Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/512ea34d-2050-4f1a-b95f-02364c4aaf03.roa
File: 512ea34d-2050-4f1a-b95f-02364c4aaf03.roa (raw, json)
Hash identifier: Oh9l3u9ci7FQlIFu+XSwgG4Sgol5wBxpeXetkxpFTQQ=
Subject key identifier: AA:9E:69:78:C3:85:0B:07:3E:15:18:5F:22:CE:92:94:09:1C:3F:47
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 35957D47B517188B53D1E143FE933305B8E6FC81
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/512ea34d-2050-4f1a-b95f-02364c4aaf03.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:90c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:95:7d:47:b5:17:18:8b:53:d1:e1:43:fe:93:33:05:b8:e6:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7d305c6acf93b365951389a4da32ab62c5c747aa8ddd755d0704cb79c2b93cd4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:9d:65:b9:15:ff:23:e2:2e:05:07:71:3c:
22:27:11:56:5c:b5:e3:19:40:57:7d:2d:e3:c0:71:
e2:03:bb:82:b8:ed:29:4c:42:02:be:e4:a5:00:12:
e5:0f:31:39:26:e0:09:28:08:47:eb:25:70:e0:ba:
40:0b:26:9f:cc:66:87:42:7f:60:0f:b5:39:35:84:
1b:74:93:e0:5f:42:de:60:71:e4:a5:8b:bd:33:58:
65:28:53:7d:1f:d0:4a:09:52:99:cc:c9:27:b0:d0:
26:88:5c:94:9a:39:0f:15:b3:62:f1:4c:51:01:8b:
1c:fe:d3:72:9b:a3:85:65:17:b9:ae:69:06:af:f8:
30:37:92:0b:7f:8a:ce:86:ae:ed:51:97:bb:33:a0:
37:36:3b:6e:62:f2:da:72:0d:87:3b:d1:fc:1b:9d:
1d:5a:d7:62:15:53:16:cb:0d:a7:76:53:c2:85:32:
57:22:c5:b2:48:fb:70:03:b3:0d:be:b2:c6:8f:f9:
f5:3d:1b:90:86:08:73:16:4b:83:a9:69:db:7d:a0:
a1:d1:d8:3b:4d:2b:b5:ae:d2:c0:0f:7e:cc:af:3a:
34:23:43:a5:96:ee:21:00:70:3e:34:e3:72:ed:84:
ea:ce:68:41:87:45:ae:a6:93:67:43:5d:5d:4a:ff:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:69:78:C3:85:0B:07:3E:15:18:5F:22:CE:92:94:09:1C:3F:47
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/512ea34d-2050-4f1a-b95f-02364c4aaf03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
5e:a7:41:1b:c9:ae:f9:50:6b:b4:dd:b6:ef:9e:da:8e:2c:19:
50:fb:55:a8:ee:44:ae:c8:f8:b6:49:ac:9c:15:c3:a1:46:11:
ab:bc:75:1d:fa:30:8b:f4:8d:33:12:f9:94:a2:ab:c9:d6:69:
4c:f0:bc:0d:fc:1f:eb:3b:2d:b4:ba:c7:ac:90:48:9e:44:c6:
52:cf:42:f0:61:2f:b1:25:0e:4b:72:1e:a5:8e:22:71:ce:a2:
38:c1:5c:78:9c:f8:ff:a1:01:6f:8d:3e:fe:87:c4:8b:22:d4:
c7:10:93:d1:5f:2b:ad:63:3a:ad:69:56:81:28:fc:bb:eb:f0:
33:3a:52:2f:8d:e1:45:2a:5f:36:14:97:33:e2:5d:25:89:e0:
fd:5f:38:a1:b1:d2:28:3a:22:34:aa:3a:5a:f7:41:19:02:02:
75:16:60:6c:30:a9:1d:df:d4:9f:dd:e7:e5:33:c9:c3:89:c0:
eb:3b:71:20:bc:2e:fa:b3:a9:c3:4d:00:ab:61:be:a6:41:05:
b1:da:e3:4f:b8:88:a1:b7:fd:40:61:23:88:46:ac:89:66:78:
a9:15:66:65:02:7b:a1:55:4b:dd:45:97:7c:49:12:93:de:e8:
14:c8:35:5b:b6:a3:30:b9:64:60:43:2d:8b:f7:1a:33:5b:db:
1f:06:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:17:44 2025 by rpki-client