Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa
File: 02b469b8-5d05-46d4-955f-296aa7147c07.roa (raw, json)
Hash identifier: AHHf2Lmqbtag36tkLddmlNlxTJYqFgWsfkxkVH4nq4k=
Subject key identifier: 5D:56:D5:7D:07:DE:96:CA:83:9C:2B:E2:86:D0:D4:64:AF:01:BA:90
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 328A2A3647522A8C95386741A901E8F1E2F927BE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:e040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8a:2a:36:47:52:2a:8c:95:38:67:41:a9:01:e8:f1:e2:f9:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ae67c6f631bbc4f542976976d39cdfb2d0886a7ed6fa9dc5080b4db05526fc4d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:0c:0c:64:3d:a3:4f:dc:18:97:5f:2a:fc:
31:4c:08:5e:95:95:14:f2:ae:5d:2d:01:e1:ed:41:
44:ec:e4:e0:c7:c1:2b:7a:fd:a0:67:6a:79:08:6f:
86:50:ad:85:1f:ae:d7:b4:d9:35:46:e8:0d:12:e4:
56:85:ce:42:3b:c7:e5:19:64:00:eb:f5:99:a2:28:
39:bd:37:c0:8c:dd:c2:b4:bd:a6:eb:f2:3a:c1:07:
aa:63:a7:aa:04:42:9b:9b:5a:37:e8:28:5b:a1:d6:
94:be:aa:d6:7a:a0:a6:3c:47:6e:8a:f4:f6:c6:5b:
af:a6:76:3b:d0:2b:cc:39:a0:5f:7e:02:81:82:37:
74:a3:db:10:a1:52:c3:fb:91:55:54:98:70:59:94:
7f:e6:ed:48:80:ed:91:0f:b4:b0:7e:64:ae:96:8c:
fd:63:de:b8:b2:d1:ae:9e:7c:16:4c:4a:61:80:2d:
68:82:92:73:be:07:b5:ac:02:8e:f8:a2:a2:53:f2:
63:2c:9e:46:0e:35:6e:9c:92:78:80:f3:68:e9:fd:
aa:49:63:91:f8:19:e0:23:42:d2:3e:eb:5d:70:2d:
2e:88:bf:b5:ee:59:d6:7e:eb:a9:c6:b4:07:b1:d9:
89:c5:4d:77:30:43:7b:0d:01:ca:66:b4:82:11:12:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:D5:7D:07:DE:96:CA:83:9C:2B:E2:86:D0:D4:64:AF:01:BA:90
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02b469b8-5d05-46d4-955f-296aa7147c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:e040::/46
Signature Algorithm: sha256WithRSAEncryption
c2:ec:93:03:0d:80:88:d6:30:13:08:c5:23:84:9a:2b:da:59:
77:53:78:35:c1:71:bb:3c:cd:82:9d:f3:4d:5c:1c:5c:d0:a4:
18:f6:df:62:9d:e4:7e:80:0c:9b:65:cf:b8:e5:98:7f:8b:47:
df:4e:6e:ca:dc:a6:ae:15:e1:c8:f3:3c:c7:05:d1:89:b9:5f:
16:61:43:96:fd:5a:7e:8c:ad:19:65:94:a8:72:68:dd:ea:0a:
9a:02:42:2d:0e:05:9f:c8:b7:c1:de:90:71:0b:c5:83:6a:d0:
34:5c:40:34:9f:6d:4d:e3:4c:fc:be:2b:15:be:22:ad:97:bc:
da:4d:14:b2:17:ad:df:1e:43:2a:b2:45:de:54:4e:28:97:1b:
ff:c1:d6:d7:68:20:6f:67:6b:d4:ad:e8:e2:00:6c:a1:1a:59:
2a:9f:0c:cf:8a:4c:49:5a:88:02:60:ba:0a:37:1f:bb:47:dc:
08:5c:93:52:98:3e:ee:52:bf:72:bb:5d:8f:96:9c:af:83:2d:
de:17:1b:32:c6:ce:98:b0:80:f7:ab:55:3d:4d:3a:0e:47:4c:
eb:49:0b:d6:5a:90:41:66:8c:06:7b:00:71:bd:34:99:7d:3e:
a0:f4:68:bd:42:a5:17:c6:8f:35:17:19:ab:62:0b:5f:75:ae:
24:1a:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:13 2025 by rpki-client