Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa
File: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (raw, json)
Hash identifier: s/+mM7vdn9fbJRJ+e7Bx0G99PMHXMV5+bFciUf/sMlc=
Subject key identifier: D3:93:82:F0:76:6B:C4:5B:95:71:47:00:D1:92:BC:70:7B:59:44:4C
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 1B0A8861C2B447EDF1A45F12B1DD5684B7B65D54
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 7224
IP address blocks: 43.224.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0a:88:61:c2:b4:47:ed:f1:a4:5f:12:b1:dd:56:84:b7:b6:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=d359db232f0bdff6e29343060dee2d0b47040643b04f941ddf58bd279c7ea1ac, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:49:11:66:72:fd:a9:65:cb:b8:d0:32:63:
f5:a8:98:f0:84:a5:d3:20:12:55:4d:3d:6e:94:a1:
5f:85:37:6c:e0:38:7f:d1:7c:bb:e6:78:73:05:eb:
50:65:4e:f5:28:1c:ac:b4:86:0c:96:f9:99:4c:71:
c2:0f:1e:66:f1:80:57:5e:42:83:d7:0d:23:84:9d:
40:76:0a:48:2c:59:1f:a1:2c:f3:7d:7b:b4:79:0e:
df:12:6c:86:5f:3b:0c:21:5d:16:a4:73:3f:08:d9:
71:93:a7:12:da:1b:b5:88:22:7e:8d:16:ef:3a:b1:
34:c9:6d:ed:40:0f:73:0c:e4:57:fd:13:33:7d:15:
7f:f7:dc:63:a1:48:71:e3:bb:62:58:fc:11:00:88:
f2:c0:d6:db:8f:95:4f:bf:2f:1a:e9:d8:3a:ed:0d:
67:eb:d2:48:2f:e6:85:60:fa:65:6a:73:93:52:dd:
c5:4f:0e:ac:a4:eb:11:55:91:2d:0f:4c:35:2a:b3:
88:a2:01:8a:10:a5:ac:be:9f:e9:b4:e9:61:d8:f6:
62:30:8f:0b:67:1c:8f:bf:bb:a4:11:81:f1:16:10:
91:da:24:5b:45:55:27:a3:a1:61:22:6e:6f:eb:8d:
f9:58:3f:4e:39:42:ec:ef:14:ce:88:6e:9b:d8:b0:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:93:82:F0:76:6B:C4:5B:95:71:47:00:D1:92:BC:70:7B:59:44:4C
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f8:0d:f3:96:87:d6:f6:2d:1b:1d:eb:e8:91:e8:16:c3:6c:
ea:1d:a1:25:27:35:b0:53:36:04:61:0c:5e:a7:53:b7:81:ac:
4b:4d:31:26:11:15:c0:0c:df:f1:2f:47:d5:27:b7:9b:32:3f:
a0:9a:4b:e5:da:1c:1e:0b:03:57:68:11:2e:7a:6f:a0:a8:88:
36:83:08:02:9f:a1:8d:ca:50:b1:4a:f8:89:3e:04:b9:f6:d2:
6a:b1:c5:e2:1b:fe:78:7f:49:5a:ce:4b:b6:69:37:02:97:06:
29:a2:d0:40:5a:ca:c9:39:25:45:ed:5b:7b:50:4c:87:f4:37:
ad:ae:74:49:b3:4a:fc:76:32:8c:ad:53:88:de:54:f0:dc:ab:
a3:9b:24:31:d6:66:ee:97:3a:de:cd:71:72:5f:c9:3e:0f:ca:
52:58:65:3f:70:e9:63:4f:33:46:0d:a2:41:b0:05:2a:5d:4d:
00:e6:ad:dc:1c:cc:20:8f:4b:57:68:39:69:3a:7f:ee:c4:c3:
02:31:2f:21:fb:2c:6b:1d:56:80:08:d9:5d:78:49:8d:1b:41:
ef:20:b3:93:f9:e2:02:ac:0e:f6:38:57:35:d6:ad:78:e6:a9:
4c:5f:4c:f7:8b:0b:2e:ab:df:2d:da:c3:3a:77:a4:a1:5a:0e:
ef:7d:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:55:20 2025 by rpki-client