Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48c27610-66dd-4e99-839b-39b2b551cda7.roa
File: 48c27610-66dd-4e99-839b-39b2b551cda7.roa (raw, json)
Hash identifier: y7Xdmh/OMW5qTzLs81kYFLvwGNNfVasSt6KkhWFa3vI=
Subject key identifier: 7D:65:9D:7B:9C:36:E1:A5:EA:05:77:A1:D8:08:FE:C8:A2:E7:8F:D0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0DCE67C35272B3D2BD33E00765F96CE2C9486A65
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48c27610-66dd-4e99-839b-39b2b551cda7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:67:c3:52:72:b3:d2:bd:33:e0:07:65:f9:6c:e2:c9:48:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c30df50ac1d858a533510a0b2483c9bca57053ee20ec4d14677d2d52ec7fc0bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:e3:ee:d2:f6:08:a9:99:81:05:29:4e:d7:
e1:17:8d:1d:76:6e:59:b7:e7:8e:88:6a:a8:4f:40:
19:3d:8b:58:f1:55:2f:79:92:4d:da:48:1e:40:64:
23:aa:8f:e8:96:5f:22:3d:c8:22:82:81:bb:f1:ed:
f8:6e:08:09:62:37:78:87:25:68:ce:44:4c:92:c0:
2f:e3:af:ab:1b:21:a9:a8:b4:e7:07:cc:06:c2:d1:
e8:eb:d4:31:10:0d:78:71:08:cd:c4:02:cf:a2:b1:
80:67:b5:74:1d:90:c8:bb:cd:d8:c5:f4:af:ea:51:
d7:33:cf:cc:49:4e:c8:c2:34:88:c6:05:e2:9d:05:
46:55:3c:0e:f0:4c:54:a4:3f:34:a3:0f:5e:e9:ef:
4b:ab:d1:11:87:94:a5:3e:00:08:69:a0:23:a5:42:
c3:85:5a:a6:87:b3:56:36:22:e1:7d:fa:5c:a8:32:
34:c7:f1:fa:0d:2b:4c:8a:ec:32:a1:24:e3:1e:88:
a5:f0:8f:97:36:53:65:a7:9c:8d:99:1e:7e:c3:d9:
35:5e:91:94:e4:f2:f5:50:a5:38:3e:76:2b:a8:c5:
59:af:11:0d:6b:03:e9:91:8e:41:45:67:fb:da:80:
23:85:f6:89:da:24:16:23:8a:3e:32:43:6b:05:6c:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:9D:7B:9C:36:E1:A5:EA:05:77:A1:D8:08:FE:C8:A2:E7:8F:D0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48c27610-66dd-4e99-839b-39b2b551cda7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:4000::/40
Signature Algorithm: sha256WithRSAEncryption
68:80:ad:17:f6:4f:ff:f0:99:8a:b2:ff:08:f8:84:86:59:11:
c0:d3:32:4a:65:ed:cd:9f:10:ec:aa:18:cb:57:a5:da:4a:2e:
de:14:0b:f2:8a:34:e9:b0:25:12:ac:da:5f:ef:1f:e2:17:f2:
79:4f:28:72:81:8e:2e:c0:f3:46:f8:23:22:9c:ad:81:98:1a:
17:a4:a8:f4:59:4b:59:e0:2a:35:d5:14:94:be:49:75:44:5e:
08:59:b0:c0:d1:48:72:bc:5a:a9:bf:80:fc:02:73:5b:8d:98:
e9:54:96:1d:7b:46:81:3e:dd:65:49:76:fe:50:d4:6a:92:c5:
93:e1:85:3d:77:67:a0:48:b7:70:94:bf:08:c0:9b:c9:d2:b1:
2e:73:89:1c:1b:c6:1a:c0:60:eb:8c:b3:d4:2b:87:17:d8:b6:
d8:2a:8a:a3:d9:05:6a:88:92:f6:6f:68:9f:34:05:24:91:cf:
79:04:25:7c:af:08:e2:a4:27:06:f9:49:e4:74:b5:d3:f4:0e:
7d:c7:3e:67:df:7b:1d:30:66:b7:92:c6:ef:35:72:93:0e:91:
5e:cb:58:2c:40:59:42:e1:fb:69:2e:61:06:fa:94:a4:8d:c3:
bf:e2:26:98:86:2c:62:a5:86:b0:a8:40:1a:06:0a:c2:fe:08:
23:54:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:11 2025 by rpki-client