Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa
File: 57ee342a-a57e-4da8-82e2-2f4296f4db43.roa (raw, json)
Hash identifier: zj2v94IpVKW8ZWuTUXZXktNC8XR7rYpT6jMs7A/baNA=
Subject key identifier: 58:7F:66:00:5A:5C:E5:81:66:24:EB:C4:81:7B:14:FC:80:7A:39:2F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 77413C8BFF44C07E9FA5B78BCE3707D0DFF1806C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2f::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:41:3c:8b:ff:44:c0:7e:9f:a5:b7:8b:ce:37:07:d0:df:f1:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=bd388b0b7d9d0ba5b800a5a90904aa8f37cc3344b518a85739e2387b725c4bb1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:07:ac:a9:69:ca:4f:e5:4e:50:b1:a7:3c:
4b:30:63:c3:12:91:c7:41:19:5d:25:74:19:81:45:
68:f0:9e:02:d1:ff:3d:59:7d:de:2c:74:cf:4e:e8:
c2:a3:ae:f7:ea:43:ce:02:7b:38:09:07:b3:72:78:
0c:ae:f5:47:8f:ec:7d:e5:ac:a5:2f:ef:c4:d1:2c:
13:95:e0:d2:cd:88:bb:c2:58:ee:63:aa:eb:bc:e1:
6f:22:1c:30:68:5f:74:27:ed:73:df:2d:3b:d4:cd:
f8:ac:ca:76:7f:fd:1f:ce:08:17:60:a8:52:43:36:
e0:59:95:71:51:da:cf:a7:83:c6:90:4a:0d:06:fd:
b6:e6:00:e7:6d:ec:a4:0a:ce:75:46:f0:bb:da:b5:
99:5e:ed:ad:06:b6:75:a6:0c:63:78:c4:10:ca:4c:
41:3f:cc:57:dd:1e:f9:9e:3e:36:66:6a:48:13:b6:
1d:2a:3c:ae:9e:0d:b6:60:ca:96:3d:17:93:90:36:
57:6b:cc:bd:fd:74:83:5d:2b:ea:3a:b8:56:85:d0:
2c:08:53:34:5b:a1:2d:ee:56:c3:a2:f2:fa:a7:5f:
2d:5d:96:8d:fa:f1:b2:d8:bf:5a:0c:87:e7:11:58:
4e:74:f0:36:a3:84:2c:df:39:9e:52:7d:32:8f:40:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:66:00:5A:5C:E5:81:66:24:EB:C4:81:7B:14:FC:80:7A:39:2F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57ee342a-a57e-4da8-82e2-2f4296f4db43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2f::/36
Signature Algorithm: sha256WithRSAEncryption
6c:fe:34:65:f0:2c:61:71:c4:4a:50:e4:ca:b8:dc:5d:b5:fe:
7e:e5:41:b4:34:69:bb:55:a0:92:51:0e:4e:79:ac:17:16:e2:
11:02:78:62:32:fe:ee:f2:86:36:b7:91:5c:a3:3e:fd:22:12:
f3:de:4a:31:9c:4c:c4:ed:7f:bd:9d:b4:8e:73:49:ca:f8:63:
ba:f2:4f:73:f7:e8:42:bb:a6:58:38:f3:1c:19:0b:89:4e:27:
f3:16:ac:7e:80:60:a3:27:b1:0c:b8:16:17:90:d2:87:57:9e:
21:f2:19:53:65:b8:c4:79:fd:9c:bf:1d:b3:28:75:a3:5d:80:
c9:1e:7e:35:ce:a4:19:5c:3a:18:32:c9:f7:d6:1c:cd:70:65:
d8:45:c9:9c:fb:15:22:5a:f7:8f:e7:2f:7e:cc:4b:17:1b:40:
bd:2d:04:80:f4:96:26:a8:58:f3:0f:b3:05:45:2e:20:15:8b:
c5:b8:29:08:b5:44:11:ae:27:9a:71:53:b0:b5:33:27:68:1d:
f9:35:ba:52:94:79:b5:2e:63:36:90:ad:14:b3:2f:2e:84:9d:
54:54:12:2f:d7:e4:9a:a3:43:cc:ae:a0:f5:ed:f1:65:c9:06:
9b:56:99:ee:6e:86:7e:8d:ee:66:7b:60:9a:79:85:67:7f:d2:
74:38:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:18 2025 by rpki-client