Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55660.roa
File: AS55660.roa (raw, json)
Hash identifier: 4Dtz6zX6OCbYwZF/Cw5Tl6Ra10xavigW7CJNHYKxrPo=
Subject key identifier: 14:16:89:54:C4:74:E8:3C:09:F9:23:EF:67:A5:EF:08:87:92:43:E1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4945F601D6AC70BBC3D6123A3C7E5282C1E95641
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55660.roa
Signing time: Tue 05 Sep 2023 03:07:19 +0000
ROA not before: Tue 05 Sep 2023 03:02:19 +0000
ROA not after: Tue 03 Sep 2024 03:07:19 +0000
asID: 55660
IP address blocks: 103.229.72.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:45:f6:01:d6:ac:70:bb:c3:d6:12:3a:3c:7e:52:82:c1:e9:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 5 03:02:19 2023 GMT
Not After : Sep 3 03:07:19 2024 GMT
Subject: CN=14168954C474E83C09F923EF67A5EF08879243E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:59:60:7d:67:9b:51:55:84:8d:ec:7f:18:
27:57:ac:b6:19:95:35:0c:f1:fc:d2:21:48:15:6e:
7d:c2:30:e5:41:4d:ec:be:ca:2d:35:46:24:8e:d4:
3a:48:fb:8a:d5:89:56:8f:c8:3a:ac:b7:b3:b6:2b:
16:d5:b0:e8:50:1a:53:ff:1f:e1:a0:79:ef:f1:19:
2f:e9:3c:94:3b:e7:b4:89:d6:1e:33:db:4c:3d:7f:
8b:ee:38:fa:3d:a9:41:21:28:c7:c8:ef:9c:de:67:
ae:f9:4e:23:73:f6:3a:f5:13:1b:f3:5e:87:fb:c2:
cf:08:a5:95:7b:28:99:75:49:f1:2e:2a:96:50:3f:
2a:6c:f2:5b:75:77:63:27:c4:7a:dd:10:71:ca:8b:
89:e0:f9:c9:1c:bc:56:18:40:0b:98:77:f3:6c:5f:
12:35:a9:25:83:4d:0d:98:ad:d9:77:05:89:26:a1:
6b:53:d7:19:10:0a:07:b7:df:61:80:51:66:2c:25:
4d:9f:fd:01:91:71:03:c7:6b:7b:a9:c5:83:1d:c0:
6a:13:23:8c:ef:93:92:64:f7:bf:13:fb:b4:74:49:
86:c2:18:bd:51:54:67:93:d6:bb:30:46:ec:83:f9:
6b:2f:b5:42:60:4a:40:0b:68:e5:fe:ea:39:84:ac:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:89:54:C4:74:E8:3C:09:F9:23:EF:67:A5:EF:08:87:92:43:E1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.72.0/22
Signature Algorithm: sha256WithRSAEncryption
88:1e:83:3f:d2:23:b4:77:bc:a6:e1:ce:f2:f6:31:7d:28:bf:
ce:fc:c2:f7:75:55:1e:3f:2d:08:d9:95:79:c9:10:56:39:9b:
6c:01:67:e1:c3:7c:a5:89:ad:3d:ee:de:b7:0c:21:57:fb:31:
2d:3f:3e:66:d4:b9:61:ae:7f:1b:32:f2:d9:68:50:70:67:27:
83:27:7d:c4:70:fc:76:b2:69:04:d0:4f:52:c9:37:09:f2:59:
a7:09:11:47:ff:98:3d:0f:39:88:01:04:8c:04:ad:b0:df:db:
ee:31:16:ad:a7:0c:93:5a:82:61:3b:33:6a:b2:f8:93:64:72:
fe:ee:47:8f:b6:5f:7d:f8:6d:40:b8:d5:ea:97:13:cc:af:cb:
96:37:f6:13:59:72:80:8c:59:17:69:f5:9e:87:91:e0:cb:25:
1a:e8:d4:7f:36:71:b0:b0:93:19:9b:b5:11:10:37:52:11:05:
29:a9:e7:32:0c:da:c9:bb:07:7f:f6:58:ab:26:b9:37:d3:2f:
c4:e7:6b:56:25:ca:b9:18:aa:63:d7:41:4f:ee:ce:da:4a:51:
54:bf:0d:1d:80:63:e9:d5:9f:1b:70:28:ca:56:49:7e:7c:cb:
b7:b5:ef:b3:7d:4b:c9:28:9e:9d:7d:99:b3:76:61:ee:77:b7:
b4:fa:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org