Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
File: AS153615.roa (raw, json)
Hash identifier: W9qRcZsLAwMY5MDPyIYtbEgZp3HP+1A9TzKY9f+0FgI=
Subject key identifier: 01:12:4D:0B:4E:EB:E4:57:FD:16:E7:C7:74:F5:AA:DA:83:A0:F8:30
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 673F4FD62EFF0BE7ED0F47081F54EB0FCB96C620
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
Signing time: Fri 21 Feb 2025 04:22:09 +0000
ROA not before: Fri 21 Feb 2025 04:17:09 +0000
ROA not after: Fri 20 Feb 2026 04:22:09 +0000
asID: 153615
IP address blocks: 163.61.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3f:4f:d6:2e:ff:0b:e7:ed:0f:47:08:1f:54:eb:0f:cb:96:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 21 04:17:09 2025 GMT
Not After : Feb 20 04:22:09 2026 GMT
Subject: CN=01124D0B4EEBE457FD16E7C774F5AADA83A0F830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:c4:3a:85:6a:3f:28:14:2b:2c:e0:8c:57:
a3:72:25:9e:64:8c:d4:ab:e9:f1:40:a9:42:f2:88:
50:ae:fb:36:1d:f0:6c:07:6c:67:fd:51:2c:a3:34:
7a:48:b0:49:5b:82:e2:1f:82:67:97:d8:5a:d6:70:
61:cf:fd:57:55:6c:52:3a:0c:3d:2a:37:0a:db:9a:
d8:51:d2:51:4a:a7:c3:9e:8d:b9:5b:01:b3:a4:9a:
bf:82:80:99:f3:a1:76:3b:0d:04:49:e1:68:0b:85:
cd:af:21:91:24:f5:dd:a2:98:76:7f:fd:10:57:3e:
a9:58:56:0b:c5:63:19:ff:03:10:ba:e4:13:d3:22:
e0:da:a6:15:70:b2:43:59:fb:ac:a5:00:80:2d:16:
fa:f0:5c:40:2d:e2:45:d0:c3:0d:6d:f0:46:9f:7a:
b3:04:6c:a6:ed:cf:bc:5c:ea:34:37:44:f1:af:e4:
ce:28:5c:6d:57:19:c1:4d:b4:fb:52:0f:c7:e9:1c:
37:91:6f:da:68:20:be:8c:33:b2:a6:3e:ba:28:8f:
53:ab:47:76:fb:aa:2f:40:24:43:07:cf:1a:c8:19:
a2:af:19:bd:db:57:8d:f2:f0:25:47:e5:47:25:3c:
54:48:76:b6:c0:35:46:78:d8:7c:66:97:f8:e2:89:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:12:4D:0B:4E:EB:E4:57:FD:16:E7:C7:74:F5:AA:DA:83:A0:F8:30
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.134.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4f:4f:28:90:26:40:5f:78:1e:4d:0b:3d:06:a6:6b:1d:4f:
16:60:12:bb:d6:f4:81:bd:8f:8f:ba:e1:9d:8f:cc:8d:4e:b3:
ff:07:0f:c5:68:4d:d5:be:67:78:77:82:98:98:49:95:f0:03:
84:1c:89:1b:8e:36:b7:b1:95:d3:53:35:96:5f:6a:f4:59:4e:
02:52:4d:ea:a7:c6:72:be:86:99:7d:fc:49:b8:e4:93:c9:47:
f3:84:42:d0:b5:71:e0:d6:1a:33:50:13:9e:47:79:5e:f2:e7:
71:ff:bf:bb:4f:df:84:cf:46:eb:2d:34:5e:d5:a7:cf:cb:55:
a9:07:39:8a:87:17:e6:01:f9:63:60:0f:f4:b2:54:c5:b4:1d:
78:8e:bf:43:5c:47:6e:b8:3b:93:ef:6e:30:99:ca:52:8e:c8:
ae:20:fa:12:e2:b6:60:32:84:7e:64:13:bc:1b:4e:c2:44:3f:
28:57:18:bd:87:d2:a0:53:4c:be:d6:c8:ac:44:36:7d:6c:d2:
d3:76:90:51:a4:52:a6:cd:5b:2c:19:db:62:89:7e:77:07:a8:
62:3f:80:3f:32:84:2d:95:47:a1:01:c8:8b:06:61:a5:5f:c6:
e6:29:0e:3d:55:3e:18:e7:f6:e7:83:96:80:c4:2d:f9:45:59:
e2:e2:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:42 2025 by rpki-client