Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa
File: 55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa (raw, json)
Hash identifier: /46aGE+bffJp7cIdGv9h+Nwwbgi+jO2Zq2DcAxfPfb8=
Subject key identifier: CC:DA:84:04:99:8E:4C:36:91:4B:70:AF:4C:09:94:56:E6:2D:DC:3F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5EF9DF3DC50EC90A6D352827F63A807A7E9189DA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f9:df:3d:c5:0e:c9:0a:6d:35:28:27:f6:3a:80:7a:7e:91:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=4124363046118a4690cf7eb4355f3ecd1e4493e9e8d6f871378ff28a689b5638, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8e:0d:fd:01:b2:34:c9:a0:f1:9f:a5:f6:1d:
13:68:b1:39:50:0f:34:1b:5b:78:1c:b9:91:36:41:
f9:9b:ff:cc:da:44:31:9e:9d:5f:19:92:fa:dc:4f:
59:40:e0:99:1e:31:29:4a:9a:38:73:a4:ff:a4:c3:
c9:f5:3d:ec:67:90:58:76:c6:10:86:67:d5:21:ed:
90:a4:ae:35:49:89:2c:1f:2c:1c:b1:3a:ce:be:10:
59:a0:38:e4:04:7c:bc:a2:a3:25:1b:78:f7:3a:cf:
d1:40:24:ee:6f:75:b0:40:7e:11:7b:7b:a3:78:5d:
7e:e9:8c:6f:41:25:78:2a:0c:09:27:1f:55:0b:80:
8d:a3:73:25:4a:28:95:4f:14:4c:6f:1b:f6:7e:15:
36:ad:e1:2b:b4:45:01:27:8d:01:5a:f2:cb:db:52:
72:58:16:1c:10:d1:03:be:e9:f0:97:b2:6d:ad:46:
c4:b9:da:65:b7:60:29:75:54:91:17:4b:84:56:25:
4c:5a:29:74:84:1c:7a:39:28:c2:62:ad:41:47:37:
47:68:f5:87:4f:8d:b8:e6:4e:28:40:e6:2e:e9:14:
77:02:69:76:e5:4a:8f:08:6d:9b:d7:58:22:39:80:
6c:8f:4a:f3:51:09:66:90:f5:08:c3:c6:d9:ab:55:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:84:04:99:8E:4C:36:91:4B:70:AF:4C:09:94:56:E6:2D:DC:3F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:800::/40
Signature Algorithm: sha256WithRSAEncryption
44:32:ac:ae:e6:e6:8c:77:4c:b2:30:38:13:07:c0:3c:1a:75:
7e:ea:5d:ba:5d:01:6e:ab:36:30:75:3b:52:2e:87:c5:62:1b:
97:73:9c:29:96:cc:d3:46:7b:92:ae:ae:d4:61:f8:45:40:0a:
ac:b0:73:cf:44:85:c1:db:6d:aa:7f:4f:d0:1f:4a:92:5f:95:
e0:ae:5b:c6:cf:07:69:64:6d:22:d2:28:72:4a:a7:37:7f:0e:
eb:ea:7d:cb:ea:92:dc:a3:32:34:a8:86:8c:29:57:d1:27:80:
6c:2e:a8:92:80:3f:90:d0:b4:b6:c2:b5:b4:34:ae:e2:d4:e3:
3f:18:2a:9f:87:ba:60:cd:42:09:34:d6:20:82:e6:35:2e:42:
2c:1c:03:2f:0a:85:ae:f9:f2:72:92:3e:ab:aa:bf:7d:6b:7e:
42:5b:45:ec:fd:e7:d6:a6:1a:60:c5:35:3f:fe:a3:e0:64:39:
2a:25:4e:ec:5f:92:9b:f9:41:a5:e9:88:15:82:43:ad:98:65:
5d:4f:6e:57:0d:c8:33:a3:19:1b:51:a0:05:2c:0b:a9:93:7b:
2d:6d:a9:79:3b:91:83:9f:e4:aa:cf:cf:c6:d0:f0:8b:00:ca:
16:5f:38:42:fb:b6:45:e4:df:28:f3:31:48:62:9b:e3:16:19:
ea:2b:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:05 2025 by rpki-client