Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
File: 1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json)
Hash identifier: OArd8JhUWkBQLYBlO09XN/GjNVOmCjEnqp2o0zWC++E=
Subject key identifier: 4A:C3:9A:8A:2A:AB:BC:FF:BE:45:1E:A2:9F:B2:51:CA:5D:2A:1B:FE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 27319049C97277F980FA315FE3520E8FEC379A77
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da23::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:31:90:49:c9:72:77:f9:80:fa:31:5f:e3:52:0e:8f:ec:37:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=273aa900cf62023eac965594c6d684296239f1f32dbe18dda8779b72813ab16d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:2f:9b:2e:0d:5d:50:63:f8:14:68:8c:01:
40:72:20:ea:e4:48:de:bb:18:b9:ef:07:97:c2:70:
91:cc:a3:58:e2:7f:2a:9a:8f:67:ca:75:fd:13:79:
6a:41:62:a9:0d:5e:da:16:a1:f4:9a:e4:fe:7a:f5:
e1:38:6d:ea:1c:e8:8d:f0:1c:c2:cd:90:e1:e7:a6:
04:88:46:3d:70:a3:92:18:94:3e:63:a1:65:8b:1a:
5b:7a:5b:b6:e2:63:26:aa:25:42:3a:4d:0e:10:f9:
f8:bc:b5:db:f1:b1:6e:a2:5a:91:2d:75:ab:f1:59:
40:d3:ff:1f:4c:65:72:ab:b1:08:44:93:ee:af:30:
d4:67:4e:eb:b9:3a:1c:d4:25:f8:55:df:26:0d:5a:
a2:be:02:82:09:2a:55:e2:c2:bb:0d:01:b8:62:4b:
a8:10:cd:23:4b:75:cf:ed:0e:e3:06:70:43:1d:56:
3c:1b:fd:5b:e0:69:f7:ad:4e:a4:18:40:99:c4:a6:
16:e8:33:be:d2:12:ef:3a:ab:13:6a:2e:7a:25:2f:
a0:91:8b:4e:57:06:22:89:b7:99:7f:fa:44:c5:1c:
d2:6b:2f:54:77:a9:a9:c1:84:70:7d:6d:3c:b5:5b:
46:3e:04:4e:19:17:eb:c4:b3:fa:33:a5:73:d1:61:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:9A:8A:2A:AB:BC:FF:BE:45:1E:A2:9F:B2:51:CA:5D:2A:1B:FE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da23::/36
Signature Algorithm: sha256WithRSAEncryption
79:78:95:06:8b:21:47:06:29:36:0c:f5:d5:2b:fc:82:e1:97:
14:86:b2:ff:4c:ab:f9:69:2c:99:a1:c8:51:60:02:f0:32:ff:
45:24:27:71:2a:84:ef:d6:fe:be:85:82:c7:c2:42:f3:81:ef:
9b:43:30:20:2f:7c:c3:04:1a:e0:40:f9:9f:18:72:d3:ff:65:
03:d6:a7:90:8b:9a:63:c1:ef:a2:e2:5f:99:2a:18:08:be:72:
c3:a0:9a:a1:94:44:a5:b9:02:78:14:e2:0b:b9:ee:1b:eb:03:
a8:f4:3c:45:a7:90:e3:f7:7d:d7:f3:38:db:28:b2:67:c7:80:
2c:33:f9:dd:9b:a3:9c:ce:b6:05:e5:54:b4:33:86:b7:ff:c6:
5a:fe:23:fc:11:f2:e6:51:53:b6:fc:37:f9:54:00:2e:8e:2d:
1d:57:50:0f:58:5c:d3:c2:1c:1b:c6:31:ed:a9:cc:ea:95:2c:
19:3b:dc:36:48:1d:4d:7b:e9:2e:6f:b0:09:bc:3d:92:9f:e3:
ab:00:07:20:e8:96:77:48:b2:00:bb:e9:f6:ae:0e:15:2e:21:
c0:e2:1c:21:cd:91:df:e5:29:8b:a7:4f:49:a1:51:ab:28:d1:
b6:3a:40:73:d4:4f:8e:2f:21:86:66:f7:c4:3a:2f:1a:5e:23:
d8:7e:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:26 2025 by rpki-client