Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa
File: 9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa (raw, json)
Hash identifier: zTRZvYjV5HswiPA5zPFXhluu9P6+SBvLjgwfsExJOj0=
Subject key identifier: 95:B1:9C:67:58:BD:25:6B:CA:69:B8:BA:B7:77:FD:EB:C4:74:30:1F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7EDD7040D0D9F317C6F47EB1DC532C585C08AA30
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 103.246.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:dd:70:40:d0:d9:f3:17:c6:f4:7e:b1:dc:53:2c:58:5c:08:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7198e15c4b6bcafac4236ec3b59221fff88bb6e4855fd20d0e1be52c7900e1a6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:8e:72:63:8d:65:a3:27:73:49:ba:88:7a:
4e:c8:d0:40:54:a4:c1:b5:e3:03:c7:05:ce:28:fc:
38:78:30:70:50:0b:6c:41:fb:c4:34:33:4d:69:83:
50:88:92:ca:6f:e9:06:97:b9:8b:0c:2c:f4:f3:db:
bf:2e:d0:b7:fb:b1:bd:95:b1:b2:e8:4b:a2:67:5f:
40:bf:f3:70:58:ee:72:17:5b:fd:86:a7:a0:7d:68:
12:f6:d1:d6:5c:c8:e0:c9:e4:c6:00:0a:92:e4:a4:
30:c8:b4:6e:4e:b4:ad:2f:39:43:01:52:a7:3d:77:
1a:a4:f6:32:a4:cb:3d:f0:a9:da:37:cf:40:66:2d:
09:63:a9:76:66:0d:93:8b:ba:7b:10:bb:05:3d:74:
ff:ea:76:96:f9:38:c3:e2:43:d6:11:e9:85:f1:ac:
28:66:14:8a:a4:3d:52:42:f4:26:57:06:c9:ed:90:
4c:ed:57:c6:f6:c7:69:08:62:93:27:d2:2e:4c:6d:
86:27:f2:cd:d8:1c:29:df:41:1f:3d:24:9f:81:c9:
70:78:fa:1f:6d:d4:92:97:f1:f2:27:e1:d4:05:1c:
30:f2:94:3f:06:24:8f:cc:c9:0c:c7:e0:34:69:3f:
f5:65:16:8f:f4:d7:ac:9a:2d:cb:99:54:78:c5:52:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:9C:67:58:BD:25:6B:CA:69:B8:BA:B7:77:FD:EB:C4:74:30:1F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.148.0/22
Signature Algorithm: sha256WithRSAEncryption
34:4a:fe:63:f1:f9:b4:b8:a1:d4:62:21:f9:de:fb:0d:20:5e:
7e:25:b0:2e:1f:ce:c7:b6:77:05:85:85:85:d2:94:e1:e7:1d:
74:61:86:81:0b:1e:9b:84:af:72:4c:98:db:df:6d:37:bc:77:
4f:ba:b7:42:c1:d6:c5:6c:10:eb:20:a5:a2:93:2f:2b:8d:76:
f7:15:68:a8:72:a8:0a:c3:32:95:95:27:d6:3c:c6:44:04:3c:
d0:c2:75:9b:ee:84:33:28:a3:34:72:5f:30:3c:85:0a:04:60:
11:2b:62:ee:b9:68:e4:95:c1:55:ae:dc:6a:8a:47:ef:21:74:
a6:44:f7:7c:0c:58:43:e8:07:d0:16:37:37:38:a1:e0:f7:64:
60:da:7f:91:e2:9f:88:b4:a6:3b:6b:93:75:97:b3:db:ed:ce:
34:ce:95:6d:6b:9d:52:46:56:1d:f5:16:8e:9a:c4:a4:9a:25:
32:2f:75:5f:3f:38:bc:74:53:86:93:8d:00:a1:b1:e6:77:e5:
1e:5b:59:2c:a6:05:c1:01:37:9e:47:65:a2:75:d1:03:62:1b:
31:0e:22:fd:5a:db:43:29:ed:ed:03:f6:0d:4b:f6:33:e5:0c:
02:ff:0f:72:d9:28:cd:5c:96:5d:18:f8:25:af:71:51:64:8d:
96:f8:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:53 2025 by rpki-client