Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a8746c50-b2c6-438f-ad79-3b608da68b61.roa
File: a8746c50-b2c6-438f-ad79-3b608da68b61.roa (raw, json)
Hash identifier: 6x1Tp14bsK2k+CX+XhERB3nSWN1qYH0zAkDi/bjcOvA=
Subject key identifier: DC:2E:2B:3D:E3:75:7F:92:99:8A:15:9E:5B:65:5B:D8:47:AE:C8:EC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 27CED4A165AF9BAE40A674984E9BDD6202590E1F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a8746c50-b2c6-438f-ad79-3b608da68b61.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ce:d4:a1:65:af:9b:ae:40:a6:74:98:4e:9b:dd:62:02:59:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b2a65a3e7e8263357b346e9f2cb3928fdf119f6f41ec0343d7aa90d31159af13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:4a:bb:01:2d:e5:0d:29:f9:dc:c7:6e:d5:
c1:1d:2f:ad:8c:8e:cd:93:bc:a9:4e:a9:eb:fe:13:
12:22:79:78:96:f8:db:30:f1:ac:a8:6b:e8:81:9f:
01:aa:ce:cb:41:67:4b:43:0f:1d:0a:6b:ec:04:c5:
5b:8b:8d:4e:4d:e8:a2:8e:a1:28:07:6d:b5:db:8e:
31:95:3e:a0:db:cf:30:5e:02:38:32:76:57:c7:71:
6b:70:5f:ba:71:56:8b:e1:e8:db:7b:f6:49:6e:1f:
b4:48:ca:b2:6a:4c:4c:de:2c:f8:3c:d7:7e:8e:08:
7e:61:40:44:56:8a:68:1f:74:17:e7:0d:ef:64:51:
40:21:85:2a:ad:a1:78:aa:a7:91:6e:8e:0b:8e:13:
da:bc:eb:3d:f0:ae:21:e3:8e:f0:a6:ed:90:ae:51:
37:0f:73:4e:6e:2c:f4:4c:d2:ba:7a:63:58:71:e7:
2c:16:2e:82:7f:9c:ba:21:eb:7a:33:93:d3:2a:52:
9c:bc:bb:c4:8e:ac:33:7f:ac:16:c6:18:42:eb:91:
5b:b2:8d:2c:a1:10:5a:68:22:98:90:f7:a8:af:e6:
06:48:ac:cf:9a:d3:da:fc:1d:c5:15:8b:fe:ff:16:
b9:04:a7:4f:5a:ab:bb:d5:d6:eb:32:23:60:70:a4:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:2B:3D:E3:75:7F:92:99:8A:15:9E:5B:65:5B:D8:47:AE:C8:EC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a8746c50-b2c6-438f-ad79-3b608da68b61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:6000::/40
Signature Algorithm: sha256WithRSAEncryption
50:26:37:14:ba:49:ca:59:0a:c6:be:40:08:14:ed:ff:28:e7:
9f:19:01:9c:06:f2:21:aa:57:f6:ae:d3:1e:8b:d6:2f:b0:cf:
5e:d9:ef:51:27:3a:af:b0:07:a4:03:78:f3:50:03:47:44:ac:
94:38:79:01:ee:71:20:f6:2c:d4:67:6a:10:a9:c5:94:f2:db:
82:73:1d:2c:c9:ad:08:81:5d:dd:41:ce:db:a9:f1:cb:1d:b7:
46:dc:e1:72:e8:83:2f:7b:5c:46:72:d4:cb:d3:0a:7d:28:d8:
bb:a9:95:5f:4d:d3:b5:aa:17:60:f5:45:19:de:b1:77:84:31:
21:4e:9e:08:0d:0e:af:dd:67:75:64:6b:86:eb:8d:2a:ef:8b:
7a:36:c5:77:35:b8:fc:39:2d:9f:2e:6f:21:f4:a5:ab:be:81:
2b:71:82:ce:cc:ac:b9:f2:b1:2e:c6:32:5e:c3:7d:d3:04:54:
12:70:14:02:9f:21:02:05:bc:02:b7:9f:9d:70:23:57:31:0e:
85:03:4d:9c:3f:64:bc:ec:27:39:e4:5a:70:c2:8c:a5:cd:50:
1b:c4:ff:e4:8a:5d:02:20:5e:0b:95:56:c2:70:e9:f1:42:06:
de:03:af:bd:f2:7a:81:50:68:8d:cb:58:0d:98:0b:c3:91:e7:
2e:a9:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:16:20 2025 by rpki-client