Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa
File: AS55680.roa (raw, json)
Hash identifier: qZ5snSJf4k4fjbmObrETIKgnNfMpHtH1ygEp9JYdraU=
Subject key identifier: A5:91:1F:92:F1:5E:17:27:7B:5B:2E:E6:F9:9E:15:CA:72:B5:06:8F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01AAA80D13F9C25A990B54C9B95D8D273A6F0667
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa
Signing time: Tue 17 Dec 2024 10:00:00 +0000
ROA not before: Tue 17 Dec 2024 09:55:00 +0000
ROA not after: Tue 16 Dec 2025 10:00:00 +0000
asID: 55680
IP address blocks: 103.60.234.0/23 maxlen: 24
2400:dbe0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:aa:a8:0d:13:f9:c2:5a:99:0b:54:c9:b9:5d:8d:27:3a:6f:06:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 17 09:55:00 2024 GMT
Not After : Dec 16 10:00:00 2025 GMT
Subject: CN=A5911F92F15E17277B5B2EE6F99E15CA72B5068F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:1c:7b:03:d9:da:96:20:7b:ae:c5:2e:65:
aa:1d:8a:36:ef:cf:18:99:7c:89:d6:8b:e4:93:b9:
8a:89:34:a1:e2:e6:ef:6f:39:67:46:d3:a6:b2:e8:
4a:bd:c4:03:df:5c:a7:52:78:37:87:3e:9b:63:42:
d2:85:39:75:4a:5d:f0:73:4f:ec:5e:9f:1a:37:18:
2e:ac:1b:9b:ac:82:19:6b:3c:a4:27:f0:3e:99:28:
a8:82:d3:39:f3:eb:41:c4:47:96:0b:d5:b4:bd:3f:
f3:64:8f:74:2d:02:cb:4a:ed:3e:76:29:ca:fc:87:
e7:56:d3:89:2b:ab:1c:fa:3a:fc:21:81:6c:f6:6b:
f2:ed:fd:17:4e:41:6c:73:7f:4b:ca:29:bd:40:45:
0a:cf:5e:2e:c8:18:83:b4:a2:cb:65:aa:d6:3d:97:
5a:d8:ef:6c:8c:12:eb:b1:9d:e6:8b:59:26:c4:1c:
90:bd:94:23:c9:63:40:4a:a7:03:c1:4d:6f:79:df:
c1:bc:a9:0b:53:e0:64:a2:f6:4f:eb:69:8f:07:9d:
fc:ae:95:94:3b:70:df:91:5c:42:f1:cf:de:4a:26:
f2:a1:b8:a6:b3:d7:fa:e5:3d:91:d7:9a:a5:be:e6:
5a:2e:3b:c4:34:79:c6:58:93:c3:27:1e:53:81:5e:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:1F:92:F1:5E:17:27:7B:5B:2E:E6:F9:9E:15:CA:72:B5:06:8F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.234.0/23
IPv6:
2400:dbe0::/32
Signature Algorithm: sha256WithRSAEncryption
67:24:a9:2f:46:51:53:9c:12:4c:a7:9e:b3:e2:1b:00:ac:d4:
0f:4a:40:ca:4a:36:83:2d:62:14:b0:59:c6:40:e8:0d:ee:3f:
16:11:a5:06:52:14:b3:c7:fc:4c:a1:58:1e:91:d9:9e:45:fb:
7d:ad:93:14:33:25:76:48:70:fe:da:54:af:3b:ef:45:a9:00:
ee:4c:75:82:74:7d:c2:1c:3e:b2:73:63:e7:2a:d0:b0:be:fd:
55:48:6d:8f:a1:58:03:08:e3:2a:ed:b2:31:79:4c:06:ed:21:
46:e6:6d:1d:d3:14:e7:ff:0d:1e:5b:4b:1c:15:78:58:e1:1b:
e5:fc:2b:00:57:06:4c:68:3a:9d:91:a3:25:58:99:81:38:57:
b7:0c:64:4a:dd:42:41:40:f2:81:e1:18:9c:4c:19:1e:16:e7:
be:7d:51:6b:d7:a5:4a:1c:b0:d6:6f:e1:52:5d:a0:cd:e6:23:
e4:52:08:f4:a2:c3:6a:6b:6e:70:e5:b9:9c:25:e1:5c:00:2e:
e8:b7:6e:c3:4b:c1:aa:c7:c9:6c:73:3a:9a:94:73:0a:04:ea:
3a:33:7c:ec:20:a7:6d:13:3c:01:73:d2:4c:ed:ae:13:c3:8e:
1b:cf:ab:1d:97:e1:64:92:0d:5e:0d:18:06:84:35:de:44:08:
9c:ef:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:45 2025 by rpki-client