Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa
File: AS17884.roa (raw, json)
Hash identifier: YLDzGvvvach3vDUhexHXH3yjvwpm0c48IMpFo22/j2E=
Subject key identifier: A0:EA:93:F2:D7:12:DF:58:C6:3D:5B:88:9F:6E:3E:87:DF:B1:4A:5E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7354A1B16A9BCAD27D129CB4B84D87FF042871CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa
Signing time: Tue 10 Dec 2024 05:00:14 +0000
ROA not before: Tue 10 Dec 2024 04:55:14 +0000
ROA not after: Tue 09 Dec 2025 05:00:14 +0000
asID: 17884
IP address blocks: 103.158.56.0/23 maxlen: 24
103.174.234.0/23 maxlen: 24
202.145.0.0/22 maxlen: 24
2402:7980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:54:a1:b1:6a:9b:ca:d2:7d:12:9c:b4:b8:4d:87:ff:04:28:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:14 2024 GMT
Not After : Dec 9 05:00:14 2025 GMT
Subject: CN=A0EA93F2D712DF58C63D5B889F6E3E87DFB14A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:b2:17:e1:6b:eb:2d:97:4a:f0:07:e8:1e:
60:ad:c2:21:c6:3f:3d:02:db:91:ef:fa:12:f9:43:
c9:15:d5:90:bb:08:ec:6c:5f:08:9e:c3:cb:45:d4:
ee:a5:0a:9b:48:37:f3:4e:0b:13:a5:e1:00:7a:74:
37:c3:8e:85:7f:e1:18:07:7a:79:4b:cf:e9:59:ff:
98:90:bd:d4:a9:bf:fc:39:fa:35:7f:14:0f:23:8d:
50:08:eb:9f:cf:82:d0:bd:89:12:2f:3f:0b:78:48:
87:9b:c5:30:e0:8b:5e:7b:09:1f:ec:85:95:77:13:
a9:a8:7d:86:92:30:fa:7f:1e:39:d0:0b:d5:7d:c1:
48:dd:44:0c:a1:3f:87:06:b0:ec:dd:c4:61:68:ba:
00:0e:66:24:c2:f2:eb:b8:cb:e0:d9:d8:b3:ff:2c:
b7:cc:07:97:1d:53:41:fd:67:7c:0d:8c:02:67:af:
13:aa:72:23:4f:2c:3c:ca:b1:1c:e8:c9:f3:c8:ca:
7d:b5:1a:a3:c2:bc:ef:5c:29:d1:ae:c9:9b:8b:f9:
2c:25:93:24:3e:4d:d5:be:2a:ee:57:65:55:95:d6:
de:8c:89:9f:da:c4:c0:73:61:62:ca:de:fc:be:0e:
e6:91:7e:86:a3:69:5b:1d:a3:f5:19:bb:ff:b9:ef:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:93:F2:D7:12:DF:58:C6:3D:5B:88:9F:6E:3E:87:DF:B1:4A:5E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.56.0/23
103.174.234.0/23
202.145.0.0/22
IPv6:
2402:7980::/32
Signature Algorithm: sha256WithRSAEncryption
63:7f:4f:e3:37:a4:f0:90:ea:13:5a:c0:2c:2e:80:f5:2a:c2:
71:29:38:bb:dd:69:31:d0:cc:b3:af:33:51:68:e9:87:31:1d:
3a:fe:61:80:7c:56:e1:81:47:cd:b1:c3:43:e2:d1:e1:2b:ec:
92:bf:4b:19:74:db:59:ff:26:35:83:28:dc:01:f8:4a:96:9f:
c5:31:5e:57:56:c0:1d:b1:c0:41:12:c2:76:37:06:4f:4f:7a:
a0:e5:c4:e0:06:7a:28:63:e6:04:41:34:0a:7d:2f:2c:fa:95:
46:72:f9:da:2a:9e:37:8a:da:e2:a5:51:ef:8a:3e:1a:53:02:
95:3e:79:b9:96:3b:da:d6:08:d6:f8:e5:3b:f1:48:8f:b2:e5:
23:51:24:fb:a9:26:4d:a7:ab:02:68:3a:dc:f7:71:3b:2b:14:
52:9f:9f:3c:bc:fd:b6:d0:1d:e9:c3:5f:59:fd:77:41:ff:c9:
0a:a2:8b:57:de:0e:aa:f9:53:f9:bb:33:6b:b5:15:1a:33:c1:
07:99:a1:2a:80:e3:69:c4:bc:67:92:46:1c:2a:50:4e:ff:d3:
4c:8d:7e:23:fa:74:68:28:9b:7a:b7:a6:54:de:50:73:a8:48:
b1:4c:a2:8c:da:5a:e5:c0:c7:49:f7:78:c2:ad:87:bc:57:55:
32:3e:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:25 2025 by rpki-client