Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa
File: 0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa (raw, json)
Hash identifier: jAR/RPzOZSGsSW++xp9/o902O/9s8LJToCCCh9lJ79s=
Subject key identifier: 3D:22:C9:77:04:FA:C0:8A:D4:C5:A6:FD:A3:02:31:10:73:68:C2:16
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 16082CFAC6C1FFF405734DBF5DBF9EFCC283BBBB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:e0c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:08:2c:fa:c6:c1:ff:f4:05:73:4d:bf:5d:bf:9e:fc:c2:83:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f81d50585cfa9b39c5a5ca7e01d6e02bb531f5acebd2446977fe7b70920795b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:34:21:b7:af:67:21:9e:14:80:f2:20:37:
48:be:d7:02:c6:42:4c:68:e1:76:3f:a4:00:c6:be:
b7:b2:a6:1b:9e:70:1e:02:03:3c:dc:1d:5e:38:da:
a0:db:ee:45:a2:b2:9a:e7:f4:2d:3b:08:68:8e:1f:
0f:da:11:02:42:fc:b7:0e:ee:c6:5a:2d:f8:ab:d2:
e2:bd:49:bd:53:09:9d:5c:ad:8b:c2:bf:b3:b8:08:
a0:aa:be:49:ad:b0:1b:2d:29:4d:a7:4f:07:a7:53:
eb:f1:84:60:94:a8:cf:1b:0a:84:a6:8c:5b:25:11:
31:50:b5:34:35:4c:5b:0d:e5:da:ba:fe:e4:2a:b4:
63:83:fa:de:57:2f:cc:17:c2:5e:d7:ab:5e:30:c1:
3e:b3:28:b7:6c:22:61:5a:8a:4f:8d:25:a3:13:c8:
0e:7c:db:34:5f:14:fb:08:23:3a:2b:34:9d:28:c0:
42:0f:67:14:31:02:30:c2:e1:25:fb:c0:7e:c1:e9:
83:59:45:dd:7f:6d:3a:1b:24:aa:fb:da:6e:ca:5b:
a9:43:2a:d9:2a:9e:83:fe:89:c8:3d:e7:0e:53:8a:
31:92:b2:2f:16:c9:39:49:c6:3e:ce:1d:94:80:54:
62:79:77:72:0e:3e:9e:f3:1d:57:62:09:fd:29:48:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:C9:77:04:FA:C0:8A:D4:C5:A6:FD:A3:02:31:10:73:68:C2:16
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fdd5bd4-d5a4-40d2-8a1b-6a006f1a5b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
63:f5:5d:b6:c3:b4:52:1a:cb:14:4f:32:0b:11:a4:81:48:fc:
6f:51:61:38:9a:88:6c:4a:80:8c:95:39:9a:25:53:f4:ac:60:
a9:74:38:d4:4f:89:31:1c:c7:22:3f:a7:86:b5:39:9e:8d:24:
16:5c:c7:c5:89:73:ef:8f:54:44:0e:62:ed:f7:19:73:ea:4b:
89:8a:24:a1:83:f8:ef:e5:c0:2c:e9:0f:6d:ed:5a:2d:5e:c5:
cd:33:42:d5:fe:af:6f:0f:72:12:a8:0e:58:05:47:5a:9f:a5:
9a:75:28:b8:00:8f:af:16:44:94:aa:1f:eb:2f:53:10:ed:b1:
c3:67:df:26:75:70:3b:fd:71:4e:40:3b:03:ca:24:93:7e:6c:
21:82:90:4b:a6:05:2a:47:03:63:1f:d0:82:14:94:f7:9b:42:
61:6f:c6:b7:6e:e6:f8:8e:70:4b:e6:bd:a8:2e:f3:aa:89:fa:
0e:36:d8:c4:cd:6c:60:98:98:ff:98:c0:19:0f:c3:c8:02:cc:
5e:71:c8:47:5c:1d:ee:ac:56:65:ad:69:1e:9e:0b:58:99:a0:
31:45:cd:ff:ff:78:2f:ee:45:63:10:d9:ef:1f:03:e3:34:63:
93:82:a8:7b:a2:ca:51:89:58:d9:42:2d:e6:70:91:ad:e4:f8:
72:c5:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:44 2025 by rpki-client