Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa
File: 26a214fb-fd3b-42e4-bc36-09523d6390f5.roa (raw, json)
Hash identifier: IZdbx/bckN/qpcGaUJ++XUr5p0k6iH5yro72j1a9I7Y=
Subject key identifier: F6:4F:19:54:AC:C1:C2:3C:44:D0:B7:E3:AD:DB:B0:69:A9:2F:AA:26
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 680A50D9DB7953F923D22C0421E1139BE4757527
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:c8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0a:50:d9:db:79:53:f9:23:d2:2c:04:21:e1:13:9b:e4:75:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d70d9b2c0212fad6edac71f82cd4f9c199bc64b207957d1eea81f8bea6260a17, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:b4:9e:75:49:de:88:85:5a:ae:aa:32:26:
f8:ea:25:52:1c:90:17:25:45:b3:22:2b:be:bc:d9:
41:f1:39:dc:54:0c:6c:1e:d5:ad:54:62:5d:08:9f:
59:1c:ba:19:65:6a:36:15:45:fe:a5:c0:72:71:39:
12:be:b6:c0:d1:d5:4e:79:43:81:11:3c:27:6e:bf:
d1:c6:4e:94:4f:5e:e8:ee:9c:9e:ee:7d:b3:cd:a9:
65:41:bd:39:92:b2:a4:2c:72:17:25:b7:d7:93:69:
85:af:d5:11:d0:fe:59:7b:03:db:c7:09:c7:8c:85:
4b:6f:8a:a4:bf:f9:07:19:43:42:72:f9:38:df:f3:
e9:ef:97:8c:ef:83:d1:41:08:55:b4:d1:a6:ab:d1:
92:3f:60:08:56:5f:ec:1d:55:d4:b3:e5:dc:37:91:
61:77:08:b8:aa:77:7f:31:63:d9:88:77:c3:df:4b:
a5:57:e3:43:76:c3:c9:a2:c8:04:53:5f:78:1d:a0:
26:7a:70:d9:02:32:36:c5:c6:eb:1e:51:0d:34:ad:
e3:5b:aa:38:83:78:db:23:63:b2:47:6a:d1:d2:aa:
51:df:d5:25:24:b8:fa:37:d9:31:e0:37:56:d4:39:
57:db:4a:5f:c9:80:b3:a4:34:5e:eb:87:21:ea:0e:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:19:54:AC:C1:C2:3C:44:D0:B7:E3:AD:DB:B0:69:A9:2F:AA:26
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:c8c0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e5:22:f3:a3:e0:aa:59:8e:d8:f4:cc:3a:0b:6e:d0:a7:96:
e4:80:08:90:8f:d9:8c:80:e9:7c:13:66:0e:ec:9c:22:36:3b:
08:66:af:30:21:84:6b:0e:99:76:b3:9a:d5:d4:c3:34:00:dd:
a6:cf:44:7f:44:05:ca:95:04:6e:e5:4d:a3:0b:75:ea:ac:30:
2b:96:99:1e:e4:a7:9c:7c:a3:aa:46:46:a0:fe:1b:c4:9b:cd:
0b:30:e0:b4:0e:88:e4:03:4f:70:91:28:cb:13:88:4f:e1:c7:
4f:d8:32:82:df:b9:6f:21:aa:c0:9c:b1:1b:05:d0:90:87:a8:
8b:5c:59:d5:38:52:5b:0c:33:aa:f9:db:5f:ce:42:dc:30:39:
72:96:a2:32:03:f1:eb:3e:85:3b:c6:ee:ec:c5:9b:4e:27:74:
bd:0b:fe:c4:9d:de:e0:62:83:f9:e3:02:6c:02:14:92:97:41:
00:6b:dd:6f:64:1d:e9:58:cd:59:28:1c:3b:27:b3:75:94:59:
8b:aa:01:32:f1:65:f0:3b:98:73:49:9a:ad:30:df:a7:ec:9b:
cb:b7:1d:c4:dd:0a:36:5c:89:bc:d9:d8:c6:40:d9:f2:02:73:
59:b0:24:77:ad:3c:24:3e:10:5d:65:cd:13:d8:7e:f8:21:84:
90:be:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:30 2025 by rpki-client