Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0d0474f-3a63-4312-ba91-4caeffc8b819.roa
File: a0d0474f-3a63-4312-ba91-4caeffc8b819.roa (raw, json)
Hash identifier: Ut5eiqif4WZCyEszeMtc/Yd87YQN8z0MDNRQO8EElyc=
Subject key identifier: 07:16:48:FB:98:2E:38:2D:9D:A5:77:6A:47:65:5D:D4:0A:75:C7:1F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4BC4CFB36E47C1BC7A53EE33FF771742A09C0150
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0d0474f-3a63-4312-ba91-4caeffc8b819.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:4800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c4:cf:b3:6e:47:c1:bc:7a:53:ee:33:ff:77:17:42:a0:9c:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=bb2ec3da7eaf7134723d316096d7d019f86aab81de8b9d566ef6eb937d9bc85f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:c2:fb:75:b0:1a:a9:f4:b1:c5:3f:2a:23:
fd:08:84:a6:94:9a:28:7e:1f:2a:ce:3c:5a:82:a7:
7f:c4:5f:17:c1:7c:d7:46:3f:9e:91:ae:17:e7:75:
18:72:89:75:01:e7:35:ba:00:3e:bd:c4:28:46:91:
50:21:31:fc:87:63:6b:0a:b6:b2:7b:ce:07:24:9f:
32:91:0e:69:f9:e6:58:e5:64:7d:18:4d:c5:70:f4:
b4:de:eb:a5:6e:9e:ac:bb:6a:ab:19:d1:ea:16:51:
56:d0:95:11:02:46:05:28:38:ad:b7:fb:46:67:00:
84:45:c8:0d:c6:30:42:b4:6c:46:79:4f:60:da:07:
6c:90:46:04:c6:c0:63:7a:b2:21:c7:65:1f:5c:a1:
00:77:1d:45:49:66:9e:14:80:2a:95:75:34:0a:31:
7f:0b:08:15:e4:41:52:dc:69:8f:f0:3d:59:4e:fe:
7e:ce:78:06:d3:22:b2:24:09:b0:46:38:35:cc:2a:
c2:dd:ad:14:cc:f0:f2:8d:8f:de:7d:84:08:81:6c:
27:9c:88:fa:1e:b3:92:5b:76:05:e0:87:ba:13:d4:
d7:63:90:98:4f:66:b9:7b:3f:15:91:d9:7a:84:e2:
23:28:eb:ff:a8:28:57:a2:9c:08:19:42:96:f8:28:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:48:FB:98:2E:38:2D:9D:A5:77:6A:47:65:5D:D4:0A:75:C7:1F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0d0474f-3a63-4312-ba91-4caeffc8b819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:4800::/40
Signature Algorithm: sha256WithRSAEncryption
13:0b:dc:31:82:65:b3:55:e1:03:7b:f2:f2:e7:c1:cc:06:3b:
97:dc:f4:3c:2e:28:b5:49:81:47:02:5e:e8:de:d4:35:82:28:
de:3c:16:0b:61:31:ee:ec:ed:55:b1:03:c3:31:12:25:34:db:
a3:ec:63:09:1e:83:75:e8:ae:82:a1:8b:17:2f:78:61:44:bf:
95:32:57:28:31:05:be:38:36:07:41:06:c1:29:f1:c5:8d:62:
d3:de:6a:f2:cb:1b:24:fc:38:c1:a2:e9:18:92:8d:bb:0a:6a:
44:05:0e:24:0e:2d:cf:71:b6:a7:7d:e2:10:02:b8:f6:5f:5d:
5d:60:02:f1:ef:5d:11:50:3b:7c:d1:fd:ff:70:a7:54:52:5d:
66:94:ad:b2:47:5b:b7:ed:16:06:27:75:5d:57:96:50:de:72:
ca:2f:2e:bb:e6:0b:4a:c3:bd:8a:a9:d0:50:93:60:5c:a9:71:
85:15:91:e1:f7:f2:0a:95:38:65:c4:30:42:01:2c:fe:98:af:
86:bc:75:ff:be:ff:20:73:c8:3b:cf:57:82:a7:ea:ce:3b:0e:
84:51:6b:14:35:c6:6f:8f:ff:84:64:40:21:3e:6e:26:85:df:
7d:e7:3f:97:76:ad:2b:ec:58:08:6e:b7:fa:55:94:ba:e0:2e:
1b:9d:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:38 2025 by rpki-client