Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa
File: AS55688.roa (raw, json)
Hash identifier: raqRIGybKQOHUB2JA7br0T4OK3kcMcON6RzugiYl6vA=
Subject key identifier: E0:46:30:FF:94:AA:32:C4:61:3F:6D:C3:17:55:56:60:EB:A0:B6:3E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2A5F7389A71FDB2BA79358D68EE77B8E78156F83
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa
Signing time: Tue 10 Dec 2024 05:00:08 +0000
ROA not before: Tue 10 Dec 2024 04:55:08 +0000
ROA not after: Tue 09 Dec 2025 05:00:08 +0000
asID: 55688
IP address blocks: 103.157.96.0/23 maxlen: 24
103.166.156.0/23 maxlen: 24
2406:a040:ff01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5f:73:89:a7:1f:db:2b:a7:93:58:d6:8e:e7:7b:8e:78:15:6f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:08 2024 GMT
Not After : Dec 9 05:00:08 2025 GMT
Subject: CN=E04630FF94AA32C4613F6DC317555660EBA0B63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:bd:ec:96:7d:de:16:c6:87:8b:94:59:5b:
6b:b5:82:7a:42:85:17:e4:80:ac:b1:34:cd:a0:15:
5a:d8:8f:fe:11:95:b7:ac:25:fa:c3:97:6b:35:eb:
0d:d9:94:ab:05:12:69:79:6d:e9:76:a3:7f:46:74:
8d:cf:5e:8c:ca:9c:12:a9:ce:af:7f:b9:d5:6c:b1:
8f:7c:08:27:09:61:94:d7:1f:32:c2:2c:29:aa:e4:
b8:13:7e:d0:0e:55:9f:18:95:b9:5a:95:f8:b8:6d:
77:c3:af:fa:ec:e9:31:fa:72:71:13:37:d1:44:af:
1b:08:6a:90:c3:3d:f7:aa:9a:62:d5:8a:97:10:0c:
b7:f4:42:4a:13:9b:01:99:c9:f0:d3:a3:6b:05:4a:
41:50:d7:29:5b:70:8a:9a:46:1e:40:93:f8:0e:67:
c2:10:6c:1d:31:4c:dc:cd:a7:9d:3d:22:e4:ce:cf:
d9:e9:0b:2e:2d:68:83:dc:7f:56:df:3c:97:0d:6e:
6c:29:db:68:91:dd:70:7e:0f:74:2d:73:a3:6e:f6:
33:69:8c:92:b5:a3:bf:9e:d5:cc:6b:f6:b8:a2:bc:
4d:ef:3e:c8:8f:9a:91:e3:4b:a4:a5:e1:4d:a6:20:
b2:8b:78:1c:a0:59:00:1d:37:d6:7b:e8:94:50:82:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:30:FF:94:AA:32:C4:61:3F:6D:C3:17:55:56:60:EB:A0:B6:3E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.96.0/23
103.166.156.0/23
IPv6:
2406:a040:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
22:44:f6:f9:8e:f3:ea:a4:23:16:8b:0b:58:f5:cd:12:5e:98:
96:41:28:40:08:79:4e:84:43:57:99:b9:e2:61:eb:b9:72:d1:
b4:b2:58:92:d3:10:2e:04:d4:9f:9d:65:0b:c2:db:48:0c:35:
2c:97:47:a7:11:78:5b:40:a3:17:62:41:f2:e6:b6:ba:2a:33:
4c:f3:dd:e8:3a:19:0c:97:16:6a:12:52:a0:b3:cb:fb:44:03:
76:5e:fb:71:aa:68:b7:71:e9:d6:82:89:6f:a3:16:58:36:5b:
a3:40:70:6f:be:ab:e3:d2:36:20:f6:5b:dd:ea:e9:19:9f:f9:
c6:94:f1:85:5c:26:82:b2:27:d2:ac:bc:a8:3e:da:a4:32:96:
94:86:7f:d1:ad:3f:af:2c:b9:21:80:1c:0c:9c:29:2d:5d:07:
2f:b9:5e:7b:b1:4f:ab:46:3b:a2:82:5e:f5:0e:10:69:3b:54:
69:a7:f5:69:c4:57:a7:6f:f2:69:14:86:25:76:e1:51:b3:e1:
4e:3a:77:0b:03:74:39:5c:38:ef:80:b2:fb:79:60:d1:cf:d3:
5e:21:66:99:ca:00:ca:28:27:3e:f4:6c:0a:58:4b:3b:83:e4:
75:70:a7:ba:3b:e4:95:e2:71:ee:5f:98:fd:52:89:43:da:da:
42:da:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:14 2025 by rpki-client