Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa
File: 6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa (raw, json)
Hash identifier: lMFMJ1mbbNfsQvRQJ8r6T5GIYz8clo80Ua5Kbuw76bI=
Subject key identifier: 4B:6A:47:13:0A:F7:47:9A:C0:44:01:E8:93:88:39:1C:8A:EE:96:7C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2E8F2AF68129ED802829EC058C289B926B37E88D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8f:2a:f6:81:29:ed:80:28:29:ec:05:8c:28:9b:92:6b:37:e8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5ccdbabec0252e3d1e1a68939c67b6239405ec0fd0a602e0bde2ae226ec72745, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:a4:c3:0f:d7:05:ac:09:e4:94:77:6f:fe:
97:69:dd:7c:04:d2:69:8a:b1:6e:b0:02:f7:f9:c2:
9d:45:9b:38:69:08:c8:c0:ad:24:af:94:20:45:82:
55:48:65:af:51:6d:e6:e8:77:58:1f:06:a2:bb:3a:
ea:02:59:5f:21:de:d3:68:63:4c:6c:61:e1:aa:11:
31:d7:16:b2:6a:d5:9f:ac:7b:30:cf:0a:47:51:ba:
e7:05:77:1d:93:5b:74:0a:7d:7b:d2:31:16:e8:ae:
6b:d8:10:c0:6e:7a:16:f2:64:bb:32:2a:1f:36:70:
7f:90:b5:83:6e:43:f7:72:41:12:7b:42:ca:95:3b:
e0:cd:dc:e7:39:2c:8c:98:f8:8d:8a:f3:38:6f:8e:
52:17:a5:5c:39:c3:44:2b:68:b5:3b:2a:ab:03:04:
72:45:63:50:59:cf:d0:8f:78:11:d7:cc:47:35:28:
42:33:d0:07:d3:45:2b:a2:a1:28:69:35:d3:34:09:
4a:51:ce:2e:41:75:83:48:fb:40:99:5a:87:15:06:
7b:e2:41:a3:9b:cb:0a:72:26:1c:d2:76:d4:2e:66:
c3:01:c1:2a:86:db:bb:cd:72:94:4d:37:11:5a:62:
75:e7:c6:fc:4b:94:df:f0:a7:87:f6:ac:2e:f8:81:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:47:13:0A:F7:47:9A:C0:44:01:E8:93:88:39:1C:8A:EE:96:7C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:2080::/48
Signature Algorithm: sha256WithRSAEncryption
c0:bf:03:7d:2e:e5:96:9a:1b:58:a9:4c:67:75:23:94:6e:27:
ea:07:66:34:f5:b2:67:92:2f:a4:14:db:f6:7d:3e:54:d7:e9:
c7:01:27:c0:a8:20:64:15:fa:27:79:68:c1:09:43:72:74:c2:
37:b6:4b:7f:c7:4e:81:c7:2f:21:92:7b:50:51:c4:f1:3b:5c:
e8:00:46:cb:63:bf:a4:13:e4:d5:aa:0e:e3:87:1f:f6:2e:6c:
10:33:5a:62:7f:00:28:0f:2d:95:4c:ce:4b:9d:69:2e:82:d9:
4f:c7:63:93:53:16:fc:49:92:d5:f6:a4:f6:79:7b:82:76:67:
be:1d:6f:ea:eb:cc:f8:74:42:f7:98:f6:ed:9d:53:3e:1e:3d:
e3:35:ca:14:db:47:6b:36:ed:ba:ce:72:be:9a:3c:0c:cf:d8:
01:11:f7:da:0e:65:62:d6:b9:7d:35:2c:be:e4:0d:f8:6c:46:
a0:7e:c5:58:c1:da:09:04:62:21:f8:63:03:3f:92:1d:f2:62:
93:3d:ef:80:47:10:9c:a8:73:80:1f:1c:b6:70:dd:22:04:69:
da:a2:af:ee:ed:ed:78:88:fc:1b:56:fc:47:58:b1:ca:38:95:
db:2b:8c:d1:63:5b:dc:27:39:7a:35:3b:a4:b5:a1:62:d7:ec:
6e:9b:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:51 2025 by rpki-client