Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c5d2129-c65c-4419-a480-b48028703d92.roa
File: 6c5d2129-c65c-4419-a480-b48028703d92.roa (raw, json)
Hash identifier: bZRkPVEDN6Uqg26X8Fpoi8VRHyFdDjdzhWO1ohUhkS0=
Subject key identifier: 13:44:10:45:3D:7D:B1:C4:F9:E2:45:E5:1C:7A:8B:F2:3B:D0:E1:D8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5152B97C5F5CCB33550F2ABD85C5DA0101810318
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c5d2129-c65c-4419-a480-b48028703d92.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da38:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:52:b9:7c:5f:5c:cb:33:55:0f:2a:bd:85:c5:da:01:01:81:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=698b708b41ab7565f89d5e9222f5c75f41581c5459d3fa0641118bc89185bd02, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:24:04:96:d9:a4:63:2d:25:f8:06:d6:d6:
a5:ff:13:7b:4e:ff:47:98:ff:5c:9c:0e:29:f8:5b:
96:f1:7d:f2:72:52:93:dc:9c:0a:65:76:c3:91:be:
20:d8:ff:42:3c:68:0e:93:84:71:2b:5b:48:f4:8f:
cb:9e:f9:f0:23:d6:51:ee:cf:c0:02:c0:b9:6c:82:
3e:b7:ae:a4:ab:2c:3e:3d:cc:ee:fc:00:31:a9:8f:
fd:06:f5:a7:6c:6b:73:6a:80:55:af:02:57:32:f5:
17:03:d4:47:7f:68:48:4a:f2:57:db:8e:a0:06:9d:
0a:b8:18:82:62:67:df:3b:5d:2d:01:37:b1:be:d6:
d5:31:9a:f5:46:3d:e3:cb:8f:6f:9b:72:69:04:75:
eb:29:b0:94:02:88:62:ce:cb:d5:a3:1b:9f:d9:93:
85:41:32:a2:ff:ab:d2:b8:31:03:fb:cb:c3:2b:38:
74:c9:7c:1e:7d:a6:6e:63:2e:15:f6:f0:68:40:6f:
6a:d3:f6:df:fa:5e:04:c4:93:7f:33:1b:4f:b1:65:
d2:9e:7e:f0:b7:61:14:fe:6b:07:a9:66:20:c0:73:
8c:7a:a3:26:8a:a8:db:d2:b0:c5:ad:46:1d:cf:58:
a9:9a:56:77:15:17:13:35:e8:25:a1:45:ae:9d:84:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:10:45:3D:7D:B1:C4:F9:E2:45:E5:1C:7A:8B:F2:3B:D0:E1:D8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c5d2129-c65c-4419-a480-b48028703d92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da38:9000::/40
Signature Algorithm: sha256WithRSAEncryption
07:a3:a0:67:18:7e:f5:97:b0:d5:67:83:6d:04:01:fa:36:87:
f6:26:a3:d8:c1:3a:75:c1:cf:0a:be:b6:5c:25:73:95:39:3b:
d5:64:f3:e5:55:28:8f:71:f6:e3:bd:9c:86:c8:da:2c:88:78:
6d:d6:53:50:b4:0b:ec:5b:a4:47:34:d0:ce:ea:3b:ed:c8:db:
a7:41:ea:31:04:2d:48:93:a4:48:59:d1:a1:c9:29:75:b7:94:
9b:ea:bf:2c:e7:39:77:db:48:5f:08:c1:d6:49:02:96:5f:5a:
b9:3d:e9:10:43:87:4f:91:c4:27:b0:34:06:a8:a5:3c:83:b7:
88:bb:5f:bc:67:b0:b3:84:c5:8c:10:ef:a6:4e:4d:89:7a:0b:
26:cf:ba:5c:07:7b:57:04:c8:67:60:b6:9a:4e:f1:c0:b7:de:
73:75:67:5d:a4:95:59:f9:7c:1b:8b:d3:78:9c:e6:20:f0:86:
34:c5:fd:8b:29:73:88:04:88:9b:7c:d1:da:45:0d:9e:da:88:
89:b8:af:d3:c7:51:e8:0b:c1:a8:cf:b2:07:37:ed:64:51:16:
08:c8:29:84:30:5f:bb:8d:5f:38:ad:cc:78:2c:56:8f:ec:41:
b3:24:67:37:e6:6a:99:3a:d2:78:03:15:83:80:f1:2d:f4:55:
b3:62:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:20 2025 by rpki-client