Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa
File: 116071fa-fa33-4a2f-9343-0d57551a9223.roa (raw, json)
Hash identifier: waTrs6J6QbEvkMIYg2t09qHQwcwULGxTo73ghH9kFhc=
Subject key identifier: 44:E8:6F:14:29:92:22:7A:7C:48:27:5E:B3:05:C8:EA:0C:86:58:8C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2B0CFCAA4CD9C12262C8F42CF2504659952FA1B3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:6060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0c:fc:aa:4c:d9:c1:22:62:c8:f4:2c:f2:50:46:59:95:2f:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a1802e0b4ccc8dfc12fe4378337edf5de0d860adaf1f0b062c0db9dccd70ccb8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:02:ee:a6:1d:20:c8:df:95:cd:be:af:24:
d5:19:c7:3b:99:26:65:bb:69:3d:ae:6c:52:6d:92:
a3:eb:8a:8c:b9:a4:ca:06:34:ee:9d:40:14:43:a8:
99:7a:6b:21:b0:c0:55:c4:6d:5b:71:99:1f:4d:4f:
40:80:19:6c:87:c4:91:62:97:c1:47:be:bd:bf:7a:
24:ee:92:b5:9a:0b:e0:c3:50:8e:f2:8b:37:66:6d:
2d:c1:df:3e:e9:2c:90:a6:da:63:49:f1:9e:c5:7f:
b8:b5:c0:a9:2e:df:96:a5:29:5c:34:b5:ab:4b:59:
00:12:09:e1:86:80:7e:b6:d7:e8:df:f6:98:e0:56:
a7:31:65:e8:90:d9:43:09:c8:b3:e4:6e:9a:6d:17:
46:93:29:9c:13:89:c6:ad:bb:bd:4d:e1:74:4a:20:
0e:79:da:50:14:56:8c:18:a3:bb:f6:64:c5:a0:36:
98:6a:1d:3c:ed:ce:40:11:6a:2d:dc:69:a3:7a:6e:
26:f0:37:d9:c4:6e:c5:b2:42:79:43:6a:99:00:6e:
79:c7:45:28:4f:c7:98:de:aa:07:aa:eb:34:61:16:
fa:57:57:54:73:99:f3:97:4b:5a:12:5e:67:13:b7:
59:d0:76:23:ab:9e:83:a6:d7:1f:ee:a4:bb:18:37:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:6F:14:29:92:22:7A:7C:48:27:5E:B3:05:C8:EA:0C:86:58:8C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/116071fa-fa33-4a2f-9343-0d57551a9223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:6060::/48
Signature Algorithm: sha256WithRSAEncryption
b2:be:99:b2:b7:a5:1b:a9:18:ef:fe:12:0c:5c:08:3e:62:01:
40:4d:db:46:db:5a:c9:f6:31:31:12:23:d9:b7:7e:a4:74:c8:
43:7b:d3:49:a8:62:63:17:cc:fe:28:a4:2c:e5:ed:6d:61:4f:
b5:5c:33:83:e2:95:c8:9c:ec:8d:89:03:b7:c7:60:50:09:e3:
eb:b6:02:dc:3a:38:a0:a4:06:5f:ac:ad:85:b0:e0:63:68:c8:
73:40:c5:a1:d7:aa:cf:da:24:a9:ee:83:03:bd:41:cf:e4:d8:
0d:fd:92:64:d1:76:c7:ec:ac:ec:b4:7d:e8:56:a7:b9:29:2d:
ac:ad:7a:86:da:97:f9:2c:bc:ae:a3:1a:4b:64:50:99:d1:51:
5d:52:86:dc:3f:67:a4:77:4d:86:f9:c7:2c:24:8d:3a:ba:5b:
21:5e:b6:d7:c2:51:18:3f:49:74:3f:be:3b:8e:1c:33:5c:cb:
32:ba:e6:8e:f6:ee:5d:d3:b3:af:53:98:f0:6f:ad:3a:2f:33:
46:78:5a:61:45:c0:2d:ee:f2:39:8d:f8:40:a0:30:34:88:a5:
ac:f2:12:a7:bb:fd:ee:ad:b4:34:40:e6:28:03:f0:54:72:30:
57:81:1d:1c:48:84:84:65:77:37:68:22:18:a1:51:0e:91:41:
a4:aa:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:46 2025 by rpki-client