Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa
File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json)
Hash identifier: b9alo7oCvDbkDPzVcFIh+iWmG7jSxu6rhzgmtbtEaI8=
Subject key identifier: A8:56:58:BF:12:80:A3:28:A0:D7:7E:CA:90:BF:6A:13:40:8B:11:7F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7D7AC4035DA0BF06A679AEE1C2F142C872F4DFF4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.220.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:c4:03:5d:a0:bf:06:a6:79:ae:e1:c2:f1:42:c8:72:f4:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=6b12df8bdec00be92553fcf3ea4bb04a160087772ed07e4ffe9b6d60a61e16c3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:3a:e9:ab:eb:e8:62:54:71:5e:67:2b:cb:
d3:dd:de:b3:d2:d2:bf:94:17:88:93:80:e2:62:29:
7e:0b:ca:1c:8c:67:90:5f:70:29:67:fd:38:1d:dc:
16:27:6d:eb:c5:be:46:65:fa:e9:3e:a7:6d:44:b6:
b9:92:75:59:70:13:a1:ee:f6:97:f7:90:ab:af:24:
70:86:2d:59:3d:a6:cb:50:15:76:21:c4:ab:4f:6f:
e5:b7:10:e8:82:ca:e2:1c:69:f1:b8:cf:a5:55:0d:
95:a5:9f:bf:9f:06:2d:93:bf:ab:3b:34:a7:54:1c:
d1:e6:ca:d0:b5:fe:8e:62:2a:1c:89:76:98:3a:b7:
49:f7:06:75:c9:51:bf:61:a9:6b:ce:c8:69:92:f3:
1a:42:3a:88:af:f5:dd:5d:f9:7c:f1:d2:dd:bb:bc:
58:af:9d:6d:c1:ee:93:e0:88:85:fb:11:3b:e3:19:
be:cf:7b:37:68:e2:77:24:91:1b:75:d8:4e:4c:13:
4b:4f:9b:c9:99:20:11:67:39:ed:66:38:94:09:bb:
21:dd:da:b5:ee:ab:60:a7:aa:81:46:40:59:a7:67:
e3:96:ea:45:8c:79:e1:27:f5:f0:23:9e:fa:d4:45:
6e:b2:5c:16:3b:99:ea:fe:bb:a8:ff:49:1d:87:33:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:58:BF:12:80:A3:28:A0:D7:7E:CA:90:BF:6A:13:40:8B:11:7F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:d3:18:ad:dc:ef:8b:a3:f0:e2:9d:02:3b:a6:d9:ec:b1:6b:
82:cc:1d:ab:df:d1:42:ff:a0:11:3b:56:7a:17:e9:08:be:f2:
83:bb:5f:31:28:1b:f5:2d:c2:fa:80:38:46:6b:d4:1d:24:d4:
4f:a8:07:e0:d7:31:3d:79:60:34:ff:49:01:85:1a:a3:8a:e6:
d5:e0:aa:3e:e8:96:43:45:fe:d0:3e:ad:71:fb:16:19:31:a2:
31:ec:5d:78:b0:ad:64:c3:42:99:23:92:13:ca:73:d3:85:5f:
8f:5d:e5:d2:aa:b2:51:96:27:0e:01:e4:68:52:e9:53:a9:3a:
6b:10:5a:06:31:07:c4:b2:9a:68:f7:0f:af:e3:36:4b:e7:5c:
2c:49:75:a6:1b:57:28:4b:87:de:47:60:c2:5b:db:ff:db:38:
d1:49:00:7a:59:a0:01:4d:a7:f6:7c:12:4b:de:3c:c7:71:ff:
ce:ef:4f:e1:ac:21:5c:df:1c:2e:2f:da:99:f7:05:78:1c:ac:
3f:1e:ef:d4:50:92:9a:44:98:d5:04:12:41:67:95:59:2c:8b:
2b:a4:54:f1:19:d1:e7:ea:32:1a:a9:fe:7c:32:e5:50:63:f7:
0d:dd:d7:d0:a5:6f:48:a0:36:14:05:19:22:85:a6:f0:1a:f1:
6b:71:c8:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:05 2025 by rpki-client