Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa
File: 3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa (raw, json)
Hash identifier: Ro4n65zf81Wp1VDQiEfls8K8B0NN8OnpMzgbIU0+aJI=
Subject key identifier: F1:20:D1:41:2C:E8:A5:EE:B3:3E:02:48:A7:49:F1:54:2F:D2:EF:93
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 14A333C7C29D9512746226BA01F15BB3A4927377
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:4800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a3:33:c7:c2:9d:95:12:74:62:26:ba:01:f1:5b:b3:a4:92:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=cc8ab4ed8a8b1741b81ef941be891c1784f9999f2bdc2f0c310835b5806fef08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:e6:7c:e2:0e:22:cb:92:55:cc:5b:f4:80:
44:1b:7a:30:fc:0d:e6:c2:0e:eb:e1:f5:b6:6f:74:
9f:0d:42:8f:28:93:c3:f2:29:f1:f7:04:32:25:0f:
29:b2:54:62:6c:6b:7c:ab:3f:4b:77:4a:90:44:1a:
62:bf:59:f7:ea:55:bb:7f:2c:a2:9c:ed:01:2d:6a:
da:e5:2b:47:30:24:55:2c:80:d3:3f:f7:6b:c4:f2:
61:3b:78:54:dc:9c:44:f5:5e:53:bc:c2:00:13:31:
77:10:f7:74:78:e3:8a:ec:ed:e7:53:77:47:50:16:
e1:96:0d:fb:c2:07:65:14:d1:15:48:bc:1d:74:36:
3f:97:78:57:9d:91:6d:e6:e5:29:1a:9a:96:62:22:
80:5a:ea:6c:3e:e0:92:81:77:13:c5:53:d4:18:0a:
98:a1:86:6e:2b:d7:61:a4:81:48:db:0c:6b:16:a6:
49:30:5c:21:08:1a:5c:19:62:9c:7d:8a:7f:c4:71:
5f:aa:a6:06:a5:01:06:1a:da:e4:91:64:79:66:8c:
e6:d4:43:d3:9f:a1:c5:14:6d:cc:af:0a:e7:4e:66:
4d:0b:5f:c1:07:85:e1:7a:36:ee:b8:a8:3d:8d:78:
71:14:49:95:75:6a:4b:5d:85:ad:f7:ec:b2:53:6c:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:D1:41:2C:E8:A5:EE:B3:3E:02:48:A7:49:F1:54:2F:D2:EF:93
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e9cc6af-bc2c-4dca-8915-0cddf25cc8db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:4800::/40
Signature Algorithm: sha256WithRSAEncryption
4d:fe:1a:c2:9e:26:39:b7:e6:95:fd:d7:3e:e3:21:a2:f3:67:
47:76:ba:9a:2d:e6:c6:b3:24:ad:6c:49:dd:6a:a5:81:a9:8e:
ee:9c:d2:63:9c:08:b0:43:0d:24:f9:f7:ea:d0:d5:ad:22:f2:
8d:71:ea:6e:59:21:6f:bb:60:2a:40:86:91:fc:c4:11:f2:11:
58:cb:7b:0e:4b:e6:c9:f1:d0:b2:e2:f1:d9:b8:ec:2a:2e:58:
08:3e:36:71:dd:5c:8e:be:a6:19:18:c2:73:5e:f9:0d:d3:60:
20:99:eb:23:cd:03:1c:29:16:56:02:ad:12:d6:89:c4:d1:f0:
03:4c:03:53:24:1d:34:36:11:db:f2:51:83:33:ca:d2:e0:c8:
1a:be:c3:41:38:39:81:a2:cf:8f:24:1a:95:00:a7:15:33:50:
15:81:73:0d:80:9c:06:e6:b2:77:b1:97:0d:3d:91:63:d5:4a:
ee:95:7a:97:d8:ba:5c:94:06:88:ed:8e:92:c2:dc:eb:2a:2c:
01:16:95:98:2f:1f:7a:ce:21:90:09:29:a1:96:10:b1:3b:17:
9a:e9:41:08:c1:c7:3f:7f:f1:90:02:c8:0c:1e:88:ca:09:8f:
14:1e:59:80:2f:f6:9b:2a:7f:5d:b8:12:67:6d:ab:4a:63:4b:
4f:37:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:12:04 2025 by rpki-client