Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa
File: 4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa (raw, json)
Hash identifier: 1d77xUlvbcsnnskkt3fcsahNBom5QQJvCuqI5EBvfRQ=
Subject key identifier: 26:AF:55:AC:9E:E4:67:A4:02:32:2B:8F:C1:4B:36:53:94:A8:45:AA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 111ED6FFDFFB8F546642DB0F6706E72D60B8C471
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:2840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1e:d6:ff:df:fb:8f:54:66:42:db:0f:67:06:e7:2d:60:b8:c4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f215c37fb16fe2d9b10e7f1da932f24c87f2ca68ab8d7aee941f67023a5f5709, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:65:ba:da:f2:ee:a4:be:cb:15:20:29:1f:
41:c0:76:28:18:43:b9:8e:5e:a6:5e:e4:92:59:d7:
67:04:11:c3:da:47:fa:8d:76:b3:b6:66:99:ed:db:
a3:4e:fe:76:e9:ae:48:cd:18:c8:06:e4:12:36:01:
ae:22:09:74:96:02:e1:7d:93:45:c7:40:ff:58:d0:
f1:db:2a:c2:3b:d0:f8:3d:2c:3e:40:3f:a5:eb:94:
c0:a5:26:ee:01:57:1d:80:15:99:d9:e4:36:36:fb:
e7:57:8a:f5:a9:6b:33:57:9e:0b:da:49:a5:2c:e6:
f2:c0:8d:9e:bb:9a:c5:8b:cc:3d:54:08:9e:10:cb:
4f:79:b3:c8:13:1c:73:18:c5:3f:2a:e3:d6:28:55:
9f:93:40:36:b9:71:1a:25:c8:08:0b:15:58:f1:23:
92:5d:ec:43:04:2e:16:55:ec:8f:88:cc:12:59:41:
34:57:73:6c:12:65:fa:fd:ad:32:fe:80:0c:7d:10:
fc:2e:ac:e6:2d:f4:01:42:3f:5e:78:26:54:e9:02:
f6:9a:29:68:19:41:85:66:cb:ff:cf:ef:b0:c4:bb:
e9:de:a7:23:30:53:a0:0b:7f:06:6c:06:48:2e:26:
73:d0:0e:53:a4:c2:69:72:dc:f5:b1:e0:cc:1b:94:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:55:AC:9E:E4:67:A4:02:32:2B:8F:C1:4B:36:53:94:A8:45:AA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:2840::/48
Signature Algorithm: sha256WithRSAEncryption
6a:6b:56:a7:ab:c0:5b:45:ee:35:f3:49:e4:ae:72:67:a3:d3:
10:e2:ac:64:31:c4:93:d4:26:f0:84:24:d7:e3:8c:a8:37:87:
94:33:14:a3:5e:b1:92:65:18:de:e1:ef:5c:a1:cf:ef:4d:6a:
ed:f4:ea:4e:49:45:b5:56:6e:27:bf:d0:3e:3a:e2:0d:e2:50:
a3:2f:f9:f6:b7:9d:2b:1f:ee:25:e2:16:1f:e2:8f:80:b3:04:
6e:66:04:1f:1b:c0:f0:38:6b:23:99:91:de:49:63:1b:49:a3:
75:77:0d:58:51:cb:5c:08:bc:62:78:82:1e:3e:0d:a8:0e:3a:
36:aa:0a:56:5b:5e:48:f3:51:a5:44:af:bd:b6:fc:0b:36:ce:
dd:69:23:75:1c:71:c7:c9:2c:60:a8:18:fd:f2:6a:79:c9:cc:
99:10:53:3f:c5:a1:a8:33:1d:0f:11:08:57:4c:fd:e9:f1:cd:
02:8d:d6:8a:2c:70:92:14:63:ea:d2:c7:b2:e8:1b:4b:f9:a8:
3b:db:c4:59:f4:a4:ed:f2:9b:e3:81:4c:ae:ac:6e:31:52:99:
ce:39:d5:92:c4:c1:48:7c:5b:13:35:d1:a0:a1:c4:65:99:32:
30:87:11:c4:57:a3:e9:9a:e2:a4:fb:e8:eb:8a:e2:42:02:0c:
6d:8d:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:47 2025 by rpki-client