Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa
File: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (raw, json)
Hash identifier: 4smSLmnpQJb5ncuerdOosdrVMAgMhBVDwRgLWYMrQQk=
Subject key identifier: 8C:03:1A:06:B4:8D:6F:F5:8B:76:00:44:92:82:A8:86:AF:09:E1:10
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 3C6E197498B6D08915DF4C61B95CB7EE6D61E861
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa
Signing time: Sat 29 Mar 2025 00:00:04 +0000
ROA not before: Sat 29 Mar 2025 00:00:04 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 122.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6e:19:74:98:b6:d0:89:15:df:4c:61:b9:5c:b7:ee:6d:61:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001
Validity
Not Before: Mar 29 00:00:04 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:9b:04:15:f6:02:1f:93:17:d7:21:3f:82:
8a:05:90:91:8b:e2:f3:05:6c:d7:87:00:f9:e8:d3:
11:4d:47:d5:9f:86:c3:82:a1:12:d2:fe:6f:fb:f3:
56:48:62:e2:a4:30:c3:2b:a3:15:f8:db:01:f0:a7:
2e:90:e7:51:de:96:17:e4:d5:33:7d:24:11:c3:54:
5c:95:03:eb:a0:38:13:84:35:14:5d:4f:74:ed:19:
5d:00:89:c4:c5:d6:94:1b:f1:ed:e0:ff:50:4b:ec:
97:a0:76:70:ec:0b:c6:6d:70:c2:d6:72:24:b2:bc:
ea:d3:25:73:a0:6e:18:9f:52:1f:8d:24:4c:59:a9:
79:bc:d8:9f:19:20:86:dd:16:5a:06:db:59:31:bc:
92:ce:6c:63:07:5e:92:07:9e:c5:66:8e:c9:f0:be:
e1:49:d4:a4:50:a0:ba:fe:6a:e8:55:15:c0:88:68:
b5:68:a6:c3:a4:99:21:88:2a:b3:43:11:30:ba:2e:
dd:07:99:99:1f:4b:bf:67:01:16:ee:fa:68:70:50:
e8:25:7b:bc:cf:76:4c:9c:ba:c4:14:fc:24:42:df:
b0:f1:b8:c8:d2:f6:74:e8:04:30:10:1c:2b:91:9d:
81:10:28:c3:89:67:40:22:a7:70:1d:10:e0:1c:9e:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:1A:06:B4:8D:6F:F5:8B:76:00:44:92:82:A8:86:AF:09:E1:10
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
59:30:53:e1:69:aa:04:77:04:fb:58:fd:b6:05:38:2b:04:33:
e1:60:60:64:a8:69:db:d6:e6:59:8b:b9:79:a2:b7:4a:b6:da:
64:b2:43:3f:eb:57:fe:d2:25:48:9d:59:dd:97:47:97:1b:30:
18:22:26:31:0e:c8:f9:3a:3f:f9:26:5b:49:31:cf:10:ff:56:
01:f3:30:06:57:cf:11:18:59:8e:4f:14:83:72:c3:2f:1e:8d:
0e:df:98:4d:fe:c1:f2:a5:0f:5f:52:93:d2:82:21:61:65:cb:
7c:bf:f1:ff:60:30:67:81:83:39:94:eb:b3:47:74:4e:9f:cc:
77:c2:5b:c0:57:b4:b9:fd:7e:2c:cd:6b:e3:37:8f:75:70:87:
10:58:97:1b:73:28:48:ec:8b:a4:1d:51:f7:32:1a:c6:5f:be:
6c:9b:1a:12:b5:09:10:53:13:e4:fe:b2:3a:98:cf:78:d4:13:
ac:46:4e:7b:f7:74:44:0d:7b:c8:b1:c6:f2:16:b5:6b:f0:2c:
6f:71:da:6c:b9:93:3f:f4:84:34:4a:a1:fe:35:0d:c1:42:74:
03:a5:5b:e4:a9:86:8a:c1:21:41:f9:ec:0a:98:5b:0c:5a:9f:
79:2d:14:03:be:04:8f:9e:02:a9:c0:e8:1c:c9:76:91:9d:31:
77:29:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:30 2025 by rpki-client