Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa
File: 857d996d-a66c-48d8-8669-f36141564a43.roa (raw, json)
Hash identifier: 1fAgKaxHKTjW+OYeCWDXK8kj7YTsuwiI5V8rrE7VuPc=
Subject key identifier: 04:B0:22:B6:91:00:2F:53:25:A4:95:AB:32:86:99:FD:EC:03:33:BC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 718BE1BDC75372B604DAECF184CB814F08327A8F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:4800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8b:e1:bd:c7:53:72:b6:04:da:ec:f1:84:cb:81:4f:08:32:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=16e3bf3486f824f8a0c49ffc3614502be1ffa04e904e03c17b6c5aaff48378a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:7c:60:20:69:aa:84:00:62:57:51:e1:ef:
09:8b:2c:75:c0:ee:29:31:8e:30:9b:7d:0e:5c:53:
f4:ac:95:4c:de:48:01:4e:9f:56:e8:68:38:7a:76:
00:20:7a:13:a3:b8:d1:a7:4f:52:5b:b0:79:75:4e:
82:f4:a3:1d:94:4e:8f:43:91:5b:8f:12:53:17:84:
2d:38:cb:3c:3d:09:fb:66:26:dc:1a:4c:72:f3:32:
91:96:86:50:ad:98:e9:97:2a:db:4b:b7:98:ea:c8:
55:e8:44:0c:84:c8:41:1a:e1:d8:a6:71:7d:c3:fe:
07:a7:bc:4d:8e:dc:f6:5a:7b:64:9e:d9:ba:6c:d5:
86:f5:b7:f9:84:54:80:0e:71:57:be:99:d1:27:21:
80:4e:ec:c3:5d:be:6a:ea:37:ea:a2:a8:83:57:70:
b4:c0:49:0a:b1:a5:4d:b2:4e:ce:80:88:15:b0:c4:
67:92:2b:61:4c:80:ce:d1:e2:89:0b:ca:3b:99:5b:
6d:cd:60:27:9d:84:d2:b7:d8:ff:2a:b4:e1:18:34:
1a:58:4a:65:f6:ea:37:b1:85:bf:81:58:d0:2e:ac:
72:23:80:16:31:dc:60:50:43:d8:29:7e:f0:dd:f3:
16:51:5b:8c:a8:27:82:58:2a:2a:83:ff:5f:bf:37:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:22:B6:91:00:2F:53:25:A4:95:AB:32:86:99:FD:EC:03:33:BC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/857d996d-a66c-48d8-8669-f36141564a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:4800::/40
Signature Algorithm: sha256WithRSAEncryption
75:7b:af:d9:54:5b:99:6b:1e:79:9d:a6:81:23:74:db:2e:80:
4f:60:a9:af:32:44:00:65:a6:88:d5:09:30:20:ba:87:16:57:
33:8c:8e:49:9b:42:cd:61:10:7e:32:97:35:07:6c:61:73:41:
87:d5:65:e1:47:f7:6e:5d:ae:dc:85:72:5c:a2:65:01:a3:f4:
8e:4d:df:eb:47:14:1b:c5:90:b9:4a:61:86:0c:97:f7:24:ba:
09:b1:75:cb:b6:5d:c8:e7:23:80:ac:06:7a:09:03:72:1e:e1:
45:11:ea:15:cd:e5:46:ac:49:de:40:08:81:f1:98:0f:6b:31:
d6:16:bf:bf:96:3e:ad:54:af:23:16:ec:7b:2e:d8:57:89:cd:
93:18:05:e9:2d:35:25:77:2d:48:5b:f5:7c:1a:b5:46:69:f4:
38:f8:de:4b:28:97:14:46:ac:49:ad:44:ed:d3:8c:b0:56:ec:
16:8f:86:a9:40:4b:8b:ed:a9:93:bd:6c:0e:9c:47:c2:08:82:
9c:57:77:d0:ba:08:11:6b:e4:9d:32:1a:a1:50:30:88:dd:81:
d6:e4:35:bf:17:17:3a:77:c5:65:51:b1:b9:4b:2b:c1:b0:b0:
94:82:87:8d:3f:b2:61:ca:28:04:ec:7c:0f:bd:10:0b:04:d2:
31:4c:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:42 2025 by rpki-client