Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa
File: 1a029338-7973-4195-baed-4c6117fce277.roa (raw, json)
Hash identifier: +DsCcFrEL6g+tsuFm+rbv7FvwgTUIgj+Av+YSXEPELI=
Subject key identifier: 84:FB:81:26:BB:44:FB:C7:34:0D:D9:6F:63:35:8F:5E:AC:E5:66:FA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 55356B13C25EE898ED519C014DC20DCD1D0C7316
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa
Signing time: Wed 26 Mar 2025 15:21:54 +0000
ROA not before: Wed 26 Mar 2025 15:21:54 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.212.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:35:6b:13:c2:5e:e8:98:ed:51:9c:01:4d:c2:0d:cd:1d:0c:73:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 26 15:21:54 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:1a:e9:9d:84:7e:59:12:1d:53:a2:ec:75:
da:57:1a:03:04:06:b9:48:d4:ee:69:f2:f0:aa:c7:
b2:48:33:95:8a:15:34:77:7f:49:01:5a:03:3d:8a:
4f:c4:76:7b:f3:29:d4:b0:e8:9e:d4:e1:3c:47:5e:
2b:97:0d:9c:a4:38:c6:6e:22:03:a3:48:9e:f1:56:
b1:3b:0b:8a:41:c9:b2:9c:8d:92:a2:2a:7e:b6:c0:
ea:9a:7e:d7:17:a9:84:c1:76:8d:28:cc:2e:e7:82:
e0:9e:de:52:3d:ed:58:6e:90:b9:ef:90:87:75:7f:
6e:7a:25:22:67:ce:85:bb:5b:63:c3:fa:5f:e0:6b:
11:8f:23:9d:e8:be:4f:39:bc:e6:af:9c:72:e0:df:
db:d7:5f:16:2b:ea:aa:00:2c:c7:8d:eb:19:2f:72:
02:47:b7:4e:fe:06:fa:7c:27:94:b8:6f:62:06:c8:
f1:40:04:23:0e:e9:aa:e9:10:51:30:2e:38:9c:82:
c5:df:2d:63:ae:39:15:67:ef:c8:02:76:9f:84:95:
bb:81:fe:3a:95:72:5d:94:ac:8f:4e:69:47:e4:dd:
f6:7c:fb:af:fe:99:a3:b5:14:20:01:d6:c8:62:0b:
22:d1:9c:08:1d:c7:16:09:69:3d:6c:74:38:f9:48:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:81:26:BB:44:FB:C7:34:0D:D9:6F:63:35:8F:5E:AC:E5:66:FA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.212.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d0:9c:81:62:f9:85:f7:19:93:64:8a:ae:0e:36:5b:83:ec:
e0:a7:c9:06:de:7d:96:73:4e:2f:66:fe:45:f8:bf:c5:04:9a:
62:69:0a:17:59:d4:d5:ff:5a:f3:0a:da:9d:6c:83:91:7a:31:
e9:d7:58:d2:7e:77:f9:20:5a:80:35:63:87:92:9a:21:b0:a6:
63:09:1a:48:b0:56:c2:a8:c9:21:4b:8d:0c:bd:e4:4a:b1:7a:
9d:a3:5f:32:0c:77:91:3a:5a:29:1d:70:b0:b3:ba:3d:1e:9d:
c5:5b:cc:2a:e3:f7:c1:37:01:8c:73:df:12:10:e5:0f:37:5a:
91:9a:f9:98:df:a6:c7:75:5b:fc:6a:45:40:a9:fe:70:77:85:
ed:b1:ae:15:b4:63:06:d6:c9:c1:ff:06:47:1d:08:3a:77:47:
d2:93:0e:cd:3a:de:b5:0a:57:e8:5e:18:8a:c5:0b:8d:dc:ee:
8d:7a:b6:fd:de:ff:12:f9:b3:2f:a2:0b:3b:8d:42:ab:66:13:
47:a8:04:f1:c5:2d:da:ae:f0:05:39:fe:1f:94:b6:86:ca:70:
dd:4b:7e:6c:36:57:5e:8c:24:e6:e7:62:8a:ca:91:b3:1d:06:
ed:76:bf:09:88:1e:4c:45:4c:ce:19:81:81:c0:ee:6f:70:06:
e5:71:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:31 2025 by rpki-client