Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa
File: AS45291.roa (raw, json)
Hash identifier: y5NFZAdd7364c982INtTymPbjEKHcKVmYrhHSeCCJkE=
Subject key identifier: 82:64:89:E2:C3:12:D1:27:DF:DD:14:EE:FE:AC:32:68:95:11:19:04
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1422A0A65EBF5813181F88B40DB332B3E817109F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa
Signing time: Tue 10 Dec 2024 05:00:18 +0000
ROA not before: Tue 10 Dec 2024 04:55:18 +0000
ROA not after: Tue 09 Dec 2025 05:00:18 +0000
asID: 45291
IP address blocks: 103.156.72.0/23 maxlen: 24
203.153.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:22:a0:a6:5e:bf:58:13:18:1f:88:b4:0d:b3:32:b3:e8:17:10:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:18 2024 GMT
Not After : Dec 9 05:00:18 2025 GMT
Subject: CN=826489E2C312D127DFDD14EEFEAC326895111904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:68:c9:cd:69:b7:94:7c:c3:28:1a:75:70:
e3:a9:34:e8:2b:26:5c:3d:17:43:ce:72:67:f3:a4:
aa:d3:38:e6:de:c6:3e:ea:86:1f:df:99:56:42:0b:
16:4e:24:98:a9:73:7c:ae:21:f1:5a:a0:50:c8:18:
94:a1:10:f2:b7:c5:01:8a:6f:59:5d:ef:9d:9f:ba:
90:ce:d4:b9:bd:9e:01:b7:34:ea:e1:2f:b2:5a:88:
11:a2:d2:65:5f:3c:d0:4e:97:e0:b7:ee:49:d9:dd:
b1:74:9a:0a:d1:06:32:46:36:89:ee:5a:cf:de:84:
50:04:11:03:ff:3b:7d:7b:7b:3d:87:94:ce:df:b8:
5a:0a:58:9a:5a:9f:09:76:e9:64:81:7c:15:94:db:
ab:f2:a2:ac:e4:8d:61:9e:38:59:fa:45:8b:b7:a8:
60:46:16:eb:4b:2c:ce:ad:54:58:d4:75:ef:af:89:
8b:c4:e3:87:4c:d3:90:ab:70:4a:b5:04:e9:62:34:
fc:ba:23:03:df:51:cd:bf:7f:71:d4:b2:af:a5:77:
28:45:df:66:f4:3a:cf:ef:d9:07:66:5a:50:10:87:
31:81:33:14:10:c9:f5:de:1a:0e:6d:b0:90:7d:5e:
ca:00:e8:cd:d3:17:bf:50:2f:30:e3:21:f3:5e:55:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:89:E2:C3:12:D1:27:DF:DD:14:EE:FE:AC:32:68:95:11:19:04
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.72.0/23
203.153.216.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e0:42:41:bb:72:01:9c:89:36:f4:bf:1b:7e:0c:2c:70:0c:
6f:78:4b:98:de:01:76:ee:41:c5:9d:21:44:d0:64:db:74:5e:
e3:83:0d:2a:5a:67:a0:02:22:fe:7e:cd:c0:49:02:1f:cc:f1:
0b:fd:02:30:6a:2c:3a:23:fa:e4:f4:c2:26:ea:f5:8b:88:44:
46:90:4a:d3:20:bb:85:db:ac:ab:5a:0a:a8:56:91:48:d0:a5:
83:91:11:c7:be:86:4a:6c:04:a8:96:33:ed:a9:ee:12:36:4e:
a3:04:f7:1f:63:ef:c1:4e:87:07:10:5f:42:4d:08:84:4c:84:
cc:a8:73:4f:c1:af:53:d7:d2:40:48:29:75:14:40:f8:2a:83:
41:3c:6f:ae:1e:52:22:96:48:b0:83:05:cc:a8:11:1a:5f:01:
05:45:e7:df:14:1d:c0:b4:b8:9d:a2:6a:31:6c:dc:27:23:e3:
02:a4:f8:06:15:66:09:4d:f7:27:c9:60:a0:2f:a5:fa:1a:68:
2b:3a:c8:43:e6:a5:3e:6e:c0:1a:3b:b9:73:45:60:27:76:f9:
02:d2:13:6b:a0:10:6d:36:26:27:07:da:ef:93:03:3d:79:4f:
5e:ce:8d:8d:80:3b:b0:41:e7:77:81:57:06:46:73:ad:97:f8:
23:ee:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:02 2025 by rpki-client