Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa
File: 8bd3366c-489c-4afe-af18-d26b5824bd0e.roa (raw, json)
Hash identifier: P58FZC3LF3JXlH2amnnAu51tlWVR6Y0alkYCwVomh2I=
Subject key identifier: F0:A8:86:0D:1D:C4:BB:CC:38:8A:27:00:4A:0A:DF:69:66:E6:7E:86
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 239AF03996688CA5809575B9F91EBEFD33A39EF5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:9040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9a:f0:39:96:68:8c:a5:80:95:75:b9:f9:1e:be:fd:33:a3:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=84b20f8b738ad603c39efdf16db9d3b85c0ef06f296c1b57f57ac2b1cfc691ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:f6:84:36:90:f9:80:1a:b4:46:eb:d0:d8:
b1:0a:7d:cd:f1:22:45:c6:ba:7c:2b:85:6b:a1:00:
cf:96:21:75:93:d5:6f:fe:91:ed:d7:5f:f6:bf:86:
03:4c:30:1e:0d:e9:f7:00:77:4c:92:f3:ba:f1:59:
30:1e:88:86:5f:44:38:56:86:22:50:c5:b1:22:e7:
9f:01:94:9b:72:b9:d8:64:4d:97:e0:fc:9a:05:a0:
59:74:31:2d:17:10:5f:b8:74:8a:1b:f6:c4:0a:18:
8b:a5:1b:b3:3d:96:42:96:08:cf:7f:a1:4c:ca:82:
49:0a:2f:5c:47:17:1c:8c:12:73:7c:04:7c:8c:c6:
10:c1:44:a1:b3:a7:cc:a7:b3:6f:90:f3:09:a0:4a:
96:40:e3:45:20:83:a8:52:0b:bf:7f:c0:c6:47:e3:
89:63:4e:2a:a9:d6:11:f9:b2:3a:fc:c8:9c:1a:40:
78:21:d1:e7:ab:2e:a5:96:df:c4:d1:64:4f:40:a0:
c9:49:0e:1b:2e:b4:ce:8b:3c:d7:60:81:1c:12:d1:
d9:e1:da:83:f9:b5:7a:53:77:88:c0:2c:cb:a0:f9:
ac:d1:e7:af:d2:ee:3d:9e:44:78:0a:85:2b:ff:3b:
08:40:d3:36:80:8c:71:66:28:19:74:da:0f:e6:34:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:86:0D:1D:C4:BB:CC:38:8A:27:00:4A:0A:DF:69:66:E6:7E:86
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:9040::/48
Signature Algorithm: sha256WithRSAEncryption
20:fd:90:bf:68:25:fd:5f:d3:89:85:f0:7d:9d:1f:e0:67:3c:
e0:0a:7c:1b:c4:36:d4:31:c6:0d:e7:3e:d5:e5:8b:2a:43:67:
16:52:2d:72:b5:91:78:16:4c:e6:1b:6d:a5:ac:6b:e8:8a:9f:
7a:cc:3c:66:c8:c4:fc:94:13:37:8b:2c:24:87:ac:71:05:70:
a1:e7:f8:9a:4c:a2:a2:a3:06:4e:f9:3c:46:e1:c0:44:61:2a:
44:81:85:58:f1:cb:42:81:4a:2b:e8:a2:8e:c0:96:13:71:26:
29:22:8d:7c:ba:4e:65:c1:80:2c:f7:4a:c6:9e:4a:6d:cd:08:
16:c9:32:13:96:c0:fc:71:b8:d6:d6:68:e3:dd:95:13:fe:b8:
e1:1c:0e:99:8e:08:96:c3:c5:99:1b:73:4d:f3:34:d9:eb:25:
bd:28:c3:a7:44:e7:76:04:8c:83:8d:6a:0d:47:0e:17:d3:a4:
ff:b4:a4:c4:c0:df:8a:a3:f9:dc:ff:e5:34:be:11:b6:40:0f:
c8:41:c9:7c:80:c3:81:03:4d:53:57:a0:34:f7:08:1c:2e:fe:
2d:3b:ae:ac:74:cd:4b:d0:56:59:9b:25:b8:18:fd:33:7e:8e:
9f:c0:ff:93:0e:e7:ae:f0:03:67:67:13:26:30:a0:0c:c3:31:
5d:27:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:35:12 2025 by rpki-client