Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa
File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json)
Hash identifier: lo8zLs/3xKknELYeaaIylkgPyQSEKIdi/skCV0+iSwI=
Subject key identifier: 3D:5D:B4:BB:97:E7:52:25:BE:33:B5:08:72:0E:A5:56:DF:BC:4C:A0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 656A3414A0411409D112E29CCDCA5CCF8B5A875B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.212.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6a:34:14:a0:41:14:09:d1:12:e2:9c:cd:ca:5c:cf:8b:5a:87:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=28003dcba0c0674651946521d956522cb59dd88e32bf482fe682182a488bb2d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:b3:b3:75:ae:2c:4d:7b:bd:ee:0e:5c:b8:
34:7a:67:66:36:d3:29:f6:dd:f4:55:22:ec:19:05:
44:bc:ee:4e:12:8e:00:a5:6e:3c:19:a9:32:4c:ee:
c1:fc:19:6e:65:df:bd:86:3c:dd:1f:54:8d:2f:23:
2d:a0:9b:57:c4:d5:b0:14:d6:fc:04:7c:fe:40:bd:
30:e4:26:2a:83:bf:cb:27:26:e9:42:7c:c1:71:22:
b0:b6:bd:d7:d4:7d:9d:3b:92:6a:b6:42:45:58:e3:
3a:70:0d:01:bd:3f:b7:f9:ab:b8:60:1e:1b:89:6c:
e9:12:d7:74:f7:69:c6:b3:98:16:60:29:cc:4e:17:
55:82:0c:b0:ab:a8:8c:04:ab:5e:6d:12:7d:10:04:
b7:4f:a4:3a:cd:01:1b:ae:e7:bb:ad:30:d5:ea:dc:
fa:09:3c:d0:ad:b2:a3:b5:41:0a:01:86:5c:98:a6:
80:25:f5:2f:79:56:fa:08:40:8f:ef:16:49:00:46:
de:dd:0f:42:03:32:b2:41:7f:0c:73:24:ce:4b:f2:
6d:b9:73:96:d3:6a:73:2c:74:03:b2:f0:59:e9:6b:
fc:80:18:c9:3c:ca:9b:9e:21:6a:63:81:09:36:e2:
d5:53:d8:b6:e9:62:f2:10:7f:ed:67:e5:cd:a0:7c:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5D:B4:BB:97:E7:52:25:BE:33:B5:08:72:0E:A5:56:DF:BC:4C:A0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ba:5d:1e:22:bb:e4:06:68:ef:f1:54:5b:17:3d:1b:c8:3d:79:
60:e4:33:db:81:60:d3:19:5e:b7:9d:de:dc:96:af:f7:e5:72:
eb:a3:3f:ca:2c:6f:6d:1c:01:cb:a4:8b:0e:cf:d8:73:88:54:
7f:f4:9d:6e:59:6d:a0:3c:bc:ec:8a:1f:99:e3:05:b9:b1:1f:
1a:de:d0:b2:33:0b:77:b7:a2:84:3d:ad:fa:86:29:d1:e1:85:
f5:c4:ec:68:00:9f:74:28:ea:70:b6:f1:06:ef:fd:58:ed:bc:
c6:ca:db:87:0d:82:8f:03:94:c3:6f:c7:10:71:5d:2b:87:ef:
18:fa:c4:9e:15:21:88:90:50:b0:a2:83:7a:05:53:db:c6:52:
e7:a4:55:67:37:6e:68:0b:9c:cf:c0:0f:80:76:64:94:c2:7f:
76:44:20:88:1a:d6:12:66:7a:93:c5:32:2b:2c:43:b0:f4:e7:
c8:6d:38:ce:46:fd:32:b5:76:7a:69:e6:1c:c5:2a:63:fd:f2:
fd:bd:3e:8e:36:19:13:25:c6:7a:fb:1f:41:43:f0:98:ba:9e:
5c:fa:df:1f:dd:55:45:4d:49:bb:bc:12:80:1c:a4:85:e9:0a:
33:50:6a:3d:32:e6:8b:23:5e:75:61:e2:15:06:dc:db:2e:9f:
3a:9e:18:e7
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUZWo0FKBBFAnREuKczcpcz4tah1swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExNDAwMDAwMFoX
DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNAMjgwMDNkY2JhMGMwNjc0NjUxOTQ2
NTIxZDk1NjUyMmNiNTlkZDg4ZTMyYmY0ODJmZTY4MjE4MmE0ODhiYjJkMTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAOzs3WuLE17ve4OXLg0emdmNtMp
9t30VSLsGQVEvO5OEo4ApW48GakyTO7B/BluZd+9hjzdH1SNLyMtoJtXxNWwFNb8
BHz+QL0w5CYqg7/LJybpQnzBcSKwtr3X1H2dO5JqtkJFWOM6cA0BvT+3+au4YB4b
iWzpEtd092nGs5gWYCnMThdVggywq6iMBKtebRJ9EAS3T6Q6zQEbrue7rTDV6tz6
CTzQrbKjtUEKAYZcmKaAJfUveVb6CECP7xZJAEbe3Q9CAzKyQX8McyTOS/JtuXOW
02pzLHQDsvBZ6Wv8gBjJPMqbniFqY4EJNuLVU9i26WLyEH/tZ+XNoHxnTwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFD1dtLuX51IlvjO1CHIOpVbfvEygMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBALpdHiK75AZo7/FUWxc9G8g9
eWDkM9uBYNMZXred3tyWr/flcuujP8osb20cAcukiw7P2HOIVH/0nW5ZbaA8vOyK
H5njBbmxHxre0LIzC3e3ooQ9rfqGKdHhhfXE7GgAn3Qo6nC28Qbv/VjtvMbK24cN
go8DlMNvxxBxXSuH7xj6xJ4VIYiQULCig3oFU9vGUuekVWc3bmgLnM/AD4B2ZJTC
f3ZEIIga1hJmepPFMissQ7D058htOM5G/TK1dnpp5hzFKmP98v29Po42GRMlxnr7
H0FD8Ji6nlz63x/dVUVNSbu8EoAcpIXpCjNQaj0y5osjXnVh4hUG3NsunzqeGOc=
-----END CERTIFICATE-----
Generated at Sun May 4 08:58:05 2025 by rpki-client