Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa
File: 1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa (raw, json)
Hash identifier: xIBrnOqiSM0cVEBtrACcjydW3Y4qFuGkTISWjDz4GrA=
Subject key identifier: A4:F4:D6:A9:32:F6:2D:55:75:F1:F0:41:4B:75:0C:1E:D1:29:B0:53
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 054E43C05D8A14DB5E24B5831992F5AD5F550A2B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:b080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4e:43:c0:5d:8a:14:db:5e:24:b5:83:19:92:f5:ad:5f:55:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6bc1af17c2048fc054d7213bb128bb0855df8b5ab53d358e13fbf9b3eda947d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:b6:18:d5:f4:1a:d5:39:8b:13:9c:aa:20:
81:91:42:c7:d1:16:d2:c6:b0:de:39:1a:0d:f4:a3:
cf:f8:a3:c4:fd:4c:12:f5:3c:2e:61:0b:f5:57:5c:
0b:34:40:e7:b6:ff:5a:e4:43:e6:97:de:d0:4e:47:
59:c9:26:3d:fc:ac:45:e9:ca:9f:a7:5f:a4:03:76:
77:ae:2a:a5:a3:d4:a4:09:ce:a5:af:17:57:f8:3b:
67:61:53:d2:ca:94:4d:cc:47:74:70:ad:ff:3b:48:
b6:be:37:bf:dc:1c:dc:6c:78:78:5e:03:97:85:6e:
a2:8a:7b:ea:48:cc:8c:66:dd:f4:fd:91:24:85:d8:
29:9b:ef:6a:7c:96:80:5c:56:aa:ea:e7:26:3f:9c:
68:f4:26:ee:8f:eb:08:23:fc:3d:2b:84:83:d2:a6:
e6:30:6c:e3:91:0d:17:f4:74:2f:58:97:6c:1c:c7:
cb:6c:7a:b3:8f:7e:ef:aa:85:b9:15:57:f4:17:29:
72:92:bc:5d:db:7a:10:27:74:d3:ee:46:67:e1:75:
59:af:c5:f6:ab:58:6b:db:d7:33:af:b1:b0:28:c5:
62:3e:37:a2:d5:27:c8:17:1a:d3:6e:ae:49:26:0e:
10:3f:49:58:bb:d0:96:58:af:cf:90:07:8f:7e:b8:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:D6:A9:32:F6:2D:55:75:F1:F0:41:4B:75:0C:1E:D1:29:B0:53
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b96f1b3-5c7a-41a6-ac5b-116289fe143d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:b080::/46
Signature Algorithm: sha256WithRSAEncryption
69:33:07:f4:06:be:9d:5e:d0:0f:80:2a:af:92:21:8b:99:2d:
e0:b0:f8:44:de:46:4c:df:3b:8e:77:f1:fa:f7:45:87:69:7b:
63:cf:88:70:f7:e6:45:83:9c:df:cc:dd:ae:d4:24:3a:13:3b:
aa:d3:a2:93:5e:25:ca:fb:e8:c8:15:3c:5b:7d:71:61:6c:e8:
71:0a:1d:d3:5c:f9:97:2a:a6:8c:d0:a5:a4:da:cf:9d:aa:11:
32:4c:cb:47:8a:62:ea:b0:bb:d6:4d:ec:25:c9:70:b1:e3:97:
1b:8f:1b:fc:28:2d:78:28:77:c9:e6:06:f8:29:02:0c:f8:a8:
d2:30:5f:87:9c:2e:5f:5e:a9:a0:f7:e3:27:d9:fe:85:a1:6f:
de:be:32:c3:db:ba:3f:c0:e3:34:b4:c5:41:6c:d7:44:be:40:
84:53:a8:5d:d1:27:93:56:d2:5e:83:71:fd:a5:c4:ee:c9:2b:
c7:e3:6c:5b:74:19:ee:5b:ae:49:d9:9c:bd:91:dc:88:1b:55:
b4:db:b5:61:8f:4e:05:3f:c6:4a:c8:e5:f5:1a:86:1f:da:78:
e2:b1:4e:c2:f4:8c:10:8e:8d:4f:73:96:85:90:4c:69:ab:5f:
ff:d9:94:d3:23:68:29:2e:04:c0:af:94:bd:f6:db:6d:3f:f8:
89:d2:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:59 2025 by rpki-client