Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa
File: fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa (raw, json)
Hash identifier: uuTq5nwzIQAHiYyng8s6vhvZbblXphjaRG85bPD9040=
Subject key identifier: 92:E9:5A:3B:F5:6F:E3:90:34:B4:29:3C:81:FB:4A:79:BC:AA:A1:1E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7A3BCD65CA0AA5AC46A69F49E06222CEFACD0F61
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3b:cd:65:ca:0a:a5:ac:46:a6:9f:49:e0:62:22:ce:fa:cd:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3dfa183877b7def54b2a7fcabd019e6cb3cb6748f33febe715cec729a5f02e91, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:59:ff:15:e1:10:49:37:b4:35:d3:b4:89:
ee:1b:3b:80:27:f3:bd:92:c9:9d:7f:01:c5:b5:34:
7d:22:73:b0:4c:e0:ba:de:1e:e0:26:a7:17:27:e7:
e9:b7:c7:c3:d1:03:ac:68:b2:f7:d4:b2:0f:82:b8:
65:53:6a:4b:e9:2c:ec:68:ff:3f:1b:eb:cb:23:45:
ba:b3:53:89:b1:fd:bd:cd:da:8f:76:f1:2c:da:c5:
08:e4:6b:9c:4c:72:f6:2d:15:e9:d8:5b:b3:c8:7f:
30:33:db:c6:d0:79:06:fb:45:5f:a4:5c:c6:2a:46:
1b:b1:39:7d:d5:48:10:46:45:b8:cb:d5:b0:20:bf:
80:97:46:f2:04:4c:91:32:21:3e:0b:09:04:31:8e:
ad:99:e9:e6:19:7d:ab:3c:0b:bd:a3:67:ad:ec:b0:
67:17:06:ff:e9:f7:96:0b:bf:b6:79:5d:36:81:86:
fc:61:fc:ef:c9:b5:ee:3f:1a:b3:e5:d4:86:a7:b5:
90:17:4f:24:64:fe:28:36:83:4f:82:48:9d:15:aa:
9c:f2:0c:5a:58:fb:86:ff:41:3d:80:83:a6:3b:b0:
ef:08:9e:d0:d9:cb:0c:7f:40:02:72:67:74:2f:6d:
ab:eb:ca:5d:79:ca:7c:39:92:d3:dc:78:2c:5d:77:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E9:5A:3B:F5:6F:E3:90:34:B4:29:3C:81:FB:4A:79:BC:AA:A1:1E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:64:2a:e7:5d:c1:9c:0e:7b:8e:11:a3:3b:08:f3:43:15:2e:
8a:d7:e5:8d:40:df:e4:be:8b:b0:8c:2c:bf:ca:ed:9f:16:86:
15:55:33:c1:8c:00:b0:e7:96:eb:9b:dc:f5:cd:76:d0:21:9c:
4b:97:b0:ed:b0:f6:4f:3c:8a:11:33:e2:ee:b1:46:a1:c8:95:
95:77:22:ee:c4:ee:1b:13:91:3e:32:6a:23:25:91:03:18:24:
75:49:36:de:bb:76:44:e4:29:ca:6a:4f:64:75:ef:8c:32:0c:
e9:bd:bc:98:09:c5:14:78:a5:8a:14:53:db:4c:91:49:d3:39:
00:8f:97:04:45:b5:b8:a3:a0:c0:61:fd:eb:a9:44:41:bb:b6:
b3:d0:2b:28:59:46:4a:11:33:26:32:a0:f1:44:74:f8:f5:bf:
f1:64:65:46:80:68:7f:14:21:b3:48:f9:e1:b6:64:16:bd:dd:
59:8b:1a:f3:16:02:87:e0:e9:4b:11:0c:e0:ae:ab:67:a2:ed:
a1:80:16:66:c4:48:b5:57:70:f9:86:d2:b2:99:34:9d:a5:8f:
5f:84:11:a2:73:b5:5e:f9:e0:02:55:6a:6d:65:f9:36:df:74:
cd:56:93:e9:8e:80:a6:ad:18:53:6d:26:5a:18:70:14:5b:bd:
d3:27:af:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:15 2025 by rpki-client