Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa
File: AS17769.roa (raw, json)
Hash identifier: aS6Yrw3kAiiVuNNMVL2E8cpeUAYHTN143vfmOxtRcf0=
Subject key identifier: 93:FB:86:83:24:7D:CE:E2:89:4A:29:76:91:55:83:6B:91:5D:39:90
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 04A1DE131A3C144CCDA32862E5E2CAF4896D9C5E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa
Signing time: Tue 10 Dec 2024 05:00:22 +0000
ROA not before: Tue 10 Dec 2024 04:55:22 +0000
ROA not after: Tue 09 Dec 2025 05:00:22 +0000
asID: 17769
IP address blocks: 103.158.70.0/23 maxlen: 24
103.158.72.0/23 maxlen: 24
103.158.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a1:de:13:1a:3c:14:4c:cd:a3:28:62:e5:e2:ca:f4:89:6d:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:22 2024 GMT
Not After : Dec 9 05:00:22 2025 GMT
Subject: CN=93FB8683247DCEE2894A29769155836B915D3990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:13:ff:64:8b:cb:80:77:0a:2f:fc:b0:d1:
c6:19:72:29:ad:46:ed:94:4c:3b:a8:60:99:7f:af:
60:69:b5:47:94:3d:5f:b3:b3:12:b3:16:7f:60:69:
71:d9:f9:de:27:66:05:3e:3d:0b:7c:02:34:dd:30:
a9:df:9a:62:62:b5:48:5e:d3:5e:8e:47:04:79:6e:
d7:84:b4:36:5f:16:c9:18:f1:6b:78:dc:bf:5d:0a:
24:35:42:d7:c6:dd:ed:fc:52:a6:68:2f:f8:80:b0:
ca:36:8b:a8:da:5f:cc:cb:96:d1:c6:69:fb:9b:43:
56:99:24:4d:db:c2:9b:0b:9b:67:cf:7d:25:72:5b:
33:74:fa:3a:3d:d7:e7:60:2b:83:a5:34:ed:dd:a2:
a5:6c:fb:1f:2a:06:9c:bd:fe:60:93:ed:43:ba:b7:
27:4a:43:a3:62:98:29:67:31:5b:29:b5:7b:95:d8:
95:7e:0f:65:28:a4:71:4c:f7:e0:40:75:d4:23:1b:
ca:d5:11:5a:2e:c9:7f:49:17:c0:0c:1a:2b:9d:0c:
45:a3:7b:0c:43:21:8d:c8:d5:87:01:cf:ea:95:4e:
00:9d:c2:ce:03:37:29:e8:89:62:73:5f:1c:5f:a5:
15:2f:20:53:6b:d0:60:33:fb:45:cd:cc:f1:04:e2:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:86:83:24:7D:CE:E2:89:4A:29:76:91:55:83:6B:91:5D:39:90
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.70.0-103.158.73.255
103.158.164.0/23
Signature Algorithm: sha256WithRSAEncryption
46:b2:e8:e2:1e:a1:da:08:83:50:00:af:9e:09:89:48:d4:25:
8a:7e:ef:0f:d0:00:27:77:62:4a:fe:59:dc:19:dc:d9:a9:71:
81:0f:e1:ed:6a:63:d0:73:84:0a:85:53:6b:dd:50:10:95:a5:
00:0d:ec:70:f5:e5:ea:83:5f:73:0b:61:65:7a:a4:72:58:0c:
cc:33:a5:35:e4:68:86:87:e1:d9:60:b8:02:87:c9:fb:2f:a0:
5e:9e:f6:71:6d:02:24:9c:06:57:6c:50:d6:14:f8:d3:c3:ff:
fb:97:a9:a7:f3:9d:2d:f5:08:2c:76:cf:e2:40:05:a9:e0:2d:
8a:5b:77:5b:8b:6b:66:a8:62:bc:5f:61:f3:e1:b8:a6:d9:26:
03:77:16:d3:4a:7a:43:42:69:62:cc:89:f8:af:22:dd:b2:19:
dd:27:76:88:dc:e2:3b:cf:7e:c6:0b:09:c0:2e:d6:b2:eb:9b:
2a:fb:7d:37:cf:fe:2e:bf:ba:5a:44:91:bd:7e:b0:53:2b:0f:
03:79:f2:a9:da:89:28:25:4a:e9:09:14:57:da:ae:4d:e4:19:
49:3a:af:52:c9:4a:69:5b:53:ec:9f:7c:0a:25:15:65:88:1c:
71:c8:11:a8:5a:09:06:58:cf:cc:73:1c:4c:97:a6:8c:a2:7e:
31:71:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:57 2025 by rpki-client