Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa
File: 192876e6-f42e-4593-9c92-6d3b76ebdac4.roa (raw, json)
Hash identifier: pXVYJlGGo5Tw/nZxaCGSgRzSQU/AfrTtPyCrWeJ3Vyo=
Subject key identifier: 44:46:B1:3D:26:9E:1F:09:19:B2:6C:2F:C2:A4:FB:62:29:95:BE:AF
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 3A7500E4B2DE0BAD1E0147524D95DD18C8C1B9B6
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 103.4.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:75:00:e4:b2:de:0b:ad:1e:01:47:52:4d:95:dd:18:c8:c1:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:7d:1f:f2:1a:4c:46:5a:cf:09:95:5e:81:
c4:9b:06:03:31:5e:42:5d:9c:3b:10:35:4b:3b:0f:
10:63:ba:d2:48:77:7c:6b:3b:ec:d0:eb:d9:e2:2b:
65:c7:61:45:91:89:d1:b2:9b:4e:38:4f:f0:0d:ab:
eb:9c:da:09:47:1c:fc:03:76:51:d4:b6:88:b9:fd:
a0:e6:43:70:2a:75:77:57:5c:f2:15:50:86:33:ae:
6e:2c:98:af:a6:9a:93:28:7b:63:16:76:87:1e:23:
b4:d7:69:29:cc:a8:c2:37:5d:a7:8f:c7:24:d5:b3:
73:c1:98:c3:ed:eb:5c:9b:55:46:b5:36:6e:d2:09:
69:e7:9f:18:9c:8b:f7:9e:a6:66:61:2e:dc:40:13:
62:bc:e0:d8:12:c2:35:4a:57:0c:74:87:82:60:25:
f2:ac:eb:68:ef:78:3f:bf:4f:6a:33:3a:ac:17:db:
b5:57:bd:a4:2e:c1:7f:f8:bf:6b:6b:03:1b:2a:68:
02:48:4a:41:e2:e9:25:51:64:06:41:3b:67:d9:fe:
a7:53:e9:ab:d6:35:4b:5a:ff:7c:b6:a8:99:17:e6:
76:d0:0f:d1:95:c7:da:a7:c1:35:f7:81:a7:bf:a5:
00:ea:04:95:e9:d8:1c:ae:dd:0e:3e:01:5b:0d:13:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:B1:3D:26:9E:1F:09:19:B2:6C:2F:C2:A4:FB:62:29:95:BE:AF
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:92:7d:1e:cd:74:a2:8a:10:33:79:bd:33:88:ff:ae:38:4e:
cd:18:27:a7:97:e7:f4:4a:53:13:64:50:97:f6:ac:3a:ed:71:
08:65:b7:11:de:b8:7f:f7:40:bc:15:1f:d2:04:36:b7:62:5d:
bc:23:b3:5b:04:86:ad:aa:b8:f0:f1:1b:0a:26:cc:06:a6:07:
97:08:3a:ba:47:02:45:d2:41:87:fb:49:e1:e8:6f:8d:ac:81:
3d:f5:9b:6b:44:80:1a:1d:e2:4e:60:ab:c2:2f:92:2c:bb:98:
ca:c6:06:12:f1:a0:02:4c:be:97:5e:40:c8:a8:c1:8d:db:fc:
b6:05:96:d3:08:34:c1:4e:b6:fd:a7:52:ec:38:4b:9c:70:88:
8c:e0:c7:ce:91:40:45:62:8c:1f:1c:45:bd:a1:34:11:48:f8:
12:88:b6:40:d8:60:64:db:28:4b:10:bb:18:7c:e9:25:14:54:
18:94:dc:3a:69:e8:0c:9a:4a:a2:0f:c9:73:5b:26:55:be:58:
1d:35:b8:14:31:e4:7f:b6:67:36:25:41:b5:03:45:af:b3:ed:
63:81:9d:1f:07:48:b4:bd:75:cc:d8:64:43:fc:e2:9f:0e:25:
d8:b5:37:3b:a9:b7:33:03:83:c3:a9:ec:89:f6:fc:d4:df:0d:
93:82:bc:d0
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUOnUA5LLeC60eAUdSTZXdGMjBubYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw
RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI0MTEzMDAwMDAwMFoX
DTI1MDEwNDIzNTk1OVowejFJMEcGA1UEBRNAZWQ0N2UzM2EwOTAyNDdiNWYxODkw
MjljY2EzZTlhNzViZjg0ODA1NzQ3YTc0ZWNlNjdmM2NjZWRjM2E4ZmU5OTEtMCsG
A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fl9H/IaTEZazwmVXoHEmwYDMV5C
XZw7EDVLOw8QY7rSSHd8azvs0OvZ4itlx2FFkYnRsptOOE/wDavrnNoJRxz8A3ZR
1LaIuf2g5kNwKnV3V1zyFVCGM65uLJivppqTKHtjFnaHHiO012kpzKjCN12nj8ck
1bNzwZjD7etcm1VGtTZu0glp558YnIv3nqZmYS7cQBNivODYEsI1SlcMdIeCYCXy
rOto73g/v09qMzqsF9u1V72kLsF/+L9rawMbKmgCSEpB4uklUWQGQTtn2f6nU+mr
1jVLWv98tqiZF+Z20A/Rlcfap8E194Gnv6UA6gSV6dgcrt0OPgFbDROgEQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFERGsT0mnh8JGbJsL8Kk+2Iplb6vMB8GA1UdIwQY
MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E
c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5
LzE5Mjg3NmU2LWY0MmUtNDU5My05YzkyLTZkM2I3NmViZGFjNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4
ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQAgkn0ezXSiihAzeb0ziP+u
OE7NGCenl+f0SlMTZFCX9qw67XEIZbcR3rh/90C8FR/SBDa3Yl28I7NbBIatqrjw
8RsKJswGpgeXCDq6RwJF0kGH+0nh6G+NrIE99ZtrRIAaHeJOYKvCL5Isu5jKxgYS
8aACTL6XXkDIqMGN2/y2BZbTCDTBTrb9p1LsOEuccIiM4MfOkUBFYowfHEW9oTQR
SPgSiLZA2GBk2yhLELsYfOklFFQYlNw6aegMmkqiD8lzWyZVvlgdNbgUMeR/tmc2
JUG1A0Wvs+1jgZ0fB0i0vXXM2GRD/OKfDiXYtTc7qbczA4PDqeyJ9vzU3w2TgrzQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:16:32 2025 by rpki-client