Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa
File: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (raw, json)
Hash identifier: Vn7FPgX6FPBe/lGLyiVPjvLwdILtOLU2Jw0PruRD2v4=
Subject key identifier: 65:BC:E0:2D:8F:A9:D5:A0:FE:E5:BE:98:79:13:47:7E:4C:E2:CF:09
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 212B4DAC140B2CFFD319722CDD6C403DA7F2E069
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 103.8.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2b:4d:ac:14:0b:2c:ff:d3:19:72:2c:dd:6c:40:3d:a7:f2:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=fecfef2122e882a115c5c339f5524595e165cc9b0314103345e0740353a2476e, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:7c:52:3e:0a:83:7d:80:79:4e:96:0b:54:
f4:e9:26:80:64:98:6d:14:11:94:68:1b:1b:fb:40:
64:b1:f8:17:96:5d:dd:2a:5f:50:88:10:a0:25:01:
40:4e:3b:06:d9:48:12:4d:22:61:ef:1f:17:46:de:
b5:c3:3a:04:cd:a1:fc:18:30:e9:e8:b2:4f:21:86:
52:cb:34:6a:1e:08:38:2c:f0:47:f5:61:13:08:68:
4a:60:81:2a:01:27:54:35:7e:8d:29:84:46:c7:57:
d9:ac:45:21:5e:1c:dc:40:eb:34:6a:61:b7:9f:0c:
22:13:a2:3c:d8:11:14:02:a7:ea:25:80:f1:7c:25:
56:d0:ae:55:8f:7d:d0:8e:f5:eb:35:5c:dd:7c:a6:
de:62:a1:e5:19:0e:61:86:f1:02:91:1b:27:b1:ec:
f9:ec:a1:2f:10:b5:22:7b:8e:4d:ee:c4:2d:fc:81:
6a:ec:c7:71:8a:05:d1:7b:81:f5:a2:a4:20:25:3b:
04:75:72:5e:4f:a6:32:90:cd:04:33:46:12:49:70:
ba:c2:8a:ea:61:de:02:f9:40:99:ef:da:7d:85:c6:
7a:90:88:fa:ca:db:45:dc:3f:af:f0:f2:46:67:8b:
95:22:a9:51:d3:43:16:fc:cc:0b:78:cc:c7:6f:c7:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BC:E0:2D:8F:A9:D5:A0:FE:E5:BE:98:79:13:47:7E:4C:E2:CF:09
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:39:22:0c:ab:0c:1d:f5:0c:4b:1b:57:57:8c:c0:f7:a2:ed:
8c:e6:de:93:1b:f8:a7:f3:a5:b1:2b:8b:42:a3:0c:de:b6:61:
e4:fb:6d:89:be:e0:2f:c6:0f:fb:d3:ba:dc:c7:62:1b:82:6a:
e8:dd:c2:6d:c5:d4:e1:99:4f:1b:37:8d:9c:44:55:bc:2a:dc:
63:0a:54:9c:ff:e9:cd:5a:25:c7:58:6d:07:40:3a:7f:01:8b:
1e:7d:5e:50:93:64:cc:ab:00:d3:0b:89:8e:e0:28:24:35:6a:
d4:28:bb:40:7d:56:10:4a:96:2b:1f:c1:36:fb:05:fb:7c:9e:
c1:60:eb:a3:ea:76:71:8e:fe:7b:c8:ba:17:cd:e6:c3:01:e2:
a7:7e:64:1e:ed:2b:e7:1f:9f:e7:1b:84:fd:42:c4:07:f5:bd:
7b:d5:8b:f6:4c:65:32:d9:6d:ca:e8:a0:21:33:33:60:85:ad:
54:f3:82:95:7c:2e:26:0a:13:ad:f0:05:29:01:64:78:a8:9b:
ba:61:4d:e2:fa:9d:36:e0:43:8c:ce:2b:e5:e8:e9:2c:e0:18:
f8:76:07:b4:c3:6d:82:41:9a:be:6f:6c:49:69:c2:73:9f:1b:
fa:f0:27:5d:0c:21:2e:bf:2a:d0:8e:4a:62:07:a3:aa:df:a5:
53:d9:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:52 2025 by rpki-client