Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85cf1f6a-405c-4d4b-909f-89c20b3bda8f.roa
File: 85cf1f6a-405c-4d4b-909f-89c20b3bda8f.roa (raw, json)
Hash identifier: lxQjpT21xeFPL/SAYKy9B0V0LC1dDMybdD88+QMJBpI=
Subject key identifier: CB:7F:81:40:83:5B:3A:10:5A:AB:79:8F:6F:22:93:4F:DF:F7:98:B2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 32F53BD4ABAEA5D5895FE0865B3EE5E1478CBF8A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85cf1f6a-405c-4d4b-909f-89c20b3bda8f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f5:3b:d4:ab:ae:a5:d5:89:5f:e0:86:5b:3e:e5:e1:47:8c:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6b6b6cfcb6e94dbb460b2b897519c2366d2acfc806f2416681229f67c0f6d945, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:48:73:c7:8d:ef:61:98:07:65:ab:0e:90:
e3:19:ed:55:a4:87:0f:48:13:35:c1:55:81:35:c7:
88:b2:af:12:dd:ed:3e:cc:9b:bd:04:28:25:51:4d:
21:07:ad:1e:cd:e7:82:0e:95:53:8e:d9:61:38:f2:
fb:22:47:63:d9:16:7f:e7:14:94:30:77:8d:67:bf:
9d:b5:b5:ae:23:5f:22:1c:c9:df:76:63:cc:29:25:
71:13:f4:4a:0a:3c:3d:50:77:81:a3:3c:86:00:10:
01:1a:08:ed:1c:73:69:e8:5f:ab:9a:25:b2:ff:5b:
30:5c:7d:a1:b5:71:10:54:7a:6c:fa:c4:69:fa:d4:
93:7c:22:a0:45:c5:c1:d3:4b:62:c1:84:5d:ca:a6:
59:ce:7d:ff:d7:f8:0a:40:06:44:33:4d:7d:f0:70:
a0:e5:40:1a:49:b2:79:58:b7:00:43:86:cc:10:4b:
71:87:b8:ae:c3:2b:fa:fc:87:97:e5:53:5a:df:d4:
d4:20:77:3a:e7:bf:2d:c1:79:70:53:54:e9:28:be:
73:c7:f9:19:2c:e5:12:a0:0d:1f:a9:f6:dd:71:ab:
42:fc:92:e6:d0:cc:0d:f6:f3:93:4e:9b:21:b0:07:
58:3c:bf:f6:82:79:fa:41:f1:09:ca:02:27:53:8e:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:81:40:83:5B:3A:10:5A:AB:79:8F:6F:22:93:4F:DF:F7:98:B2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85cf1f6a-405c-4d4b-909f-89c20b3bda8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:e000::/40
Signature Algorithm: sha256WithRSAEncryption
09:c5:34:3e:0e:b9:dd:ca:ed:84:85:cd:af:a7:d2:9d:6d:5f:
f3:95:af:8a:ab:b0:ca:8b:47:4a:de:c4:2a:85:1c:2a:f3:2b:
10:eb:6f:97:bb:25:13:c0:54:8f:31:55:cb:61:01:de:40:43:
64:e3:ac:7d:17:be:a4:de:3b:c6:6b:04:80:46:23:f0:1b:7f:
90:d8:84:23:b2:5a:bf:48:da:70:05:00:de:05:30:0c:e7:a4:
a8:88:d5:5e:d8:70:1c:84:36:7a:cd:b2:fb:5f:7e:ce:f7:b3:
67:32:4a:fb:80:22:5f:ee:f0:71:68:0b:4b:be:76:31:77:42:
b9:22:5f:f5:53:f8:be:88:15:36:07:b8:31:71:ee:e5:84:8e:
bf:ab:ab:99:b6:b2:33:f0:1c:7c:4e:4c:be:23:ff:50:3a:4d:
cc:a6:f4:1c:87:2c:dc:ea:8f:4f:d1:bd:25:b1:0a:f2:16:f8:
ca:b3:68:15:9e:53:be:93:e5:2b:94:21:03:a0:60:94:5e:74:
6e:82:25:30:5f:c6:c9:8f:5a:01:6d:1a:ad:ed:32:6b:1a:7d:
8e:8a:6a:66:7c:79:1d:a3:9e:0d:6a:73:be:a2:a3:7f:49:49:
4f:0b:d1:8d:69:ec:ec:19:d3:c0:51:e3:06:dc:0e:1c:1c:ab:
6b:0c:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:43:39 2025 by rpki-client