Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa
File: 326b5e17-ace3-4579-8ae9-5219c81c9034.roa (raw, json)
Hash identifier: rBKfftmUKXblERir+Es5XWMJqcL0iJksHw4R44szdZs=
Subject key identifier: 3D:0F:24:E4:C9:0D:64:C2:52:89:F4:2F:A8:AC:05:45:C8:EB:CB:2F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 341FE8AF774014EB0CD494FD58036A99FE161F3F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2e::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1f:e8:af:77:40:14:eb:0c:d4:94:fd:58:03:6a:99:fe:16:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=3c36534ff379664dda3f5965bb5746efdcd7b2aa495220f8ee8e37c72139f2a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:ab:59:8a:4c:0a:d2:bb:4d:07:cc:24:b0:
13:d2:67:c4:24:f7:72:76:3e:6a:24:d9:a8:26:a9:
b1:68:1c:58:ff:22:a1:0b:59:45:d4:7b:6e:b3:0b:
5f:1f:df:b8:4f:2b:4c:94:fc:25:cd:74:01:1d:b6:
7e:f6:3b:99:9c:b2:79:b0:15:1d:49:e8:51:cc:e5:
2e:0e:c0:04:1e:7b:3c:15:83:24:77:f2:49:70:2b:
85:00:d6:c7:ad:9f:3d:4d:7f:1c:ca:07:25:40:c6:
29:c8:79:14:b5:84:18:bd:af:b6:a6:4f:6e:18:8d:
41:40:a9:96:cf:cb:f2:c7:51:34:19:91:57:bd:31:
96:2d:61:6b:92:50:77:fe:ba:cd:7e:57:5d:4b:4f:
40:99:98:fe:74:13:15:02:c7:c6:05:de:47:2f:0d:
f6:7e:7b:62:a1:27:3b:e2:eb:46:4d:21:6c:f8:65:
37:f4:60:e5:aa:1d:71:a8:9f:43:b6:02:06:3e:73:
e0:a9:93:de:31:a1:64:45:b2:ae:07:45:b3:db:4d:
60:fa:a9:1f:6e:f6:7e:27:74:52:32:10:86:23:96:
fe:5d:e7:bd:f8:9d:be:a4:ce:f5:97:32:66:90:dd:
e8:e2:ec:c6:af:e0:72:b3:e3:87:44:77:6e:d4:71:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:24:E4:C9:0D:64:C2:52:89:F4:2F:A8:AC:05:45:C8:EB:CB:2F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2e::/36
Signature Algorithm: sha256WithRSAEncryption
1d:53:df:39:7a:8d:74:89:d2:9a:74:73:c4:e0:db:1d:cf:b3:
b4:5b:20:18:47:93:0a:23:9f:a4:a7:d3:31:0a:ce:88:77:6d:
f9:e8:73:d5:07:fb:d2:19:1c:9b:cf:f5:e4:f2:a4:7d:dd:6d:
bd:95:1d:c1:ed:e7:72:68:51:a6:0a:ca:fd:94:b0:6a:83:37:
f0:81:ec:2f:cc:55:09:04:02:79:1f:92:27:bf:d7:6b:a1:43:
12:c3:23:1e:cb:07:4a:a0:0d:4c:75:41:43:fd:03:fb:20:96:
64:d8:7a:a5:e9:67:02:f1:42:9e:f6:39:42:aa:41:2a:54:b3:
76:67:0d:e9:fb:87:6d:0b:ba:e8:ae:08:79:55:d7:04:ef:60:
1d:66:5d:66:4d:cd:d9:96:95:c3:b2:76:45:77:72:8d:53:ba:
3c:ae:88:8b:45:33:ba:61:af:b0:32:b5:f2:b9:5e:f7:0a:98:
32:0e:4c:0d:94:40:b2:a9:dc:53:5a:7f:40:99:80:5f:56:d4:
9b:7a:83:05:78:c5:3f:4e:80:d7:65:e3:f8:2f:43:8a:f7:1b:
1a:9a:80:31:9f:80:e9:76:d8:02:03:34:4d:1b:e5:85:45:f9:
2e:54:45:83:5d:ad:c5:f4:23:2a:ba:55:b0:94:78:e6:67:65:
50:93:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:26 2025 by rpki-client