Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa
File: 3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa (raw, json)
Hash identifier: 5AUtm/LsxpP9azzpSE89T43QZabGpIaBn4h60PnhQl8=
Subject key identifier: 3D:98:74:53:09:52:B4:D3:DD:44:27:59:C2:45:AC:70:3B:B8:33:ED
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 18F1934492051EE72B03FCBDA983111672232DDF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:c880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f1:93:44:92:05:1e:e7:2b:03:fc:bd:a9:83:11:16:72:23:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a48d9518b29946934c8f784a405a874910cac974006023cb04fd3bb9b4b0bcd5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:da:6b:b4:cf:fa:2c:68:b7:ba:9e:e3:02:
24:fd:f7:4b:9d:c5:c7:47:ad:a2:0b:5b:54:d4:68:
dd:81:cb:a1:52:39:95:cb:b7:f1:30:b3:1f:78:63:
00:e0:41:ac:a4:5d:c1:22:c5:eb:80:f6:4b:97:62:
b1:a1:6c:f4:68:e2:5e:71:db:a3:cb:ba:d7:b5:e8:
b4:a2:4b:a1:ec:22:55:ba:7e:e8:01:03:db:77:8a:
09:7a:e2:93:fb:e3:67:e2:e0:50:fc:33:a4:ee:22:
01:26:65:f8:a9:10:3e:64:43:48:0d:0f:da:7e:c1:
12:6a:0f:4e:62:73:be:58:6e:b6:89:b5:0f:b4:e3:
1c:71:e6:bd:2b:91:fa:bb:c0:16:4c:f4:0c:cc:a7:
e8:ed:41:94:17:94:e1:61:a3:60:ac:29:59:d7:45:
b5:e3:f5:fe:38:19:15:ff:13:5d:89:11:ef:e7:f5:
1a:74:fa:cd:23:76:fe:c2:a1:81:e1:75:df:b8:80:
9c:96:e3:11:ec:76:93:08:34:a7:94:fc:60:e5:ae:
50:0b:a6:16:de:bd:49:a0:cd:cb:24:d8:5b:b3:1f:
25:c2:db:0b:68:27:fa:c6:2e:15:0e:1e:c6:47:45:
a0:7a:68:06:76:5f:90:2d:59:16:1b:bc:2e:b9:c8:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:74:53:09:52:B4:D3:DD:44:27:59:C2:45:AC:70:3B:B8:33:ED
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6f01f1-bc5b-473d-a12f-7f0ffed5f4fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:c880::/48
Signature Algorithm: sha256WithRSAEncryption
3f:47:c6:9e:d4:bc:a1:6b:96:d6:be:a7:61:85:a8:db:6a:d0:
cc:8f:a4:23:ab:5d:bf:d7:31:a5:22:7f:0d:22:3f:6d:ff:66:
ef:b8:8d:fa:cc:62:60:bb:97:1e:7a:e2:e7:e2:e8:83:ad:4b:
0c:3c:8a:03:92:82:18:cb:f2:78:71:a7:0c:da:51:e3:99:d9:
ed:0e:c4:61:85:50:3b:bb:28:4c:e3:40:0f:15:63:7a:b1:30:
80:04:7b:0c:9f:3d:00:44:93:6e:56:b4:b1:d2:21:86:e8:87:
fe:f4:0a:71:86:ee:36:92:2e:54:5f:5c:1c:94:d8:e3:b3:da:
aa:c5:6f:42:c0:dc:c7:b2:30:fe:38:88:1f:67:83:a4:eb:7f:
28:c1:ae:d7:8f:47:22:d3:05:dc:31:42:f3:d9:32:f0:e2:ef:
24:c5:55:b6:c1:ea:ae:17:9e:f6:b9:a3:26:ab:b5:e6:7b:9c:
59:32:b3:4d:a5:d7:ce:04:79:5b:b2:45:b8:6a:25:d0:55:ae:
d4:94:19:c4:27:64:6d:ac:e4:52:46:18:49:5f:97:a2:bb:25:
a9:42:eb:c5:1e:29:1f:4d:8e:1f:b4:92:ce:e0:e2:53:56:c1:
92:7e:ca:32:62:90:aa:68:7f:9f:e1:3d:6a:be:d9:54:12:f5:
2c:ed:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:54:12 2025 by rpki-client