Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa
File: 8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa (raw, json)
Hash identifier: Lh1JMMJtR0+CMc5Qk3sGOJp08ojXVcYwhSWQ9GwAahw=
Subject key identifier: 7A:96:6D:4F:84:8C:71:E6:AD:A6:A2:7A:BC:DF:7E:ED:20:54:7B:10
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3E1686BB53EAAA2D1888B791FB40822F415F5865
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:8800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:16:86:bb:53:ea:aa:2d:18:88:b7:91:fb:40:82:2f:41:5f:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c6c1121d0d562ecd0c48dd871265c0a937eefff7278398c27836d13ae34fa807, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:52:c8:96:2c:0b:de:7b:e2:36:ca:22:0f:
fe:d9:74:ee:bb:54:85:90:54:16:7c:da:12:a9:04:
c7:ea:ce:57:46:15:20:f0:97:04:65:50:7f:c1:8c:
35:93:11:53:e0:f6:d0:cd:c1:8a:3a:58:db:5f:f9:
ad:58:b6:af:20:35:28:15:98:7e:a2:c2:7d:85:08:
93:8c:37:31:25:63:aa:c1:b7:e4:99:2b:63:12:3a:
43:e9:e5:85:c2:ca:70:04:dc:94:c4:29:85:4f:34:
89:d8:7a:4e:81:30:40:82:c5:68:2a:db:a1:85:8f:
5b:43:5a:ad:ac:50:d7:37:64:05:a0:2b:ef:bc:e4:
e8:44:ad:ba:df:0a:39:21:bb:13:88:96:a4:e9:1d:
46:30:41:a7:29:ed:b2:d1:a0:64:16:b4:96:66:c2:
9b:75:c8:e4:15:77:51:a4:54:a9:e3:c1:56:01:b4:
e2:fc:ad:28:5b:bf:9f:10:53:1d:f7:e3:b9:11:53:
cf:79:da:f1:7b:f7:0d:29:a1:50:3d:d0:ca:ae:1a:
b9:39:3c:2f:8c:4c:a3:37:dc:56:2e:c5:d6:b4:d7:
9e:6b:e4:3d:11:8e:3e:04:6e:ea:b6:e0:8d:af:89:
37:a8:e3:07:f2:f8:1a:e5:8e:fc:97:4d:a6:19:bd:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:6D:4F:84:8C:71:E6:AD:A6:A2:7A:BC:DF:7E:ED:20:54:7B:10
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:8800::/40
Signature Algorithm: sha256WithRSAEncryption
5d:e0:d0:29:84:aa:9f:e3:0e:16:a8:2a:cf:93:f2:92:1a:41:
ac:46:81:b7:09:37:97:6d:d2:87:d2:30:df:bd:4d:06:f7:77:
62:8d:60:84:5c:dd:2e:54:ae:36:c6:83:4a:8e:36:82:54:bf:
7e:0c:fd:a9:65:80:81:a3:fb:ea:df:fb:c7:2c:f3:73:a2:38:
d2:a3:80:d5:15:bc:f6:36:58:73:64:03:f1:3b:8c:81:87:80:
f8:76:4d:52:62:f0:30:04:dc:ce:2b:ec:72:8b:54:65:26:89:
10:32:61:0b:25:e9:b4:89:43:32:ca:97:39:d4:fa:72:b2:ba:
c3:2f:d3:19:ff:5a:12:ee:9f:f8:c6:8d:45:ec:89:06:cf:c0:
ab:d7:8e:3f:3c:f0:1c:b9:e7:8c:14:75:89:ee:9f:33:7b:27:
42:fb:24:eb:c2:05:24:ee:51:85:cd:0f:53:e0:75:6e:59:9b:
d3:04:ad:d8:51:ea:e9:08:b3:11:84:a9:09:1c:b8:08:8e:49:
5e:63:2c:d1:60:c3:0a:75:12:4b:5c:ac:c9:a1:0d:a6:c2:a0:
b9:4e:db:dc:53:d5:da:38:de:5c:a7:43:38:ed:85:b2:8c:fd:
58:51:54:70:80:26:fc:00:4e:63:5e:fd:a1:aa:a4:56:ef:c8:
af:04:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:52 2025 by rpki-client