Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
File: 485da602-98f5-4e2b-890f-c254a3071aeb.roa (raw, json)
Hash identifier: tGUUdpte/+JXPz5BfaKCAFZxsAk/rUbqeB7hPqWWpwg=
Subject key identifier: 70:8D:97:98:41:2B:29:29:84:27:1F:7B:94:5E:A6:2E:B5:34:EC:E0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2752914F39D25069E7447DF85DDC86B8D606D5D9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2a::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:52:91:4f:39:d2:50:69:e7:44:7d:f8:5d:dc:86:b8:d6:06:d5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=ba61b3d984fd4e2ff4aecdc0e6f039654ffc600ee24a3232a03bc6e69e8549a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:95:ea:f5:3b:ad:8a:63:48:8e:ba:31:c9:2c:
97:c9:f3:c1:6e:22:a0:e2:22:72:42:56:b0:75:e0:
70:c0:14:1b:f7:b7:7d:e3:f5:11:06:65:66:00:a0:
78:01:ac:51:fc:f5:46:0b:df:73:2d:01:88:4d:bb:
10:25:fd:14:3f:70:60:f8:22:b2:a7:23:9d:d7:e5:
c5:93:0e:15:c5:f2:64:8c:4a:28:2a:a5:2e:65:79:
b0:e1:ea:81:e7:7e:33:85:a0:81:fd:15:7e:aa:50:
b0:71:e3:a8:6c:c8:74:90:82:c5:b2:9c:1c:2c:55:
4c:6e:b2:2e:99:9c:23:14:62:3f:f9:16:67:2c:23:
18:36:1e:59:29:a5:b8:69:0a:3e:d7:22:39:ca:aa:
c1:4f:42:da:9f:7c:fa:6a:83:6f:e6:35:0c:3d:9b:
a1:a6:3a:a1:03:a6:65:55:87:da:05:39:d4:3b:f9:
57:ec:83:4a:40:59:46:73:17:97:28:d4:92:52:f5:
cb:ab:74:7b:d9:a8:ff:96:8e:1a:cd:c7:eb:ae:11:
22:27:21:2a:64:e2:da:b0:6c:2f:64:ee:30:4b:ea:
4d:25:7c:bd:ac:c9:16:b7:31:ba:fc:13:b2:07:71:
08:d1:af:d8:2e:fd:ce:89:fd:0c:55:8f:09:aa:c6:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:97:98:41:2B:29:29:84:27:1F:7B:94:5E:A6:2E:B5:34:EC:E0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2a::/36
Signature Algorithm: sha256WithRSAEncryption
66:7b:e1:89:cc:a3:a1:d8:0c:0a:a5:d6:a3:33:10:c5:d7:30:
80:30:55:38:ff:f1:ac:a2:46:f2:72:bb:8b:17:a3:81:59:52:
64:e4:92:33:a9:e6:d6:80:b1:71:23:9b:1b:75:ce:02:7a:6a:
06:13:26:cb:c7:d7:5e:0f:da:77:3e:70:14:83:d3:73:97:b6:
ee:81:8d:dc:8f:99:bb:02:b4:59:bd:f2:d1:30:34:90:48:d8:
a9:08:d1:49:80:b8:3f:c1:ad:2f:30:6f:28:14:ef:46:1f:df:
b8:43:50:ae:47:3e:bb:05:b1:4d:d7:26:42:f5:3c:43:ca:24:
7b:dd:af:30:e6:a6:a9:d7:72:4b:d5:42:14:90:6d:64:67:c4:
a4:50:06:40:39:7e:85:6f:77:95:e6:fa:77:4f:66:47:f8:c7:
03:5f:24:e1:d4:18:ce:3e:d4:ac:91:7c:2a:c3:1e:b9:84:79:
67:1f:9d:de:f3:29:44:4f:40:8c:ba:1b:4f:ff:c0:c7:34:98:
c9:23:53:0a:3d:0a:b8:ac:44:df:bb:e7:a5:3d:c2:e7:49:54:
18:0a:60:0b:c0:0b:2e:6c:bc:ca:86:51:fb:93:6f:d3:7a:2f:
85:eb:4f:e4:65:11:9e:89:19:17:a4:23:f5:ea:37:f9:8f:a5:
9d:7d:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:49 2025 by rpki-client