Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
File: 5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa (raw, json)
Hash identifier: 6N5dcOc0REuOlySOCX4Ie35WH1MaMBENV89+i/MfcYU=
Subject key identifier: F2:41:22:94:CD:9C:ED:34:F5:D6:1B:8E:07:A0:81:C6:47:7F:4B:6D
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 42EFC51F1330BE29071156E2C0B4E59402F1C0B0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:7000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ef:c5:1f:13:30:be:29:07:11:56:e2:c0:b4:e5:94:02:f1:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=810a66995de3370672f22dcb56e81ad30c43b0bd3616f62f539294ba547f0be5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:84:03:0a:be:f5:49:25:8b:2b:b0:d0:59:
af:c6:cc:2c:25:51:0c:57:52:04:c6:b7:7c:0e:d1:
ca:39:4d:80:81:3e:d5:ad:f5:77:a2:e5:02:d2:fa:
d7:2e:2d:d3:d8:fa:47:3c:62:15:96:e6:65:0d:f3:
76:b3:66:1d:36:12:37:ae:05:a7:d5:1f:f9:a8:78:
17:65:fe:19:21:7a:e9:85:f3:00:f5:0b:a4:06:93:
38:91:e1:de:33:7a:0f:6d:73:92:26:52:e4:ab:d2:
16:df:6e:9c:07:a1:74:e4:26:6c:0e:87:4b:06:89:
31:83:03:1b:69:e9:ef:85:61:c8:4b:af:1a:02:a7:
d2:15:02:43:1c:28:a2:76:84:9b:f6:3a:d1:5a:31:
87:5c:de:b7:01:5a:e3:ed:27:01:de:86:30:4f:2d:
05:5e:b6:d4:3a:6a:e5:19:ba:9b:c8:a5:32:45:f7:
69:3b:a0:47:68:44:59:38:f6:1b:57:d6:7c:96:8a:
a1:94:29:85:39:5f:8d:ba:c6:a5:18:ea:e7:75:58:
41:a9:7d:11:d5:39:20:58:ee:a8:00:de:ec:ec:21:
01:ae:1b:eb:3f:d9:3b:96:e1:26:a8:1b:ec:ff:00:
3e:35:80:00:dd:04:6c:a9:be:02:04:cf:9c:13:30:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:22:94:CD:9C:ED:34:F5:D6:1B:8E:07:A0:81:C6:47:7F:4B:6D
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:7000::/40
Signature Algorithm: sha256WithRSAEncryption
34:dc:4a:b8:11:c0:c0:10:18:e6:be:d6:77:a4:b3:4e:f0:de:
c4:79:54:da:66:a4:a2:77:66:4c:8f:fa:8f:43:4b:9e:07:b7:
0a:e0:31:14:e6:11:ec:42:a0:54:db:f4:d5:4b:f9:90:f7:6d:
6b:1a:9f:e0:8d:ed:38:16:fd:c7:54:62:78:5a:31:09:4e:b5:
8a:3b:c7:5a:c5:ba:e0:8d:40:cb:96:d9:c5:2f:80:26:f9:25:
b8:ea:04:96:54:a6:d4:b5:45:15:75:7e:5d:67:2d:7f:a2:0e:
6c:16:86:e6:e9:dd:21:60:89:98:86:74:ae:11:a7:e1:8f:8d:
c2:80:0a:37:f6:38:d3:77:5f:8d:a3:2c:65:e0:bf:ef:0d:ad:
ca:b7:63:52:48:3d:96:3f:f2:fe:e6:9d:03:89:2a:a7:08:df:
38:99:60:45:b6:cd:1f:9a:5d:c8:69:2a:63:27:d0:7c:03:f8:
19:b5:3e:b1:d2:d8:0a:ca:6c:a7:e7:e8:80:f9:44:e2:32:15:
38:7c:2f:ec:27:ea:a2:1d:2e:31:37:94:cc:89:df:d1:c3:1a:
bb:c0:2a:df:5d:4d:78:89:52:cd:c7:b4:2f:43:6e:d5:41:53:
93:81:cd:25:4f:d2:00:25:4f:fb:d8:03:2b:1f:2d:06:55:22:
24:3b:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:48 2025 by rpki-client