Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c876588-8996-4239-b85a-95e0cd1f9f7d.roa
File: 2c876588-8996-4239-b85a-95e0cd1f9f7d.roa (raw, json)
Hash identifier: wpBHd5t1EqB7QRlEFPegHR8eM1W4fr60M0wpFGiWgOg=
Subject key identifier: 0F:46:1E:32:55:CA:A8:E0:76:0A:99:CE:21:1A:D4:DF:6D:7D:0A:39
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 47E1D8F0786ACA5D6A13D0F58308D5B976279456
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c876588-8996-4239-b85a-95e0cd1f9f7d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da1b:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e1:d8:f0:78:6a:ca:5d:6a:13:d0:f5:83:08:d5:b9:76:27:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=edd0046d5291768c0b6ff5cff6a904bbcf7bce86a6c896e09644a5fa399ec66b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:f3:94:13:c3:fc:51:68:fb:8e:6c:83:c6:
2b:2c:52:7d:3a:7d:b2:37:3d:50:10:c0:53:13:59:
00:43:1d:28:71:d2:87:62:2f:38:5a:2d:9e:22:e7:
68:8c:17:97:82:5c:db:93:41:28:08:fd:cb:35:ff:
77:82:7e:1b:ad:8c:fd:b2:19:dd:72:dd:96:e4:bc:
ff:f0:02:8b:f6:45:c3:b7:9b:49:80:03:09:65:bd:
46:8d:e9:76:2e:0f:2a:7b:26:88:fe:7e:3b:82:af:
b2:a5:2a:b7:e7:19:55:b9:1e:1e:62:45:d7:5a:bd:
a6:06:09:9e:9e:6e:35:24:d8:eb:f8:5d:58:ea:eb:
a8:d7:24:8e:86:dc:2d:8d:d1:c1:3e:2a:e2:90:40:
fa:a8:6c:c5:cd:b8:0b:ae:56:0c:02:22:e9:dd:7b:
c9:af:a4:21:b8:60:69:68:dc:0d:e8:8c:0a:f7:63:
ff:96:72:54:c6:cb:c1:5e:d5:20:ee:21:6e:25:c8:
57:76:70:a0:34:22:1e:87:53:18:81:b5:45:f9:f9:
9d:14:2a:2b:fe:0b:8a:5d:3d:21:ec:c7:fa:fd:b4:
c1:93:0d:c8:ad:78:51:bf:80:39:f3:3a:18:38:9e:
05:20:17:3d:14:fe:2a:88:4d:77:cb:c2:cd:a3:67:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:1E:32:55:CA:A8:E0:76:0A:99:CE:21:1A:D4:DF:6D:7D:0A:39
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c876588-8996-4239-b85a-95e0cd1f9f7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da1b:800::/38
Signature Algorithm: sha256WithRSAEncryption
46:33:e8:be:0c:4e:0c:2a:c0:99:4b:15:f5:79:18:54:d9:04:
82:8b:a6:1c:8b:f0:8e:ca:8f:16:0a:79:96:f9:b7:3c:22:90:
1d:b1:6b:18:0c:7a:cb:db:d2:71:19:1b:74:6e:78:53:f3:9e:
cd:8c:9c:69:5f:bd:6b:be:b5:02:6e:b2:85:1e:cb:1e:d9:b7:
43:da:05:ed:fa:2a:52:b8:54:3d:9c:42:b7:7a:bf:20:13:68:
9b:9d:b6:76:6b:00:b4:ac:90:f1:43:fe:8e:fb:cc:b3:2e:00:
b9:0f:aa:66:82:95:81:03:7a:3a:2b:44:bd:3e:e9:fa:28:00:
55:a0:5a:a8:9e:b8:4c:ec:20:c7:25:8c:e4:dc:4e:35:fb:34:
15:e5:94:39:97:98:25:13:0c:33:81:35:b7:fd:e2:95:57:00:
67:64:a1:bf:fd:2e:14:5d:7b:63:af:c4:9a:4d:80:a6:48:0c:
85:0b:5b:82:ea:12:d0:ea:c8:aa:ff:d2:56:fe:c2:3c:fe:ad:
df:06:e1:aa:3d:0e:12:48:09:40:c5:fa:40:f9:15:a1:e5:a3:
42:ca:38:b5:55:3a:e1:e0:18:01:8d:73:50:b4:b0:21:46:9f:
c9:48:b1:f6:87:f4:62:5f:e4:eb:44:53:fc:24:4d:89:bb:b1:
de:0c:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:26 2025 by rpki-client