Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa
File: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (raw, json)
Hash identifier: LrGcWdQIk/SyJeWDCJoP7ZJIXBfdF4FLCmyLiOicXBI=
Subject key identifier: C6:92:AA:EF:12:E1:63:D5:63:48:32:38:61:47:9A:0F:65:32:CC:F1
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 6EBD8EB33877A5B798B62DF6B4E0879BD2A71BE9
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.248.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bd:8e:b3:38:77:a5:b7:98:b6:2d:f6:b4:e0:87:9b:d2:a7:1b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=5a1bc2a5a0f449aa08e4402b36166d17476ef8ea50ee7037df197be0e7fcc5d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:54:66:53:13:88:2c:c4:15:87:21:01:06:
94:1b:97:29:df:a1:d0:87:06:5a:ee:9b:98:d4:d1:
d8:ab:a6:13:73:5c:56:88:c1:4c:5f:5c:21:e7:70:
e9:d6:62:6d:88:4b:fb:69:81:90:e3:88:89:14:2e:
bf:43:1b:a4:d5:00:62:a9:9f:eb:af:26:89:63:76:
fe:83:58:ec:6e:34:c2:97:e8:03:39:14:6f:e3:d9:
04:82:63:88:a4:da:37:ab:08:ea:ac:57:26:83:bb:
cd:a9:4d:f0:ef:c4:72:dc:49:bf:fb:6c:a6:d6:2f:
c1:e7:db:ab:96:ba:43:46:ce:f4:c5:36:8f:11:ab:
e9:89:46:d4:a7:01:35:df:d0:69:43:d0:ce:01:7c:
ad:7c:0d:e6:3e:22:0a:d4:e6:4f:0e:30:35:3b:b2:
db:a3:f7:1b:44:69:ab:aa:e5:2b:0f:5e:2b:c0:a9:
65:2b:9a:da:6a:f7:bc:9a:3c:10:96:33:ff:aa:22:
dd:2a:b0:fd:58:d2:bd:c8:e1:84:66:83:d1:fc:aa:
6e:6d:a7:1f:77:14:0f:78:be:53:50:bb:34:4a:4f:
47:b5:49:43:b8:71:bd:ee:67:8f:0d:77:08:25:be:
d9:30:10:68:36:82:5c:41:32:b3:5c:dc:8c:a5:e5:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:AA:EF:12:E1:63:D5:63:48:32:38:61:47:9A:0F:65:32:CC:F1
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.248.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:c7:0b:2d:07:83:7e:0f:fc:a2:0d:f9:63:2b:a7:5a:cd:a0:
8b:64:79:68:79:c0:de:26:c7:79:38:c0:21:b8:df:09:4e:0c:
5d:1b:08:eb:7b:74:c5:ba:4a:0f:e5:fb:f3:65:44:23:27:91:
56:7b:42:4c:68:2e:1f:1b:cc:0e:5d:72:d6:1a:90:31:43:d8:
68:63:c4:2c:89:64:c8:92:8b:98:71:98:31:f3:47:4b:9d:75:
21:e3:74:73:99:3d:ae:eb:71:31:0b:b8:6a:52:05:ab:89:79:
9b:e6:ab:6b:31:55:b2:70:7d:58:d1:23:87:8a:bd:d7:ce:6d:
4c:0d:9a:7a:77:e6:34:60:b7:14:fe:ee:66:51:fc:ba:74:cc:
94:e3:87:db:c8:af:0b:a5:92:3a:31:94:dd:5b:bb:2d:48:9d:
71:54:9f:fa:18:55:3e:cd:32:12:aa:ae:de:bb:e8:27:6a:44:
90:81:d9:d2:7b:3e:42:7e:60:b7:7a:ec:23:a8:2c:82:43:8c:
21:71:0b:b2:82:ff:83:67:14:2f:ff:af:e1:16:56:05:5d:94:
2f:c6:21:51:28:c3:dd:b1:a9:55:f8:d5:a9:fe:65:ec:0e:b5:
77:0a:80:c4:a3:73:34:7b:6b:cc:33:e4:b8:52:b6:5b:76:53:
53:78:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:41 2025 by rpki-client