Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa
File: 755b4fcb-1a64-4574-a1e3-742632f6382c.roa (raw, json)
Hash identifier: qtllh6UJqqnPTFrp2cdSdyir8HP4Gt4WOVcDIRNt2qk=
Subject key identifier: 76:26:99:BB:24:4E:AE:0C:A7:14:72:52:83:67:09:E3:28:DD:4C:AC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 154C384412D127F98FC4D393AA918079C82478A0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:8080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4c:38:44:12:d1:27:f9:8f:c4:d3:93:aa:91:80:79:c8:24:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b2e51dcaf031a5ab94d7417e81668da688f085966dc0fe990d091029c1802764, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:01:1f:9a:38:79:c3:05:8c:52:c8:45:cc:
29:a4:85:bf:3f:dd:22:69:51:6c:c8:85:f4:36:74:
d4:ff:38:cd:7f:cd:db:25:fb:45:e9:f4:fe:a1:44:
30:61:1f:0a:0f:02:b7:37:9a:21:d1:ea:20:39:a0:
6f:ee:ef:85:8d:a5:a3:74:3a:7c:3f:45:9a:c2:b3:
cf:36:8a:99:72:c8:3f:98:af:11:21:6d:31:3a:93:
c4:2f:ab:15:49:ff:0d:fe:19:bb:6c:76:9c:60:25:
11:48:59:f5:33:6a:38:a7:3b:0b:df:e8:eb:e7:a0:
b7:52:d5:41:55:27:f1:67:a3:2d:b3:02:e9:0e:a7:
65:1a:82:9e:1c:c3:04:94:6a:f3:45:01:3a:3f:b0:
ab:7b:5c:a4:7d:75:d1:a4:3f:39:f2:4a:fe:cb:f5:
5b:62:6c:db:3c:1d:7f:43:6d:be:02:43:3f:eb:61:
c9:c6:fb:2a:1c:b4:29:12:8c:2e:03:90:a1:5b:e3:
42:b9:07:53:57:03:b0:a7:ac:9e:a5:ef:dc:81:aa:
cd:04:69:3b:d6:f0:2f:05:b2:65:eb:07:3b:4f:42:
25:4e:1f:fc:0b:5c:cd:9c:0c:3c:05:2b:49:ae:2f:
9a:cb:51:96:cd:fd:0c:98:8e:4f:a5:56:7a:2b:57:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:99:BB:24:4E:AE:0C:A7:14:72:52:83:67:09:E3:28:DD:4C:AC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:8080::/46
Signature Algorithm: sha256WithRSAEncryption
54:d1:a5:03:e0:29:3c:7b:06:eb:24:da:5f:0a:65:34:22:54:
0b:91:6d:2e:e4:32:20:fc:ec:57:3c:f9:fb:ce:d3:1a:81:af:
66:69:3b:29:2d:01:81:9b:d8:2b:2f:f9:7d:3c:b6:6d:64:98:
ea:58:7b:4f:00:f6:04:51:b0:67:ba:fa:a2:eb:12:07:e8:d3:
44:a5:b1:4d:d6:3b:e8:90:ab:ca:1d:df:9b:cb:71:d8:11:52:
91:e9:ff:b9:58:e3:72:80:d3:a6:24:5f:0b:b0:7c:0d:54:85:
de:30:c7:a2:51:89:84:16:c7:dc:5b:51:ff:36:0d:70:9e:de:
74:b6:e3:f7:47:a4:c5:28:cf:3a:f4:2d:6c:04:44:06:a5:b0:
e3:cf:93:4c:43:7a:1c:68:f6:87:1b:72:4f:f8:d1:e5:39:cb:
78:85:2c:3f:02:a3:32:f8:cf:81:3e:34:ce:97:13:a5:38:7a:
d8:90:09:f2:01:2a:41:ba:f3:36:e0:d3:f3:97:43:a9:e7:19:
1c:58:0c:89:86:a8:59:09:ed:4a:99:21:c8:52:6c:5c:db:5c:
03:6d:11:1e:d8:94:28:8f:b9:1c:e7:fc:7c:52:90:25:34:8a:
26:82:44:63:e4:7a:9e:2c:07:95:d1:65:ae:f1:f5:d4:fa:15:
6a:b6:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:18 2025 by rpki-client