Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa
File: 96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa (raw, json)
Hash identifier: ebKx5uZBdUqrc0DpwIlqwuEoVKxaIZ/fuFDju2Qs8kU=
Subject key identifier: 12:99:48:FD:92:51:56:1D:B7:77:A4:CF:5A:24:CB:A3:AF:05:99:DC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 062CAA148D3B5D108DADBD64012523E04C604029
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:c880::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2c:aa:14:8d:3b:5d:10:8d:ad:bd:64:01:25:23:e0:4c:60:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6ad520502b72331e9d1adbcc43bd40439a976ddc7a5a5aaf5ea05cefe90d49c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:61:e5:06:a7:e3:b1:42:84:ec:11:2f:c9:
47:16:7f:68:99:18:7a:3a:b1:27:62:52:e0:43:16:
a4:25:a0:d1:0e:db:ed:ae:b4:c4:f0:d6:d7:b0:05:
1c:9e:f4:e4:84:b3:94:d6:dc:f5:2e:b7:5d:66:a8:
54:91:01:11:6a:82:d7:ff:e1:bb:34:87:fd:0b:c8:
56:e3:06:db:78:1a:81:a1:ab:4e:1c:f7:78:96:b0:
b7:11:07:48:ed:fe:89:a6:8f:4f:cd:93:0c:37:ab:
2b:84:b8:e9:07:d7:de:6b:02:42:d8:7f:8d:63:54:
32:1a:e4:a5:be:dc:d3:bc:9f:6a:b3:83:be:88:26:
05:cb:96:70:f6:46:52:fa:24:05:75:b5:4f:dd:84:
5c:84:4b:a6:ac:08:c8:6d:1a:6c:4d:b0:b7:e6:50:
7e:cc:fa:2b:00:00:86:12:ed:bc:88:7a:75:71:73:
fb:39:7f:4d:33:90:c6:5a:0e:db:6b:3f:57:bd:59:
60:9f:21:96:8b:f7:cf:37:a3:1f:16:f0:06:f8:ba:
8c:b9:7d:4c:13:e9:52:25:bb:cc:d4:6b:61:b2:07:
11:f5:70:ba:99:a0:10:86:e9:53:d0:b1:10:26:fc:
f9:20:57:fb:d0:cf:d0:2b:b2:d1:ea:45:4f:b8:6e:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:48:FD:92:51:56:1D:B7:77:A4:CF:5A:24:CB:A3:AF:05:99:DC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96e67137-6cb5-452b-b09c-d6c6a9f5411c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:c880::/46
Signature Algorithm: sha256WithRSAEncryption
6c:95:b0:f6:cf:41:3d:7b:15:e6:84:8c:84:67:1a:45:1a:ad:
1f:33:a8:58:67:00:2a:ec:09:1a:29:88:bf:2a:c3:cf:87:4a:
02:59:3d:0b:ab:f1:e9:e6:39:46:65:ed:43:de:c1:f3:35:e9:
7f:e6:52:a3:af:4a:f2:43:0d:6a:22:75:c8:44:f9:be:f1:6d:
46:83:20:48:8b:ac:e1:85:52:9a:9c:c0:84:c1:e5:06:26:03:
60:67:54:ee:33:9e:78:e4:8c:93:c7:c0:6a:f9:86:38:3a:38:
3c:57:1e:1c:b0:e1:62:0c:2d:15:95:a7:32:1f:1e:b3:b6:7d:
a0:7d:e7:b0:53:4e:3b:23:af:35:2c:9f:b2:16:6a:ba:c0:02:
b7:bb:29:b5:cf:ae:4d:8f:ae:1a:35:20:95:fd:7b:53:3f:b7:
f6:54:33:f6:c3:69:87:57:95:6b:4f:af:e0:50:b8:69:0a:6a:
e1:a8:85:61:7d:64:a0:0a:18:81:b4:be:44:dc:8a:48:33:f9:
32:d8:92:34:1e:c8:45:a3:67:e1:fb:7c:71:cb:d5:35:d0:ba:
77:8e:62:86:2a:64:58:15:2d:bd:e4:2b:a6:8c:63:91:de:9d:
da:62:2f:a2:b6:79:d6:98:c8:7b:74:3e:15:a9:dd:52:ab:19:
b7:b0:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:43 2025 by rpki-client