Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa
File: 2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa (raw, json)
Hash identifier: WhFJXvjDtjZi1l2z5jwkjo8R9P+k2rSfiAtKLClMRgg=
Subject key identifier: 21:8D:96:11:D0:5B:49:0B:14:F8:3D:E9:DD:C3:5C:5D:04:27:BB:02
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 417884BD21E687851570759D7F02B08F2084A6DB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:6080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:78:84:bd:21:e6:87:85:15:70:75:9d:7f:02:b0:8f:20:84:a6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0b68430f02d3b707ec497e445bf68759dc59042b00231a8ed2686fc6a298fe38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:82:7a:c6:ec:85:71:e2:30:aa:83:55:12:
3b:98:38:f5:4f:5a:45:24:4c:5f:35:d7:3d:47:94:
ee:49:1f:50:22:a4:b9:f8:ba:2d:4d:7f:71:df:9d:
0b:de:e1:76:9e:7b:1e:90:e9:e9:80:75:ed:21:44:
89:19:f3:6f:f4:af:47:d1:5b:d4:da:79:87:04:f6:
90:24:52:25:36:6d:73:16:85:2a:70:a4:e0:56:2c:
7d:88:c6:5e:19:11:22:39:b9:60:1a:a1:c4:b4:45:
84:37:9c:57:23:12:fe:49:c9:72:49:09:be:3a:6b:
22:2d:29:e5:21:01:b8:6b:3b:60:b7:13:4c:dd:c4:
65:ca:6d:d1:15:78:d7:26:cb:d9:77:05:c2:de:6f:
db:07:e2:8f:86:32:df:09:53:ae:4a:2f:b6:33:1b:
b5:be:2d:70:c8:04:20:64:af:d3:60:33:97:4f:cc:
67:80:37:f4:c3:2e:87:64:5e:1a:cd:59:72:53:2b:
20:34:d8:27:79:e4:1c:4f:fc:ff:a2:13:83:a8:cd:
7a:36:1c:8c:00:00:bf:5c:e0:d7:5b:e7:4e:f2:3f:
84:18:5e:61:82:2c:a6:03:df:92:85:05:e8:41:82:
2a:c3:6b:33:b8:4c:d7:14:52:de:c9:55:33:06:10:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:96:11:D0:5B:49:0B:14:F8:3D:E9:DD:C3:5C:5D:04:27:BB:02
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:6080::/46
Signature Algorithm: sha256WithRSAEncryption
ad:8a:cc:c8:9b:50:a5:25:fd:5c:39:03:81:47:0f:6c:00:cd:
a8:64:12:99:ca:29:83:9e:05:30:80:94:6e:3c:74:c1:26:cb:
f2:e9:29:10:cf:a5:6b:60:d8:89:8d:c2:88:28:85:22:99:59:
9c:b9:d7:b1:16:89:d0:e8:88:79:9c:92:7c:b3:95:38:71:b5:
eb:b1:ff:b4:d6:70:e6:87:8f:99:e4:6f:71:d2:89:bf:8a:0b:
66:e1:f2:17:33:3f:3a:59:c5:ed:56:b9:15:c9:66:61:85:a3:
d5:a3:35:74:bb:fe:e8:31:ab:ff:3c:27:ee:01:1b:54:c5:12:
05:5d:25:05:cf:1d:a7:98:44:b6:fa:98:42:96:5d:4f:e7:73:
60:d8:a0:a0:96:a8:e1:f0:a2:3f:1d:6d:0d:e0:bd:7d:b4:2c:
81:b7:f7:e7:d1:f4:7c:55:43:3c:a4:45:a9:7a:f5:4e:d2:d2:
42:f7:36:ea:92:34:d8:64:e3:02:ef:99:9b:1d:33:67:23:97:
7c:13:25:b4:6e:d8:46:d4:d5:97:56:47:a0:52:4b:59:a9:d9:
74:a3:bc:dd:9c:8f:d8:e9:fc:6b:ab:ac:de:e9:d2:64:90:c4:
50:4e:bf:aa:26:51:4d:7f:0d:81:a7:aa:c2:d3:94:1f:42:13:
f2:95:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:53 2025 by rpki-client