Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ebe8bb9-c3af-4458-b018-b6b59546a86a.roa
File: 9ebe8bb9-c3af-4458-b018-b6b59546a86a.roa (raw, json)
Hash identifier: 2S7Zw+dqOFu4/hMjKB1cCBbCTXoN/Tzd6mIRiMinXRk=
Subject key identifier: 7D:BC:6C:2B:14:2C:01:7E:3B:A5:F3:F4:C4:17:7D:3D:75:4A:B9:AD
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7F78EF1A36CC34A078DD5A13670FAC8574BA1C41
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ebe8bb9-c3af-4458-b018-b6b59546a86a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:1040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:78:ef:1a:36:cc:34:a0:78:dd:5a:13:67:0f:ac:85:74:ba:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b3ea4152bdbb268ec46c195e5cb1689b26808f28e20306cf661c51dab4c66499, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:8d:16:6c:1e:d2:75:32:c1:c7:bd:40:fe:
75:f7:3e:ae:db:9c:a8:a3:d3:ef:85:ac:48:ed:db:
16:fb:eb:3f:2c:4a:a0:26:a6:d2:c5:cb:62:df:bf:
97:4d:1e:ab:95:7a:2b:08:e9:7e:fa:79:10:67:54:
52:21:87:40:cf:f8:77:39:a5:9c:06:31:0b:f5:df:
16:ef:91:0d:b0:8a:34:85:1e:da:de:e2:aa:bb:4c:
b7:d5:6a:a3:37:60:6e:d1:69:d5:c7:94:de:a3:5d:
5e:0b:3e:ae:df:ee:4c:af:ee:f9:e4:09:b5:b6:61:
3e:e8:0b:be:cc:de:1b:52:9d:8f:da:ad:36:3b:32:
48:fb:17:cf:b8:cf:a9:61:ec:cf:2c:3e:3c:b0:df:
a2:34:e2:70:f6:b3:4a:1c:90:94:26:7d:aa:a2:e8:
85:85:16:b2:01:23:32:1b:f6:a7:a8:eb:a1:7b:07:
72:14:4a:5c:ee:ee:af:e7:cb:f9:75:62:7c:f2:70:
89:06:00:6e:73:b7:6f:24:a9:9a:9f:38:e4:9e:af:
f2:3e:00:ff:3f:a8:2d:64:38:63:2c:e3:37:08:ea:
23:ab:2c:35:2d:1a:9b:a4:dc:50:8e:b0:1e:81:b0:
06:75:7f:48:db:ad:5e:bb:b1:e2:56:6f:4a:3b:07:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:6C:2B:14:2C:01:7E:3B:A5:F3:F4:C4:17:7D:3D:75:4A:B9:AD
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ebe8bb9-c3af-4458-b018-b6b59546a86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:1040::/46
Signature Algorithm: sha256WithRSAEncryption
a4:99:84:9f:ab:96:a3:52:98:17:16:5b:0f:fb:3c:3a:50:36:
d1:63:38:2e:e2:91:84:8d:00:72:3f:7f:4f:0c:19:a8:df:a3:
ae:87:cc:05:07:1c:5c:78:c7:3c:96:c6:3a:90:48:ef:20:ec:
0d:c9:eb:50:43:91:2c:60:f8:cd:97:de:9e:e4:7a:47:62:26:
ab:2e:62:fa:96:fb:86:30:24:34:f7:21:d2:de:7e:4e:c1:e3:
e6:70:1e:7a:24:a0:c8:3c:ce:b4:8c:5c:46:6a:5b:41:a5:27:
5c:92:ce:f0:5b:b6:83:7a:30:f7:4a:0c:5c:d1:c1:b2:be:40:
7e:45:94:e5:c2:45:b2:60:61:45:c9:d3:01:bf:95:c6:48:5f:
75:2b:37:16:4c:3b:e6:e6:15:94:bc:51:59:6a:80:24:b3:af:
75:cd:fc:e6:62:7d:66:73:f2:46:42:6e:07:64:66:0f:8e:29:
b3:c9:0c:76:5d:9b:47:d8:3c:38:55:5c:9a:52:74:ba:f7:3e:
e0:91:8c:3d:26:69:28:6e:6d:93:23:c7:10:76:d1:1e:fd:09:
08:5d:2c:c4:85:ee:05:db:59:6f:41:9c:35:14:37:69:f1:43:
c0:40:a4:f5:c3:42:45:fe:16:d3:29:dd:84:01:7e:e3:0b:76:
f1:1a:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:10 2025 by rpki-client