Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1496cdfb-711c-4966-9c2c-2841d27fb2d0.roa
File: 1496cdfb-711c-4966-9c2c-2841d27fb2d0.roa (raw, json)
Hash identifier: S+W8aE1Dm9dzN367a78Tb3/mIlDnXHIYOljf00ByXso=
Subject key identifier: C8:CA:AB:77:35:BA:DE:FF:33:AB:EA:FE:A1:28:40:28:40:2E:A5:14
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3EA3390DC75A754EBD0018214D0A14DF9315CFEF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1496cdfb-711c-4966-9c2c-2841d27fb2d0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da24:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a3:39:0d:c7:5a:75:4e:bd:00:18:21:4d:0a:14:df:93:15:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=2562399c233d86a3379e41827675db02deda89568047dc2cc5f09d70c93b0b90, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:24:f2:b4:5a:ed:84:dc:29:0a:29:6e:1d:
ed:fd:e0:64:eb:b3:13:66:c9:a0:08:e6:37:bf:20:
dd:ff:40:e9:bc:56:ed:fc:2f:ee:08:3e:a1:66:4f:
ae:aa:dc:00:02:d5:3e:a4:5a:d8:05:8e:31:5b:3a:
84:c4:e4:10:5b:b8:71:d9:e0:d5:0b:60:4e:6c:86:
fe:8c:0e:2d:20:62:3d:28:4b:ed:50:fa:02:76:8b:
a9:db:ab:b7:ae:cc:81:67:cd:6f:6c:f4:4f:ed:38:
20:e9:71:92:cf:07:91:77:94:4f:a0:32:06:7e:b2:
97:27:1c:19:d5:9a:7d:5c:4b:4d:33:7f:4a:6b:2c:
82:68:c8:1d:50:fa:d5:90:94:26:b7:cb:23:17:dd:
67:c6:f0:92:f2:85:4b:7f:13:31:dc:36:60:e4:a8:
07:c5:66:9a:d5:4f:2d:d0:af:89:d1:31:b4:9d:03:
62:42:c6:1e:d4:cd:5f:de:89:9a:aa:7f:6f:83:54:
5b:5d:88:bb:99:2a:83:a5:ca:ee:9a:4f:10:f5:dd:
cc:21:83:43:25:57:9c:59:d5:59:aa:9a:24:29:b6:
1c:c5:80:71:91:66:d5:bb:2c:f1:74:c9:47:0b:4f:
42:46:cc:c9:39:39:de:c4:97:ad:b6:9e:8b:06:c1:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:AB:77:35:BA:DE:FF:33:AB:EA:FE:A1:28:40:28:40:2E:A5:14
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1496cdfb-711c-4966-9c2c-2841d27fb2d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da24:8000::/36
Signature Algorithm: sha256WithRSAEncryption
83:3a:fd:51:d5:2c:65:b4:9b:20:4b:92:b7:6e:94:fc:63:cb:
14:20:4a:19:cc:28:27:7d:d9:06:fe:0f:ed:42:1a:22:47:57:
2d:6c:ba:20:70:96:7d:d6:4d:04:27:a4:ab:f8:36:ce:b8:e5:
cd:c4:ea:f2:02:83:ae:66:71:d6:9c:50:f6:c4:e9:37:5b:94:
bd:63:90:93:2d:4b:33:7b:02:a0:57:19:53:f5:f5:ba:00:d4:
8a:56:20:71:a0:87:cc:dc:3b:ab:49:6b:ca:22:fc:8e:6e:b6:
1f:1e:83:45:39:ab:ad:e0:a0:b0:6b:bf:7f:d2:7a:6f:1f:ef:
bd:f6:2b:55:b7:6e:ac:ba:1b:4b:8a:9b:3b:21:b4:31:42:ff:
69:91:8a:d3:c9:34:85:fc:b4:34:9d:b9:da:45:ad:4b:ce:25:
e0:99:52:48:3d:9d:3f:bf:29:c0:2d:bf:fb:05:e7:9a:46:0d:
79:88:77:3c:28:5a:9a:8e:7c:fe:3f:ba:b1:b9:a0:ca:6c:c9:
0b:4f:45:78:b8:53:9a:e1:7b:d4:79:cb:69:03:e5:17:14:df:
19:84:23:18:4c:f2:cf:1c:26:72:12:5b:9b:01:61:86:ac:a0:
b8:4f:1b:fa:4f:93:10:ec:43:ac:d5:de:af:6c:07:23:89:15:
10:79:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:12 2025 by rpki-client