Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa
File: 5d757d26-e156-4b10-9ff8-2391de94a136.roa (raw, json)
Hash identifier: tncF3PI8KWX7q5SjD0OX3NRmCtGOI1GHkZqKNl0q9Ec=
Subject key identifier: 96:6D:45:8E:A6:3E:32:91:67:65:C5:CC:E1:C3:02:B1:B4:92:32:FF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6D4313452770300879FA1D8CA0B0EB1531DB352A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da12::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:43:13:45:27:70:30:08:79:fa:1d:8c:a0:b0:eb:15:31:db:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3ff63dd19359b61bf331af41394f164f3126ca3d69ac7f2cf35a8dbafbdba840, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:7d:62:c2:43:30:e5:50:31:c2:27:e2:8f:
c1:fd:e6:eb:97:43:31:c8:0c:ae:5e:bc:19:3f:7e:
8b:8a:d9:f8:e7:09:6d:11:e0:85:55:be:5a:8b:67:
99:fc:8a:bf:35:b1:16:36:28:18:85:0b:c8:02:af:
f9:7a:32:6f:02:c7:18:a6:1e:cf:53:46:01:e6:d8:
2d:2e:c7:5d:34:4c:f4:04:8e:07:72:b4:d5:33:c6:
1f:f4:d5:4d:1f:57:6b:94:af:3b:a5:ca:0b:41:05:
d0:58:33:64:f0:65:1a:40:4d:7c:71:e8:c6:b2:21:
85:af:71:aa:72:8c:39:af:d2:87:08:fb:46:7d:48:
a9:6d:3c:14:38:82:09:e8:3e:a4:53:47:df:90:6f:
ca:38:5c:cd:b7:3e:e0:72:77:b6:f3:0d:f5:ff:fe:
74:e1:6d:f6:f2:02:45:01:13:30:fb:a6:20:35:2e:
54:cc:35:8b:6f:88:af:dd:0b:c9:04:55:fc:cc:5a:
34:33:bb:8b:ed:76:6e:9e:a2:fe:eb:7f:43:d2:01:
6b:b7:8f:47:d2:af:e4:f7:5f:4a:b9:39:13:08:d5:
d5:89:04:20:3a:c2:7d:49:93:41:32:c3:fa:c5:9c:
cf:64:40:19:14:65:d2:7d:ad:20:86:93:ee:5b:06:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:45:8E:A6:3E:32:91:67:65:C5:CC:E1:C3:02:B1:B4:92:32:FF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da12::/36
Signature Algorithm: sha256WithRSAEncryption
18:08:2a:9e:e6:d2:d5:86:aa:c7:28:2a:04:c0:af:7f:21:dd:
2b:2e:c4:c7:23:eb:d2:65:9c:18:a4:78:14:63:27:c1:a8:54:
a2:1d:47:41:0a:f3:4f:37:4f:d5:ee:c2:8f:c1:22:f2:b5:1b:
67:0f:08:84:41:7b:d9:a5:d3:5e:c5:90:61:d4:5a:d4:5d:a4:
9a:46:5f:b3:d4:3c:3b:54:b4:ed:61:6e:c3:23:c6:b1:19:03:
e8:65:41:a6:2e:6b:94:fc:1a:e3:76:56:fe:4d:d4:99:4d:e5:
6c:b2:70:69:74:17:72:fa:2f:8a:c2:2d:59:81:08:f1:d7:62:
c4:b6:e7:ae:86:11:1e:60:41:78:68:cf:84:04:05:1e:3b:2e:
f7:9c:88:06:ef:a9:11:21:5a:cb:74:f3:ed:16:38:97:8c:b5:
07:88:1d:80:ca:23:14:88:2a:54:d8:ba:12:da:ae:a6:fe:b2:
97:82:97:e3:30:31:c9:b5:2f:0f:94:84:3c:80:bb:8c:9c:48:
1e:89:44:b3:f4:11:b0:03:9c:dd:7c:d9:ff:a0:da:a9:cf:44:
6f:6e:1e:ea:ab:43:1f:cb:74:e4:ca:4e:86:70:14:7f:56:62:
a3:f0:d1:c8:c4:42:51:d8:35:8a:8b:96:83:3e:f3:79:5f:5a:
49:0e:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:17 2025 by rpki-client