Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa
File: c759ed47-7de1-4858-b207-c77b1f7d2c35.roa (raw, json)
Hash identifier: KTFNXAryYs2VNQYCp24Y/6J58i3tNbpOOBbIKCADkF0=
Subject key identifier: 92:51:CF:2E:E2:47:4C:DB:D6:51:E6:22:56:D4:74:29:9D:43:0D:40
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 33327052D3F723B20EAECA402BD87754A8D65334
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 103.21.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:32:70:52:d3:f7:23:b2:0e:ae:ca:40:2b:d8:77:54:a8:d6:53:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=62750834eae0781edf9fee5a2b6a605fa23e07e58ca2d1ea6b9e8cdec90f4f78, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:08:49:33:62:e7:42:85:e5:73:72:7e:ac:
a5:d1:b4:9c:47:51:f6:7c:9b:55:85:18:5d:2d:ee:
ab:4c:1a:1b:93:b8:27:40:ae:54:dd:66:07:c6:81:
fb:7c:af:42:a7:44:7f:52:ac:c3:32:4c:6d:e0:91:
fe:84:4b:79:73:7c:92:7f:31:88:cb:6b:24:d0:dd:
0d:7f:cc:fb:92:0e:2c:ca:6a:d5:ad:bb:58:03:8f:
58:93:af:a3:1a:54:e3:ef:f4:68:21:d8:d5:12:49:
09:ff:9f:59:0d:0c:22:9b:38:58:80:80:de:2f:3a:
75:83:d7:18:56:bf:78:b9:de:4d:7f:ef:9c:84:d4:
4b:35:d7:a4:f0:d2:a7:03:6a:51:d1:f9:78:5d:9f:
eb:46:54:d5:7a:42:88:63:06:26:42:7c:94:e9:fc:
0b:31:5a:0c:d8:c3:5d:e9:7c:3a:db:a7:68:7e:71:
ee:2a:fc:69:0b:81:98:ab:33:24:3e:ab:e5:89:f4:
25:20:1b:7b:16:ca:a9:ec:40:04:cf:b5:14:2b:b7:
6b:0b:c4:67:6a:80:75:54:9a:be:5b:39:5a:da:d1:
f7:ef:a2:e6:02:c3:61:6c:7a:62:b9:40:10:fc:e3:
fd:a7:0c:c6:65:72:89:20:26:8a:da:9b:20:e9:65:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:CF:2E:E2:47:4C:DB:D6:51:E6:22:56:D4:74:29:9D:43:0D:40
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.240.0/22
Signature Algorithm: sha256WithRSAEncryption
76:3c:77:79:08:5d:f8:e7:6f:b1:df:71:1f:54:11:cc:1b:45:
31:29:02:01:c0:ab:cd:b7:76:e8:e2:3a:ec:d5:49:83:2c:7f:
de:be:27:fd:6b:2e:0d:91:b9:7a:f3:db:a5:10:1e:ce:c2:10:
8f:cf:22:7a:06:e2:71:55:9e:d4:88:1f:5b:0b:fb:46:1b:1c:
69:57:49:bc:68:11:b8:2e:71:0e:6e:23:f7:58:27:c9:12:5f:
90:ff:38:c2:6f:71:41:e4:0d:c1:03:48:c7:08:39:cf:e1:94:
fd:d9:83:ca:d5:d7:7f:39:29:98:cd:6b:f9:fd:d7:ed:56:d2:
4d:9a:d4:9c:ea:94:99:5f:7d:57:e7:77:f9:ea:d0:96:37:02:
14:73:ea:4e:56:c7:7a:62:2a:1c:72:52:61:0b:c8:b5:7f:22:
7f:0a:11:49:f3:69:4a:ed:12:8c:e3:71:9b:ec:55:dd:e0:2b:
8b:06:96:12:73:c5:57:de:1c:10:20:bd:ad:4f:35:c5:fb:12:
30:c4:9f:7a:56:a5:fb:83:f4:3e:a5:3c:6d:79:37:81:78:12:
6b:e2:33:b4:ab:d7:8a:0b:a0:eb:a4:1f:64:88:54:1e:38:5e:
59:cd:f1:7e:59:b9:b6:20:07:67:2c:f4:24:f4:7c:23:2b:e5:
4e:f5:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:20 2025 by rpki-client