Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa
File: 524bbb59-fe5b-477a-80a0-854f6932264e.roa (raw, json)
Hash identifier: usDKr1nShJI4gUftlEe2ZTSgf5gAdU1WSQN5fI+MqRU=
Subject key identifier: 2B:92:E9:6F:BB:57:DA:8C:EF:63:D9:F9:B4:67:44:F3:AD:EC:A6:3A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 358979EB4E8127618F832F461BEEE227E68C07D8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:c060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:89:79:eb:4e:81:27:61:8f:83:2f:46:1b:ee:e2:27:e6:8c:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8cf46c1449deac9c1e25285c5fa5f59c088091692bf1a28572e9a85d30a5b3ca, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:47:96:b2:ee:34:a7:87:a1:f0:56:05:2d:
3f:58:76:8a:81:f4:5a:f8:5b:98:36:80:84:fa:e4:
38:1d:14:02:6c:55:ab:7b:74:ec:a4:16:59:ca:24:
38:4a:2e:33:e2:b4:51:ee:fa:4e:da:f8:af:e1:60:
26:d0:c4:d4:c0:71:95:6f:49:bc:bb:49:41:12:28:
dc:28:70:e1:3b:8f:c6:a8:1d:4a:55:34:a1:73:38:
74:62:ce:2e:53:38:57:d2:8e:3c:b0:6d:69:cb:ce:
44:a3:3f:79:06:d4:64:67:06:9f:0f:26:05:99:59:
11:10:1d:bc:f1:70:9c:e8:2e:d8:6e:5a:36:2f:8b:
02:82:d2:45:5f:46:05:df:7a:a8:79:74:41:b1:56:
f5:ed:83:6a:5c:38:a1:d0:cd:16:83:9f:ac:38:07:
17:52:fe:0b:06:76:4d:35:9d:fc:df:96:d2:0e:b2:
cd:90:ee:ec:c4:14:12:da:b6:df:74:da:7a:c7:6f:
cc:9b:cb:62:e8:9b:9e:c0:b9:0a:ec:c9:5b:c0:f6:
8f:f2:8d:12:5a:c1:a1:09:24:8b:76:23:ed:8c:24:
d7:04:b0:25:73:de:0d:5a:ea:c7:72:b1:82:5a:d3:
af:31:c0:ab:fa:d1:2c:46:0b:e4:54:d0:cc:20:ed:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:E9:6F:BB:57:DA:8C:EF:63:D9:F9:B4:67:44:F3:AD:EC:A6:3A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524bbb59-fe5b-477a-80a0-854f6932264e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:c060::/48
Signature Algorithm: sha256WithRSAEncryption
05:a0:ba:0e:4f:d8:6a:75:91:69:67:c5:18:60:5e:73:e0:a0:
9f:b2:b8:51:35:86:a4:13:3c:ac:25:d3:24:32:ad:88:bb:f6:
05:02:ac:4d:ed:a6:85:fa:ff:17:d5:51:fc:28:2a:6a:0f:c7:
e9:51:85:7f:aa:52:e0:cb:5a:3f:a7:3f:da:90:16:aa:33:2e:
44:a6:42:a5:18:78:06:8b:5a:24:21:6a:b6:b3:2c:4e:5a:4d:
56:67:1c:d6:8c:53:28:4a:02:93:20:f8:16:36:1a:49:1e:e7:
59:63:d6:70:c4:ad:6d:7d:e0:85:f9:e4:c8:42:80:23:07:d8:
e9:fd:57:54:b9:73:85:48:46:e3:21:6b:83:75:9e:e9:3f:8f:
3c:14:08:bf:ec:fe:4a:58:7b:d9:57:cb:44:29:1b:f9:67:8b:
21:cc:7d:e6:04:93:ee:84:1c:7b:a1:ce:86:22:0a:78:3d:b5:
10:47:95:28:d3:e8:f3:59:4f:f9:5b:00:e8:b8:70:e6:4a:47:
0f:0e:75:91:53:ab:5c:71:74:c4:14:21:77:41:0b:9d:fe:3a:
0e:86:d9:60:56:b6:b8:72:e8:f0:5e:af:23:46:0f:c8:36:84:
ca:bb:0e:e9:8b:e8:80:93:bd:82:22:b5:1a:4e:2e:7a:bb:41:
8f:28:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:07 2025 by rpki-client