Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35dfb33f-b7b9-4028-af5b-c36bf54a49e8.roa
File: 35dfb33f-b7b9-4028-af5b-c36bf54a49e8.roa (raw, json)
Hash identifier: 3ld/eVzvrw5FUQZMDbn3xTTwEc1WIV/1/vtHa+riUaA=
Subject key identifier: FA:63:87:32:BB:E8:B7:5E:50:2B:55:15:82:FE:FF:68:4E:A2:D9:D5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6EE4FA5526EEA9875CD92A6B8D830E8D3FB29057
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35dfb33f-b7b9-4028-af5b-c36bf54a49e8.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e4:fa:55:26:ee:a9:87:5c:d9:2a:6b:8d:83:0e:8d:3f:b2:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=059dd6429d968be9bde5e47a3b67fbd3b976f4268fd4449d4a4ec6061b4ebbfc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:67:28:bd:8f:dd:af:8f:d9:c2:18:5e:d9:
7b:f1:d5:fc:92:7f:b7:f5:8f:84:0f:20:5f:c8:be:
45:dd:79:f2:32:27:ff:8b:dc:bc:dd:67:49:f9:4e:
1e:62:ee:7a:f6:da:6f:a4:31:1a:40:f5:90:f9:da:
b4:18:4b:6c:87:0f:20:72:24:a8:ac:68:4f:3a:0e:
e2:8e:4c:95:38:bb:e6:f8:41:cd:c9:0e:04:8b:78:
43:81:99:8d:51:a2:65:e2:0c:ae:50:24:8c:71:31:
9f:35:61:34:21:f3:99:f9:d5:eb:03:33:11:3c:17:
56:b0:1d:34:e6:9f:f0:04:6d:9c:19:db:a9:3a:56:
3d:e3:88:a2:af:9f:3c:9f:7f:db:e8:ce:d0:b6:a9:
b8:1d:78:c4:35:c7:ba:10:e1:8d:86:45:0e:b8:7a:
6a:ff:ee:79:f7:c3:58:ae:c3:b9:c8:e9:fd:84:1a:
0f:d7:8e:20:93:3a:ce:00:4d:57:fc:c7:a1:17:bc:
18:b7:48:e0:a3:1a:5a:5f:8a:d0:37:e2:2a:76:02:
52:5f:bf:f1:3f:34:32:af:30:dd:66:f7:4c:f6:1e:
f8:a9:6b:e0:e9:51:99:ad:9e:25:32:42:d8:4e:a8:
d6:73:98:21:47:1b:f5:92:8d:4b:29:20:bc:ad:36:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:87:32:BB:E8:B7:5E:50:2B:55:15:82:FE:FF:68:4E:A2:D9:D5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35dfb33f-b7b9-4028-af5b-c36bf54a49e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a7:f5:ff:f1:60:a4:4c:47:f6:5d:99:0f:ad:57:5e:9b:04:c3:
92:c7:02:2a:1b:f1:a5:1d:1c:33:27:ee:98:76:14:6c:5d:44:
b0:a3:2c:78:54:10:7a:11:ba:51:e7:5c:f8:e3:29:e2:d8:19:
16:e1:10:bb:ba:95:4e:0c:71:7f:56:bd:a5:ef:64:9e:1d:79:
a7:5a:d2:28:b1:d6:39:5c:87:98:23:58:93:fe:04:52:b5:48:
65:5d:85:2d:e1:98:af:cf:da:6f:d7:bd:49:6b:f9:a0:68:36:
2e:11:da:97:97:ee:05:43:95:c5:7b:48:01:25:e6:47:2b:3b:
3e:38:be:70:57:df:17:3f:53:0d:b3:98:55:36:a1:02:c9:ee:
04:ed:f2:2b:de:81:2c:45:02:f6:da:f1:fa:31:6e:bd:94:ce:
45:72:7c:7e:f2:ec:9e:c1:22:e6:47:0e:8e:f4:83:9d:93:fc:
e2:32:e9:e3:2e:4c:f3:ce:57:8c:d1:3c:f1:1f:56:e5:0f:61:
96:b8:6b:7b:b7:60:7e:11:92:43:08:51:cf:c8:4d:e1:50:0f:
5f:0b:9c:63:b8:d7:67:72:9a:fc:1e:33:b2:cc:c4:6a:a6:dd:
8b:8f:2c:a8:69:9a:5c:13:fc:90:5e:70:4f:3f:b9:6b:7e:2a:
26:0f:c2:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:42 2025 by rpki-client