Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00b2a2b4-99de-45a2-b5f4-a01609c997f1.roa
File: 00b2a2b4-99de-45a2-b5f4-a01609c997f1.roa (raw, json)
Hash identifier: hrhSXcBIB81M9hbfDYvtLSE8oCcPbAHm5tFBXb2oqZo=
Subject key identifier: AE:EF:AA:C3:A3:53:E3:54:ED:1D:A5:1E:3F:1D:63:54:97:C1:C8:A0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1EB1AFFE3D5F9B8F45D66A965657EE89A192C661
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00b2a2b4-99de-45a2-b5f4-a01609c997f1.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da38:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b1:af:fe:3d:5f:9b:8f:45:d6:6a:96:56:57:ee:89:a1:92:c6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=d9d0ebd2046bb7b9aa480fed4a3ee8f18a8cde35be8f6bf575dc92cdf4a15f23, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:af:b8:57:17:f2:4f:52:e4:36:60:87:a8:a4:
17:39:e5:6f:20:77:b0:bb:9b:62:a8:a6:6f:a7:76:
62:a6:c0:a9:74:bf:49:e3:97:97:a1:ea:e9:72:cf:
7a:80:89:77:8f:bf:8b:48:1a:de:61:25:1a:68:01:
43:3d:0b:ba:dc:d4:70:00:c1:43:fb:e7:b2:61:f0:
b2:c5:88:6c:f1:d4:cf:20:dd:44:67:b0:c5:b1:2c:
12:68:04:3b:56:f6:65:3a:0e:a6:b2:5e:69:a8:95:
e6:33:66:bd:21:2f:96:3b:de:c0:04:07:3d:6e:22:
a6:0a:b3:6c:5a:d4:03:3e:bc:17:14:57:db:28:1c:
fd:dd:7f:fc:62:0d:35:5a:08:73:d4:ed:72:7d:0e:
f1:ae:60:28:44:85:ad:9c:cd:5f:ab:02:a5:b5:a6:
45:ea:17:4e:62:78:a9:f3:4d:9d:93:e1:c5:5d:72:
5e:3b:12:ef:c1:60:5a:ab:98:28:24:46:00:16:95:
4b:f9:a8:fd:88:b6:63:17:f5:b2:4e:88:6c:cd:ca:
49:3a:92:c6:dd:0c:b6:9a:c4:77:da:04:50:00:19:
00:be:bc:e8:3c:14:8c:c0:3c:9e:2f:60:7c:c5:bb:
70:3d:cb:05:39:4b:91:6b:69:00:4d:17:d8:bd:17:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:AA:C3:A3:53:E3:54:ED:1D:A5:1E:3F:1D:63:54:97:C1:C8:A0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00b2a2b4-99de-45a2-b5f4-a01609c997f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da38:7000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:35:8c:be:90:3e:81:74:b8:bf:ad:af:8d:f7:48:3f:74:3f:
1f:09:c8:50:aa:a4:b2:73:61:b0:25:d8:54:a0:0a:50:ad:09:
f3:44:81:12:96:1d:6e:da:f1:3c:43:69:60:e6:28:75:4c:9d:
4a:15:30:76:02:e2:f5:75:c0:45:0f:4a:3e:35:d9:39:9e:da:
62:b4:7d:1e:54:f5:4c:45:c3:f3:b0:15:67:ef:61:b8:e1:05:
24:37:57:b6:76:ac:dd:fe:12:aa:55:da:76:f6:d9:10:b6:51:
8b:ef:57:84:a3:1d:82:1a:ce:23:2e:05:a1:48:12:57:29:d9:
9b:dc:fa:ef:69:e2:ac:51:9c:23:09:67:1d:ef:40:dd:7e:17:
cf:b7:32:26:28:69:4f:97:2c:a6:d1:59:90:cb:fa:b4:32:9a:
4a:94:42:75:be:dc:b2:b3:43:ca:39:48:15:03:1e:2b:2a:48:
c1:02:96:89:5a:81:58:b1:ca:1b:a7:a9:2b:20:c2:68:30:31:
13:78:14:e1:11:5b:30:d2:ad:c4:a0:35:88:b0:d9:7f:f3:41:
49:b9:57:4b:ac:30:73:6a:91:38:5b:1d:08:63:be:fe:7c:c0:
c6:30:32:03:2a:e9:90:d9:13:91:c7:01:ab:a3:37:4d:22:4b:
eb:2d:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:44 2025 by rpki-client