Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa
File: 2f724fc4-af92-4f6e-9781-835f37854eec.roa (raw, json)
Hash identifier: vyDNXa/RZWLiVqm0AVznJ2J7aMKBTKrJ/Ld7vsTyvoQ=
Subject key identifier: C2:36:CC:FA:BB:8B:C5:21:38:AF:63:AD:59:C0:F3:E6:3B:30:6C:13
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2BB61C1B7715650711DD9622F7B13B863E6BDC18
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da1f:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b6:1c:1b:77:15:65:07:11:dd:96:22:f7:b1:3b:86:3e:6b:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ac5162fb2143bd23be30eb43284df6c1c1afd672a4888b8662f691fdfdf8b8b8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:0c:eb:c8:f0:86:32:48:27:02:f2:cc:d7:
a7:0c:2d:95:88:b3:26:58:22:9c:99:fe:35:b6:ff:
9b:c0:10:5e:c3:28:50:0a:5e:68:09:e7:35:08:60:
ac:c4:45:b5:7c:29:96:d4:0f:2b:91:62:6e:e6:ad:
f8:1c:ac:29:03:6a:76:6b:ce:7f:44:89:dc:40:90:
1b:5f:42:3b:35:c7:f5:73:e9:58:7b:54:de:15:c4:
55:45:05:93:99:57:9e:89:c0:82:4a:84:25:5f:f4:
fe:84:08:09:0d:07:84:42:03:ab:9e:05:99:b8:39:
4c:5a:bf:c1:25:3b:06:df:12:7e:78:d0:50:31:9c:
44:c3:62:a5:99:31:95:5a:8e:94:b0:27:1c:22:5a:
f8:08:bc:a3:bf:b4:9a:61:71:02:1b:d4:89:8a:06:
b6:b9:45:26:9a:cc:4d:86:19:11:84:3e:c4:2d:ff:
a1:c3:e3:5a:8b:62:2c:26:68:a2:11:93:38:82:6c:
7f:09:f4:43:b2:22:27:66:70:16:47:13:67:fb:2e:
fe:99:dd:91:5a:90:d5:5f:cb:66:4d:59:d8:81:fe:
60:88:ff:33:4d:88:2c:36:4b:6f:8e:41:12:2c:20:
a9:94:db:73:14:4b:af:41:bf:5c:09:b2:d3:35:b1:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:CC:FA:BB:8B:C5:21:38:AF:63:AD:59:C0:F3:E6:3B:30:6C:13
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da1f:c00::/38
Signature Algorithm: sha256WithRSAEncryption
37:c8:e1:58:bb:5c:8a:d4:de:36:26:b3:7e:53:10:e5:11:25:
94:8c:79:1b:65:4b:9e:04:e0:45:46:8f:f6:d1:c9:6c:2d:71:
22:44:d6:7d:d8:f9:f0:74:cb:00:00:78:7c:89:e5:18:db:5e:
ce:92:3f:2f:45:db:49:48:6f:a1:37:b4:f3:d3:64:d3:d3:67:
32:23:ec:b6:bc:7b:35:65:6f:30:f1:1a:70:2c:7b:57:5a:e0:
dd:a0:6b:54:f7:cd:b6:1e:84:0a:17:e7:d5:d3:6c:38:2d:0e:
99:3f:57:14:9d:c7:9e:de:45:bb:d0:04:3c:da:ed:fd:d9:2d:
18:59:d3:dc:cb:bd:13:95:8d:63:ae:00:df:df:83:95:11:44:
57:f0:c3:20:47:2d:09:97:05:dc:c9:7b:97:95:d8:8b:d2:9b:
de:ac:7c:c5:d1:d3:f4:04:f6:e4:91:91:df:f2:b7:61:22:7d:
12:9d:da:00:fc:80:44:14:51:1a:b8:1a:13:f5:b3:1a:24:3a:
cf:40:14:9a:4a:a4:bb:58:70:36:ad:9d:d5:df:f7:f8:e1:12:
9b:10:2d:9e:cc:15:5a:e6:65:ef:06:3d:0f:8a:50:de:12:48:
ac:30:bc:47:a0:93:27:b1:b9:3a:36:94:d5:f9:44:3e:9d:5b:
7c:91:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:31 2025 by rpki-client