Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa
File: 009449c3-730c-4a07-a324-20245f18db93.roa (raw, json)
Hash identifier: KTgLlrD2rcx/1lNqiwjCQfLGXjA+MY7Hd7sJ3kGg6Aw=
Subject key identifier: 31:71:26:7E:93:00:6F:D5:20:97:BB:3A:B0:ED:16:2C:A8:45:01:B0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4458977815ABE44107EDC4D55BD444F5C95DC0F7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:9040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:58:97:78:15:ab:e4:41:07:ed:c4:d5:5b:d4:44:f5:c9:5d:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5447cf690a7f7c7f34fc710ee72ac1023bb2d8ea227405ada0cd66600d06d391, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:e3:5e:f8:7f:06:a5:3c:d4:c4:c0:70:a8:
20:bf:ea:b7:48:dc:6a:98:df:06:9d:81:1a:52:97:
ef:b2:a3:af:7c:b2:4a:a0:a7:88:2a:18:70:2a:98:
f8:06:e4:23:3d:e4:d8:21:9d:6f:49:d0:13:85:6b:
0c:6c:d1:3d:03:d9:e4:60:c0:34:7a:69:7f:7f:23:
d0:bb:67:dc:f1:9b:3c:ca:17:43:6d:07:38:04:48:
77:b3:06:80:8c:4b:97:5a:d7:07:cc:78:b9:d8:be:
17:75:45:0f:56:d0:13:2e:fe:8c:b0:ff:b2:b3:4d:
60:2f:52:7b:a1:80:3d:c0:e7:67:0b:4a:11:bf:05:
89:fb:41:e7:ca:da:a5:80:94:14:29:27:e7:87:f8:
76:cf:60:5c:ac:f7:98:47:24:fd:76:5a:23:63:31:
c4:62:02:ce:fe:1a:2d:b4:22:2a:ad:0d:c3:47:d0:
75:ee:d6:e3:76:1f:42:8a:6c:68:2d:ea:03:38:47:
26:d1:7c:04:35:17:00:22:a6:6f:62:e6:93:af:12:
68:81:7a:89:87:c4:a8:a5:ce:24:d6:74:a5:e7:4b:
ab:21:ad:f0:42:97:b9:a5:09:f7:fd:32:f1:bb:be:
1d:6c:5d:13:fd:d9:6a:e9:36:b5:68:3d:cb:17:89:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:26:7E:93:00:6F:D5:20:97:BB:3A:B0:ED:16:2C:A8:45:01:B0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:9040::/46
Signature Algorithm: sha256WithRSAEncryption
18:ef:35:31:64:45:0c:cc:28:f0:1d:90:9e:69:cc:8c:86:93:
a8:cb:57:e1:41:08:53:13:7e:d8:54:3c:e4:4e:e6:2c:03:bf:
4c:45:b4:d9:b3:21:16:4e:b1:e2:8d:1a:52:c7:20:5c:d2:59:
57:ac:cc:43:e0:ee:ff:d7:77:68:a1:96:d6:47:fa:8d:e9:0e:
1b:ed:c5:d2:a5:e3:41:c5:c3:17:bd:e8:60:f2:cd:3e:c2:1a:
06:1f:3d:6d:93:b0:58:d5:a9:df:5b:83:8c:f1:4c:e9:00:ae:
da:07:13:a7:6e:a0:1a:e5:1c:ea:4a:8a:a7:4e:57:dc:9a:a1:
b5:77:88:9f:1e:83:89:f0:c6:9f:7f:b7:b8:47:e2:1a:cb:8c:
1e:ed:09:ba:e5:dc:36:b4:52:78:16:13:4b:38:85:cd:ce:c0:
19:ef:40:13:62:0e:c2:d6:bd:16:09:f1:c0:db:2d:01:22:e2:
4e:73:e6:c2:86:6e:c3:bf:07:fb:a3:9b:ef:33:3f:fa:75:01:
f0:89:44:3e:54:d0:b3:d9:e3:e6:0b:c3:ee:03:2f:3b:b4:a9:
49:c2:07:55:84:93:91:f8:7a:84:05:55:89:62:6b:fe:ef:70:
61:da:e8:1c:08:73:d7:ca:9b:ab:b3:56:ed:71:43:5d:c2:4b:
57:0c:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:25 2025 by rpki-client