Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa
File: 25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa (raw, json)
Hash identifier: XKwGjpBNAJ8NdtlKHl+WKK5acvreZK6ewxq0HCZLq7A=
Subject key identifier: 80:62:E1:C5:CF:C0:65:1F:CE:81:4B:6D:60:16:17:0B:D0:D5:9C:F2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4EDC7CC3B719C3ABF693FE379D80FBF81F74B6BC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf6:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:dc:7c:c3:b7:19:c3:ab:f6:93:fe:37:9d:80:fb:f8:1f:74:b6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=2076fa236140bba339bb2a60d973be4f08e8d29c8316d68e7a89b9bf0d63ace1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:d2:d7:6c:9b:7d:c6:6d:e1:a0:83:df:33:
25:2b:8e:79:b8:59:19:f4:a2:b4:02:c6:a2:6c:73:
c1:a8:21:08:95:83:e0:c2:30:a3:63:26:7f:78:f0:
06:36:c3:ad:58:0a:72:04:07:7a:57:17:75:4d:8f:
50:78:ec:c4:c9:dc:38:9c:87:29:b3:62:87:e3:0f:
52:f9:d0:8a:c8:28:64:8c:b1:f6:b5:17:cb:88:81:
6f:d7:9d:60:48:27:02:7b:b2:29:7d:5e:49:1d:42:
34:fa:ad:4b:55:0a:4d:ca:a8:1f:4b:02:7a:47:a7:
e1:d0:62:11:3c:53:63:28:44:0e:7d:62:e1:e0:2e:
d9:1d:3a:af:8a:23:3b:b7:95:4c:24:84:b8:18:30:
96:80:ca:e9:dc:61:b1:80:51:49:e3:6a:b4:ed:d8:
0b:4b:09:88:ad:f1:09:36:00:d7:95:a7:87:09:c5:
56:eb:98:73:3c:be:a7:9a:f6:06:ba:20:6c:27:45:
b5:57:03:ea:53:69:87:7f:0b:2a:38:bf:be:24:c1:
41:40:c9:fa:46:3e:6d:10:be:51:9f:d5:27:9a:ac:
66:89:7a:93:8c:31:47:f4:3a:b1:c3:96:41:f8:c4:
94:8b:3b:c5:f5:2d:0c:45:2b:ad:70:7f:15:7a:16:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:E1:C5:CF:C0:65:1F:CE:81:4B:6D:60:16:17:0B:D0:D5:9C:F2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf6:800::/48
Signature Algorithm: sha256WithRSAEncryption
8e:72:55:c8:47:9e:5b:50:9e:b3:5e:22:ef:62:90:2c:85:b2:
c7:be:5b:fb:f5:29:fb:aa:ce:72:b4:29:1d:f3:a2:a3:a3:fc:
55:f3:d2:ce:34:bf:d8:bd:ec:5d:5a:95:2d:14:f4:37:d2:e5:
3a:8f:f5:c3:ca:98:d3:46:37:81:f4:a9:db:c9:7e:88:02:ea:
d2:74:4c:69:2e:03:72:6f:bd:f8:9f:09:24:72:c2:08:06:72:
71:c1:56:15:a5:5d:56:8d:fa:62:7e:84:82:a6:dc:bc:70:4a:
8d:54:b0:c7:fa:11:8c:e7:ed:8b:a6:3c:10:79:46:cc:09:c8:
f7:18:6d:b3:69:a6:bb:63:6c:49:9c:bf:44:f3:57:cc:ac:d0:
74:1f:9a:f9:99:42:26:10:12:f0:f8:42:c7:26:ea:99:e0:4d:
f2:00:14:56:c0:f2:0c:06:89:53:6e:dc:c6:2f:a3:a1:84:c8:
2f:06:89:c9:ef:2a:98:03:68:14:d9:3e:10:68:05:4a:78:42:
93:c6:a8:7c:cf:6a:a6:08:20:49:c5:07:45:f7:10:86:d0:1e:
c9:30:59:0e:cb:22:59:eb:40:7e:e8:5e:fd:f9:35:1b:78:c9:
2d:43:f3:fa:f9:bb:27:43:11:b5:e9:66:1a:63:5a:49:62:4d:
2b:3a:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:46:55 2025 by rpki-client