Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa
File: 93628203-b0e1-4510-b021-531c535d1c54.roa (raw, json)
Hash identifier: 5et54tUSVtT6mqisT8EME9rck/kr9TedQmkwMxXMF+A=
Subject key identifier: 80:BC:5A:E2:CF:2C:9C:01:26:89:6C:DC:BB:9B:72:C9:4D:0D:95:C4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 699F9B48FE709B10AA39B1F7EA43FC93EB8E7207
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da12:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9f:9b:48:fe:70:9b:10:aa:39:b1:f7:ea:43:fc:93:eb:8e:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=46d5eb4e543e9a4c70eb57baaa09e2f0c00235496d043646109dbf18e3087a33, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:81:77:b6:7e:63:0f:2c:c9:6b:c5:44:63:28:
73:6b:c6:c6:2d:22:fd:c9:c2:10:15:c3:4a:6d:1f:
52:e7:35:e2:a3:39:87:6d:d7:4f:f7:83:75:b1:c5:
5e:fd:b4:ee:56:f5:2b:a1:f0:d2:20:af:37:8c:59:
52:17:cf:c5:1f:f5:f1:a7:86:ca:84:e9:8b:73:2c:
6a:66:c4:9c:aa:20:83:7a:52:87:25:3e:92:c2:1b:
6f:31:15:33:19:a7:70:42:ac:85:71:dc:40:2d:f2:
a8:93:b7:80:59:c5:7f:b5:2d:cc:36:bc:e1:eb:30:
69:a4:df:6e:ce:63:c6:f1:fa:b1:6f:ff:c8:8a:a3:
f9:b3:f2:a8:0d:97:77:f8:f7:f1:8a:90:0b:10:fe:
55:c9:66:b1:cd:ac:4d:43:0d:6b:99:d4:c6:0c:48:
43:c3:b1:e0:2e:fc:61:b6:76:94:f7:0f:fa:3e:ad:
6d:45:6e:5b:9d:3a:66:9a:fd:c7:4d:a9:72:06:fe:
02:ac:38:b0:06:9f:a7:82:33:cc:0d:a7:54:4d:6d:
ed:b3:91:87:7f:44:85:c1:78:a4:0d:63:08:dd:5b:
94:69:f3:5c:2c:d3:5e:2c:5d:1d:e6:8c:7d:2d:ab:
0c:c1:b4:07:de:d4:e6:77:6d:c7:f0:ec:ca:75:e2:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:5A:E2:CF:2C:9C:01:26:89:6C:DC:BB:9B:72:C9:4D:0D:95:C4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93628203-b0e1-4510-b021-531c535d1c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da12:800::/38
Signature Algorithm: sha256WithRSAEncryption
1c:bc:12:aa:67:51:c5:4e:45:22:b0:e5:3e:5f:96:79:d8:1e:
60:a5:da:bd:b3:ad:ca:4c:e6:cc:2a:36:fb:aa:2e:71:d6:bd:
eb:65:75:48:f2:26:84:f9:cf:2e:8e:57:61:10:6c:15:21:c4:
61:b6:77:fb:a5:8b:f3:fd:fd:cb:e7:10:f0:5e:1a:75:8b:ae:
1b:08:c3:bf:ef:ef:12:4f:12:b5:77:c5:d0:7d:0f:3a:27:8a:
72:83:7a:fd:40:ca:8c:75:7b:3f:7f:21:5f:4d:9f:9c:de:7a:
70:32:9a:7b:7e:bc:55:d2:f7:e0:39:64:f2:47:1b:0e:4f:d8:
d3:c2:82:6b:55:57:5a:b0:91:62:61:15:f1:a5:dd:68:98:69:
20:2f:42:74:3b:27:9d:1a:90:f1:bb:ad:9f:a6:34:4d:1e:ef:
26:56:c3:2a:b7:65:bd:e4:39:fe:b7:10:35:ba:a8:f4:99:ce:
3d:5a:9e:43:79:96:58:73:03:4a:c1:65:ca:18:d1:55:06:95:
81:b6:34:7d:ab:bd:34:5b:cc:af:d6:b6:be:fc:bd:e3:9f:64:
d7:a1:14:0d:a0:b8:a4:66:78:48:4c:ec:60:ba:3a:0e:ce:d0:
d8:74:8c:3e:43:a7:64:8d:89:dd:dc:d0:f4:b3:ad:35:c7:fb:
0b:20:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:39 2025 by rpki-client