Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa
File: 22707524-2248-48ea-815f-578f49b19436.roa (raw, json)
Hash identifier: y9DS/9U0Bm+Vmeq2ISKvhA02+Jc6dqH3Kv6Ti4IFVeQ=
Subject key identifier: 09:01:03:21:85:01:A3:45:65:E7:C3:F6:BB:D5:7F:2C:0F:D3:35:2F
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 2F9B09F20EABB07744F5615AAC7A80478166C45A
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 175.41.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9b:09:f2:0e:ab:b0:77:44:f5:61:5a:ac:7a:80:47:81:66:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=f9b9bb00df297e4bcad2d72f4769719eed8f36c2a053929de7f5a3b09f97d5e9, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:13:96:4b:d6:1e:e3:6b:6a:5b:82:a2:32:
1a:0a:52:46:94:de:77:ae:9a:d9:ee:b1:47:95:87:
e7:f8:90:c4:7b:f2:8c:fd:52:2b:bb:ef:6e:b6:22:
59:22:16:5c:43:40:b7:73:bb:2a:44:c8:34:ce:41:
51:81:0a:ba:89:12:da:ae:73:da:01:8f:69:49:ae:
94:e5:04:a0:71:8d:ae:43:ce:bb:75:fb:f9:55:be:
3e:45:31:7d:7f:81:0f:e7:fe:6e:db:37:8c:ca:88:
67:e0:5b:5f:15:5c:50:7a:d2:d7:8c:31:4d:41:c1:
1e:65:07:c1:2b:95:82:a1:eb:d9:38:92:48:b4:b9:
0e:10:9a:c8:fa:a1:86:d9:26:58:cc:92:ad:08:d4:
48:78:7a:7f:8c:aa:e2:b9:a0:e5:f9:4c:ee:d0:d9:
56:48:cd:70:95:c0:42:16:1d:73:55:75:78:df:f0:
e6:1d:fd:d2:20:c4:1c:a8:96:74:44:6d:49:77:79:
a1:40:ab:cc:e9:5a:74:fb:dd:fd:aa:e6:65:bb:d9:
23:de:3e:cb:d7:1d:48:4f:43:47:d4:2e:2d:fa:0a:
f4:7a:22:c4:91:c2:e4:12:7e:d9:0b:bd:67:e2:40:
69:e9:1c:0d:e6:89:bb:3b:b9:7a:2a:ae:c8:ac:96:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:03:21:85:01:A3:45:65:E7:C3:F6:BB:D5:7F:2C:0F:D3:35:2F
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.41.150.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1a:3c:54:82:2a:97:6c:d3:12:21:56:8e:39:4e:2f:ae:e7:
88:96:43:a0:f9:8c:90:c2:e1:f9:7b:19:4b:97:08:29:ff:8c:
f5:cf:a7:84:fd:15:ae:7b:90:5c:3c:71:20:2c:20:18:63:24:
22:84:8b:3e:c0:76:ce:b9:02:cc:c7:e7:7a:2f:ec:9b:bd:da:
c1:20:fb:02:11:67:76:85:69:f9:cb:4a:fc:d3:d8:88:71:da:
cd:52:94:ac:9a:45:60:0b:83:7d:f7:d4:35:4e:4e:07:12:c4:
f4:8a:6c:10:36:80:f9:40:66:30:0c:18:f1:f6:8c:ef:c7:10:
20:08:1b:a7:33:4f:05:19:7e:47:31:9d:08:d6:ff:99:49:de:
d4:28:10:71:3f:e3:27:23:b6:0d:3f:64:07:01:49:a2:e2:53:
92:cb:54:1c:89:ff:46:d4:b1:51:57:44:de:41:8f:31:19:4a:
13:b7:f7:50:d8:ea:84:c4:cf:e5:f4:e6:2d:58:af:b6:27:80:
67:76:15:6b:cb:98:f7:7d:a2:05:5c:c3:91:cb:1e:33:94:bf:
b3:0e:8e:ba:ea:1f:80:94:e5:a5:01:37:f1:00:77:27:c3:80:
19:11:13:82:0b:f3:8a:e6:a5:b1:e1:20:e2:75:b6:3f:00:05:
49:fc:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:25 2025 by rpki-client