Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b37db1b-9168-4013-90fd-5f16557b73d7.roa
File: 1b37db1b-9168-4013-90fd-5f16557b73d7.roa (raw, json)
Hash identifier: anOzEDe74eWK1NYlgs9vBWs4BABw3Vqyn2nQ5m7I9ZA=
Subject key identifier: 38:FF:52:61:7D:37:60:0B:04:65:95:ED:FC:AB:11:59:FD:B2:FD:14
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 45AF55B91C6D5F83C48B01BB0157191BF6F37CB4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b37db1b-9168-4013-90fd-5f16557b73d7.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf5:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:af:55:b9:1c:6d:5f:83:c4:8b:01:bb:01:57:19:1b:f6:f3:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=19b468c91d24b8ae1c17ce7f0228be80730e5d48b354385ecf1347e2c5b2e3b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:f3:c3:5d:ee:cd:84:be:6b:4c:b4:0e:9c:
8a:7d:67:3a:39:f6:0e:87:b3:7d:da:04:59:da:bc:
aa:3e:5d:70:ec:83:08:0d:8b:d8:b9:85:b3:1d:25:
83:ac:10:0b:af:f1:fd:e0:79:93:e9:f2:c9:51:4f:
5b:ee:33:3f:96:86:e0:84:aa:4f:0b:0d:4c:d8:70:
9f:11:bf:30:e0:5a:17:7f:55:98:2f:3b:96:87:ba:
48:df:95:2b:8c:3d:70:d3:ae:61:1f:31:8c:db:8d:
f4:ab:31:6d:03:02:e0:7a:dc:fb:c0:5b:96:a4:07:
77:61:3f:b5:b0:27:c4:92:b6:94:9b:99:33:fc:82:
f4:a1:b6:61:9d:55:3e:6d:30:27:68:64:55:58:32:
b0:46:72:5f:bd:90:59:42:71:52:9f:be:3d:ca:51:
0b:3b:a7:cd:14:66:c4:c6:8b:0c:a3:69:57:ec:48:
86:1c:96:44:87:3c:d0:35:51:23:62:61:51:71:4b:
84:02:df:a9:a3:a7:ba:2e:f5:7c:d1:2e:d8:b6:25:
66:9b:61:bd:3f:9e:fc:63:f9:0b:4f:0d:af:73:2f:
cb:65:7f:9f:41:33:b2:1d:f1:05:b8:e3:17:2c:04:
84:34:0e:dc:7b:ae:39:63:31:a2:68:91:34:2d:c5:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:52:61:7D:37:60:0B:04:65:95:ED:FC:AB:11:59:FD:B2:FD:14
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b37db1b-9168-4013-90fd-5f16557b73d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf5:1000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:75:e7:0a:fb:2b:78:ea:33:48:11:89:e4:6f:fc:5a:54:bf:
2c:e9:b9:f5:f3:fb:f5:1e:29:17:81:32:22:70:76:16:51:bf:
85:1d:aa:75:77:74:e4:13:b4:cb:57:75:99:de:3d:57:da:92:
62:0a:23:98:6e:60:ac:ee:1b:c4:04:8c:9e:15:bc:d5:e8:ac:
64:88:72:fd:7b:47:0f:1c:6e:08:71:cc:bc:8b:19:bf:9b:a3:
6b:7a:a1:3e:66:a8:ad:d5:86:e9:55:25:08:4d:79:43:80:21:
97:b6:f4:f1:40:fc:f6:83:fe:22:b3:9b:9f:ef:c9:67:9c:ea:
00:6b:27:cb:77:56:e0:0f:49:b8:6d:54:56:9c:a7:a3:86:48:
32:5e:6f:ec:48:75:92:0a:82:25:50:cb:e9:a2:7f:a9:63:54:
27:00:28:24:b4:07:a8:5c:7a:95:83:43:b0:eb:f2:50:a4:a7:
19:47:4f:82:dd:38:40:cd:e1:7f:36:07:8f:b5:41:cd:b9:43:
9b:1d:e9:6e:8e:32:bd:a0:e0:02:44:5f:ba:35:8e:08:b5:fd:
6f:7d:99:94:43:28:31:63:2d:3e:35:cd:ed:12:6e:1b:3a:15:
62:7f:44:b8:c5:47:43:53:74:ad:c5:20:39:9e:46:85:f4:b8:
d8:7c:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:51 2025 by rpki-client