Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
File: 250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa (raw, json)
Hash identifier: C9cVCYiH5Cl+V6Pgq0CmuHzjEeb1eWLGcyAMKLe7Olo=
Subject key identifier: 46:D0:33:0C:E1:10:6E:97:03:F3:E1:4B:46:AD:DE:AF:88:41:B1:34
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1AA48A3A7956416AABA3B33A881AD7FF44BA4B89
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a4:8a:3a:79:56:41:6a:ab:a3:b3:3a:88:1a:d7:ff:44:ba:4b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=fd1c0c16627f121ed8d8100f9d769c9d8977a5c4e6ecf0ab9f986b5fca9882e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:61:fc:6d:8d:b5:38:4c:33:a1:4d:38:93:
f5:dc:5a:cd:3c:2c:6e:b8:cd:ac:2b:a3:f4:47:43:
0d:24:cc:76:7d:a4:36:c2:19:61:90:85:cc:69:50:
c3:8f:73:20:48:3c:db:1a:71:93:f1:9a:83:cc:43:
43:c8:3f:a6:10:f2:0f:c1:81:03:6f:94:ef:e8:fc:
a7:4d:52:a2:af:e7:b8:5c:cc:15:4f:fd:d1:00:2a:
c3:4d:33:76:e5:e2:4a:86:5d:31:fa:c5:37:de:39:
d2:55:23:e5:3c:e7:ae:46:99:0c:12:6b:7f:02:dd:
b5:6b:d4:96:18:73:82:59:49:66:e5:d0:ea:90:a5:
a5:e0:f3:eb:f8:87:3c:86:fe:b0:cf:cc:19:02:71:
63:cb:60:d0:7c:21:8b:7f:35:67:71:b8:d0:31:03:
80:1f:bc:9b:62:bd:cd:0c:f2:97:a3:5b:31:73:e7:
d7:d5:fc:9b:8a:06:b9:19:4f:07:27:21:74:d6:08:
1a:c9:9e:35:c7:ec:d9:ba:1a:7e:df:a0:fe:98:7a:
34:70:41:b8:84:64:b9:b6:bd:5c:bf:81:00:75:03:
62:18:03:42:f4:db:97:98:7b:50:41:4b:55:e2:b7:
09:59:0f:c0:df:90:9f:de:0e:00:5c:90:84:a8:ba:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:33:0C:E1:10:6E:97:03:F3:E1:4B:46:AD:DE:AF:88:41:B1:34
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:8000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:e7:3a:fc:a4:d6:b4:7c:1d:73:e8:e8:92:2f:cf:b4:5b:8a:
ed:e1:83:fb:4d:7a:a9:da:5d:4a:33:45:ba:e5:39:c9:7c:d2:
6c:f1:e0:2f:e7:82:9c:c1:e7:3c:60:54:a0:e5:84:8b:15:aa:
ed:80:a0:ad:71:ab:2b:52:3d:bf:a7:db:45:23:98:27:a4:3b:
5c:e9:5a:c0:4d:da:fb:da:a7:91:14:48:19:2f:f3:24:17:dc:
21:92:51:7d:58:ed:aa:30:34:22:26:6d:2d:e5:20:8c:84:2b:
10:29:38:14:cf:3b:0e:68:2f:be:1d:9b:a7:af:3e:09:8b:65:
32:0d:0a:db:04:ee:00:2f:9b:24:05:07:a3:9d:fa:8d:8b:06:
c4:08:8b:db:fc:b7:56:3d:36:3c:3d:46:fd:14:36:b2:ce:5d:
96:d2:ad:be:e9:79:37:c9:e0:8e:3e:09:a9:77:6a:62:48:56:
43:8a:45:bd:55:e6:cb:0e:3b:6d:ec:4e:25:27:31:7b:b3:cb:
67:b5:16:dc:84:18:68:96:c0:03:01:b9:aa:2f:01:41:fb:f3:
1f:37:0f:67:ac:2d:10:40:0c:6f:55:32:d2:37:89:a5:e0:11:
1e:28:50:d7:27:9a:fd:27:cf:45:ae:b8:ae:44:48:af:aa:dc:
45:80:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:49 2025 by rpki-client