Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa
File: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (raw, json)
Hash identifier: 7+SdxSJhL8YpOlx3+7PgWday64Qp+I/eJc+AN3rFvqE=
Subject key identifier: CF:9B:9B:FF:67:1E:29:EE:C7:60:7C:F0:2D:A4:B2:3A:64:E5:79:3C
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 77709956692F4E324A6D3986A9C15B8F343525D9
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa
Signing time: Wed 05 Mar 2025 00:00:07 +0000
ROA not before: Wed 05 Mar 2025 00:00:07 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.248.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:70:99:56:69:2f:4e:32:4a:6d:39:86:a9:c1:5b:8f:34:35:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 5 00:00:07 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:e9:89:dd:f6:ab:ff:26:13:3e:a8:c8:82:
07:62:94:ea:a3:4b:4c:ff:96:d9:4f:49:cf:f9:28:
9a:5c:4e:25:97:5d:48:f4:77:ab:ce:82:2c:c6:8f:
af:86:ad:b8:05:26:c3:0b:99:cd:69:ee:ef:bd:30:
35:4e:11:e4:51:f9:a1:7c:c0:22:d9:59:01:69:69:
c9:2e:82:b9:98:5b:4b:47:24:eb:93:9f:9c:b3:9e:
9d:a8:45:81:c1:b8:06:a2:98:d9:b1:2c:41:87:d4:
89:71:97:9b:6d:4f:d6:38:ab:bc:8c:23:58:ba:e1:
b9:23:d1:ec:2b:e4:90:56:3b:e6:2f:15:31:6e:65:
bd:03:6a:6e:d8:00:f6:15:c4:56:1c:fb:ac:45:5d:
85:b6:c5:b7:eb:a5:7a:73:b7:92:b7:3c:47:2d:e0:
01:07:a8:1a:7c:58:50:d6:cf:b9:18:80:39:36:4e:
c8:3c:0c:a1:24:67:59:d3:18:bb:ac:3b:bc:05:c7:
0c:43:e2:06:70:c8:d8:98:92:f7:31:a2:ea:b1:4d:
0e:58:bc:62:a2:cd:24:91:b4:d4:ff:00:26:88:c2:
f9:ea:7a:47:82:12:9a:6d:ba:f6:ea:45:aa:65:49:
0a:22:06:b2:ac:37:f6:1c:92:49:7c:e5:cc:6b:32:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:9B:FF:67:1E:29:EE:C7:60:7C:F0:2D:A4:B2:3A:64:E5:79:3C
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.248.216.0/21
Signature Algorithm: sha256WithRSAEncryption
63:4b:96:c3:13:f6:00:5d:83:50:a8:ce:c7:2f:c6:40:57:4c:
8c:8d:b4:6d:35:5f:5e:02:4c:2e:5e:8f:6d:50:80:99:7b:9d:
1f:9c:17:ec:71:97:0c:99:1b:b5:c5:f1:66:86:78:4f:66:46:
16:e1:2b:f8:06:64:ae:58:a0:c9:8d:c1:80:84:c8:f8:8e:7d:
19:3e:8f:2a:ea:dd:61:d3:a0:18:53:3c:5d:36:30:ee:16:bc:
59:bc:35:47:85:70:d1:b8:e5:d6:d5:75:ec:0f:ad:64:f0:12:
b7:af:1b:c3:ad:91:c8:70:59:5e:81:37:a7:67:22:7c:7f:b4:
ce:a8:69:e3:74:eb:48:e2:73:d1:84:d4:81:8c:e4:58:f3:0f:
de:d8:2f:08:1c:c8:65:47:4d:cc:44:3a:d4:03:3e:a7:d3:40:
9f:ba:ce:b8:18:b1:1b:0f:3e:db:60:04:27:36:92:f0:0a:04:
5f:a5:2c:49:a8:a8:4f:f8:b1:2d:48:17:68:05:83:a7:f6:f2:
a2:86:08:2f:d3:29:83:49:ba:cd:f5:14:b4:55:fc:37:f0:43:
b9:c9:16:c2:6f:f2:aa:00:7a:98:fc:77:95:46:68:8c:82:73:
ca:21:84:df:05:a9:77:c7:aa:14:ce:c0:4b:d0:13:d2:e5:60:
24:19:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:21 2025 by rpki-client