Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa
File: 524c65cc-d022-4b07-863e-495ad7b730c6.roa (raw, json)
Hash identifier: Jwr/tYglGWT4QNehRdsU+rBRUproM7NeCmXbA1YUVF0=
Subject key identifier: DC:34:9C:FB:B6:1A:3B:44:24:0F:D4:9E:EB:DB:9B:7C:7F:35:1C:90
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 194309FCC7237E882644A83DA77E91567F5AB832
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:2800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:43:09:fc:c7:23:7e:88:26:44:a8:3d:a7:7e:91:56:7f:5a:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=7604c7db75db799d7e9d5b38cd7e3eecc0aac552f9a440bca7a968e55113257a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:51:b1:ef:80:b8:bc:6f:fe:15:96:7c:a9:
4e:72:3b:2b:53:c2:59:dd:6f:a8:df:6f:e8:3f:d6:
10:36:e7:c5:42:7f:5e:32:60:79:1b:2a:ee:69:67:
f9:f5:1e:96:ac:4d:c5:4c:39:f7:ec:86:8e:33:9d:
dd:16:2b:9e:9e:0f:64:74:da:69:76:22:43:d7:2a:
b8:9c:7b:95:fc:09:18:10:bd:cb:2e:3a:da:3a:18:
69:3b:eb:95:f0:21:f6:75:e5:45:95:7a:c6:0a:a0:
88:4b:f7:3c:e7:a6:66:5d:81:d8:31:a0:cc:06:85:
7d:8e:54:e0:1f:3d:d5:f2:06:48:1e:93:7a:b0:44:
8c:fb:cf:81:0e:cb:8e:b7:36:49:e0:13:5a:ed:51:
f6:3d:01:4e:15:58:bb:ab:7c:b1:5c:a6:dc:e6:03:
8a:03:2b:72:c9:4d:7b:17:8a:a2:c0:95:b7:7e:ae:
2f:4d:44:27:75:d0:bc:5f:4e:a5:23:df:16:be:27:
5e:ba:f3:fd:81:8e:dd:a5:e4:1d:24:6b:46:86:74:
91:1a:0b:6d:da:83:78:91:d5:37:90:da:72:0f:ae:
94:3e:a6:f5:1d:46:f5:5e:69:62:1f:bb:22:19:43:
15:00:dd:29:2e:5c:1c:9a:9f:f3:86:f1:fe:6f:76:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:9C:FB:B6:1A:3B:44:24:0F:D4:9E:EB:DB:9B:7C:7F:35:1C:90
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:2800::/40
Signature Algorithm: sha256WithRSAEncryption
60:8e:1d:57:51:39:6b:c1:05:df:d3:cc:c1:46:63:fb:fc:51:
31:95:79:70:b2:06:af:9d:3c:cb:93:fc:14:78:61:69:13:04:
8c:bc:3f:f3:25:20:6a:d5:9e:1e:e0:94:90:9c:33:55:42:3a:
1c:b9:54:2f:f5:9e:be:88:c4:d9:fc:39:39:a6:14:cd:bf:1f:
bd:8c:61:75:9b:cb:68:b2:05:04:6e:78:9c:6e:e0:49:b5:94:
5f:5f:c7:70:42:2d:b9:58:da:19:1b:a8:24:19:aa:63:97:a3:
40:77:11:8c:c9:4f:cd:6a:ee:6d:45:47:71:2b:2e:ca:1b:d4:
f2:86:d1:27:ad:f0:f1:4c:ab:11:6e:b1:72:71:d9:c0:49:b2:
24:f1:2b:8b:43:e7:38:51:3e:d0:18:f7:56:9c:b1:a0:0d:04:
61:ca:a0:d7:2d:15:18:c7:ff:c2:46:58:68:8e:4f:ab:e5:59:
3d:ab:0a:e2:1d:bf:7d:70:31:07:58:a1:19:1d:11:91:9a:1b:
af:a4:ec:98:a8:f6:48:49:41:ff:37:0e:7a:eb:76:34:b5:f2:
cd:1d:87:f3:17:03:bb:ad:c0:dc:35:4e:48:b6:76:ea:04:4e:
2d:2f:6d:03:eb:1e:2a:f2:82:2c:1c:2b:23:67:29:33:f7:43:
cb:e4:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:25 2025 by rpki-client