 17 Feb 2026 04:22:16 +0000
asID: 153609
IP address blocks: 163.61.49.0/24 maxlen: 24
2001:df5:8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f7:60:5f:0d:fb:f7:fd:6e:0e:10:c6:36:28:e1:bb:41:cc:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 18 04:17:16 2025 GMT
Not After : Feb 17 04:22:16 2026 GMT
Subject: CN=68F2FA7897AF7B80FE39555454A1B4892EAB1152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:31:10:25:3b:7e:f2:53:09:11:b3:7b:48:
d1:64:2e:eb:4e:f7:ab:f7:f6:48:7e:f1:18:35:85:
cc:6a:4e:4b:85:3b:9b:b8:48:d6:cd:bd:8d:b0:e6:
4a:b3:1d:48:0f:51:7e:4b:05:15:62:dd:06:97:d2:
d0:2f:f3:51:0d:86:3d:bf:e8:93:c0:4c:5b:3d:96:
cb:25:d5:db:1b:f6:e1:3a:ed:a2:96:35:43:20:a3:
3c:ae:74:97:8d:cb:f2:04:b0:0c:1a:17:45:8c:b9:
e0:ab:48:fc:f8:96:91:15:f2:2b:cd:d3:ce:d2:22:
45:89:f5:6e:37:c0:85:92:48:f1:2b:5a:15:31:ab:
f1:6f:0d:9a:c5:cd:cf:a4:05:89:d3:f0:53:c2:02:
14:5e:6e:d3:94:8b:c9:32:b1:2e:5b:9c:35:ef:06:
cc:18:34:40:bd:27:62:cf:25:8b:1a:e4:33:06:6f:
34:b5:19:86:64:41:1e:cd:ab:81:04:22:08:ba:10:
5e:05:94:c2:fb:ce:a2:d9:c9:d8:5a:22:19:d8:94:
82:b0:40:d8:b0:9e:e4:b4:f1:51:9c:f6:e9:b6:28:
64:5a:1b:aa:2f:ed:aa:55:5f:b7:b6:bb:3c:37:c8:
19:d0:6e:be:7e:98:59:3f:f5:ef:90:dd:f0:3a:df:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:FA:78:97:AF:7B:80:FE:39:55:54:54:A1:B4:89:2E:AB:11:52
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.49.0/24
IPv6:
2001:df5:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:43:a4:26:95:3b:e2:46:65:ef:b3:18:ff:d3:14:7c:bc:d8:
7c:f4:25:85:cb:93:15:a5:5f:99:d0:68:52:ff:50:d9:6e:ba:
97:d1:ba:a6:48:85:16:e0:d4:b2:31:73:07:18:bf:0f:c3:70:
46:7c:c1:8e:e8:82:60:c1:13:68:0e:f0:2f:ba:ce:15:74:cf:
7a:6a:17:3b:e5:9e:bf:59:e9:7d:e4:07:95:31:07:e5:24:0d:
03:36:3e:3f:5c:7e:2b:23:37:e6:fe:cb:e4:a4:9d:93:a0:27:
12:cd:9e:0c:a1:c5:ff:03:21:9c:f9:b4:e9:2a:1a:2c:6a:c9:
98:b2:f6:e0:35:cc:19:8c:45:f1:b0:8f:8e:ba:a2:15:56:42:
71:15:6b:b9:6d:18:20:3a:c1:2e:d9:6a:e0:68:21:6c:02:33:
90:a6:32:68:97:a7:34:63:a4:5e:55:54:6b:55:aa:07:03:e1:
67:fc:c7:b2:a1:db:18:b3:80:65:4f:7a:68:b0:cf:19:73:62:
65:56:b4:54:23:0a:cd:f4:66:f5:86:bf:35:10:03:09:bb:a3:
09:ed:df:69:0e:80:75:81:6d:c8:35:59:8b:9f:58:fe:5d:de:
37:6f:ab:1f:2f:3b:c4:97:60:57:b5:85:bc:6d:29:74:ea:69:
e1:4d:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:10 2025 by rpki-client