Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/098c0cc3-be06-46b9-86e2-aeb99985dd07.roa
File: 098c0cc3-be06-46b9-86e2-aeb99985dd07.roa (raw, json)
Hash identifier: m7afMhI+DVWSRr9rAxRefSA5ETidvK3fTiQ8/6BPIOQ=
Subject key identifier: E0:13:12:C7:36:F2:61:BF:FE:33:BB:F3:B5:63:43:27:4D:88:20:F8
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 46FAE85C0A33FEDA38D892C342B1C1311A5ED015
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/098c0cc3-be06-46b9-86e2-aeb99985dd07.roa
Signing time: Wed 05 Mar 2025 00:00:06 +0000
ROA not before: Wed 05 Mar 2025 00:00:06 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.248.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fa:e8:5c:0a:33:fe:da:38:d8:92:c3:42:b1:c1:31:1a:5e:d0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 5 00:00:06 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:18:91:70:8c:bc:0a:f9:86:b4:1a:2a:96:
8c:97:5b:26:88:89:bd:a2:3c:12:95:7f:2e:77:05:
9f:e1:f6:25:6a:1b:9f:23:f7:bb:6d:98:99:0a:df:
b5:ee:ab:c6:eb:48:51:e3:13:17:33:e9:5c:f6:d0:
9b:a7:8f:2b:a2:d7:1d:0c:59:81:0a:da:38:25:58:
9d:5d:cd:a2:01:ae:00:1b:a2:ee:9d:4c:4a:f4:cb:
81:9d:72:93:6b:57:0b:15:a6:43:9c:6a:71:b8:b3:
8d:33:f5:c9:b2:87:a2:2f:60:5d:a2:b8:af:64:18:
72:be:b3:41:a0:a0:e0:ad:ef:ee:13:91:6d:2f:96:
a0:00:48:b2:61:75:41:fe:85:8c:7e:51:41:7a:4b:
67:f4:80:70:29:3c:db:8e:5b:3a:ce:d2:ef:13:18:
59:28:1d:f3:9d:f5:29:c8:15:6e:b2:0f:11:59:17:
27:d7:97:3d:3a:a9:98:b5:29:e9:40:2f:2b:a2:da:
1e:16:fb:f1:99:3d:7b:b5:7e:00:08:77:f9:21:07:
ff:6c:1d:be:d6:a2:4a:5c:cc:8a:98:9e:d4:c0:a1:
57:af:e7:d0:0f:e3:08:d7:87:71:45:5e:26:61:93:
4c:32:b8:7b:23:ae:8d:ff:6c:fc:84:63:4e:ac:c9:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:12:C7:36:F2:61:BF:FE:33:BB:F3:B5:63:43:27:4D:88:20:F8
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/098c0cc3-be06-46b9-86e2-aeb99985dd07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
06:52:f8:d2:f0:f4:37:1b:0c:3c:f8:08:c0:43:7f:07:9b:22:
b5:06:23:5a:34:f4:2e:76:4e:1f:aa:d2:91:4a:04:a6:bb:ed:
ab:1c:4a:61:82:23:4f:48:a1:cc:4c:7e:64:d5:76:19:f5:04:
c0:41:76:55:de:01:d1:50:47:a0:c1:3d:03:89:c3:91:69:f7:
8e:68:d7:04:1f:85:79:30:f4:74:25:c9:fc:1a:6b:3f:f3:30:
a4:0b:fe:55:e5:4e:97:5c:b2:f2:79:50:d4:4f:f7:f7:65:05:
17:9d:58:03:ea:c1:35:ea:f3:3e:8c:77:28:44:f0:3f:5d:b4:
f4:08:4d:05:9d:81:73:c1:a8:4f:55:79:5d:c1:15:b9:ac:8c:
0c:27:75:a3:40:c7:4e:cb:c9:d6:f1:53:87:bf:b7:33:b6:de:
ee:f1:5e:8c:f3:99:a4:c8:1c:8a:4a:ef:02:d5:ab:ff:3e:b2:
77:f6:a8:b7:f4:f9:25:60:ef:b1:ed:c5:d9:df:a7:20:77:81:
20:dd:a3:be:1a:01:4e:16:96:04:ba:ae:ce:73:93:c0:53:3b:
80:d9:53:3f:25:54:c7:19:67:03:cb:0c:48:95:b7:2b:e2:44:
e4:32:5b:5f:77:94:4b:bc:95:b4:1a:ab:c0:da:9a:35:2c:4c:
62:f8:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:05 2025 by rpki-client