Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aed464c0-6a36-4536-957a-b9c0a5a51ca2.roa
File: aed464c0-6a36-4536-957a-b9c0a5a51ca2.roa (raw, json)
Hash identifier: XnRTOt1J0EGyFDGWmQZIcTael/o7hoy3awSbHLBf3rg=
Subject key identifier: D1:B9:98:A2:E8:2F:62:8F:6B:09:C8:46:10:27:B6:CD:48:92:A3:06
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0135BAAA99F1C8043756342E6CDD29A3D910923D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aed464c0-6a36-4536-957a-b9c0a5a51ca2.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf1:2800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:35:ba:aa:99:f1:c8:04:37:56:34:2e:6c:dd:29:a3:d9:10:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=fc67e708c10f37d69d7d4a9c5bcaa80be2171223ca8d24996da18bf212195d2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:5f:80:e2:6b:e7:4b:b4:aa:d1:90:8b:d9:
37:65:b8:a4:12:ec:7e:85:43:3d:71:2d:96:f3:15:
16:29:a9:81:b9:46:fd:ad:35:c7:5a:07:74:e1:f6:
ea:e7:09:ac:01:f9:d9:7f:11:b0:2f:5d:14:53:0b:
5c:ec:60:de:a0:5d:fa:ac:a7:8e:3b:7c:35:ce:aa:
b6:79:dc:02:3e:67:d0:6b:e3:09:f7:58:77:2b:5b:
91:fc:bf:49:d6:bc:0f:83:16:03:04:81:81:62:a3:
cb:bb:b5:d3:57:6e:7a:4f:fa:08:c8:ab:e7:f1:72:
e9:7b:f6:5f:45:a2:68:23:1f:e0:b3:27:33:8b:e8:
c1:98:86:f3:f1:87:bf:cb:41:ae:e3:14:65:3c:1f:
46:76:d9:94:15:ac:42:62:11:8e:d6:c6:24:78:52:
8e:e6:3c:85:ef:e1:1b:38:4f:1d:40:21:64:5f:38:
f4:0f:29:d1:11:97:61:1b:a9:3a:21:54:31:bd:70:
ad:88:71:94:cc:c9:de:02:83:75:7e:fc:bb:44:99:
b2:2e:13:5f:2c:03:11:ca:7d:4b:73:fa:6b:18:7d:
4b:f3:ce:7f:73:7b:af:b5:7b:76:42:d1:d1:9d:4b:
55:69:a7:6a:4c:c4:47:fc:a0:60:a3:ab:d1:84:96:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:98:A2:E8:2F:62:8F:6B:09:C8:46:10:27:B6:CD:48:92:A3:06
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aed464c0-6a36-4536-957a-b9c0a5a51ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf1:2800::/40
Signature Algorithm: sha256WithRSAEncryption
55:47:fd:e8:df:93:00:60:6a:24:17:a1:6a:34:c2:7c:90:04:
65:99:a6:3f:54:b7:9e:e4:08:2c:e0:ca:a3:20:ac:dd:3c:9c:
90:55:45:7d:0f:bd:59:5c:2d:4f:47:eb:9e:35:c2:fb:26:02:
75:3b:3f:9f:69:8a:5b:bc:1a:ca:e3:d6:93:b9:5b:95:78:88:
05:d6:b1:a8:86:41:b6:5a:cf:86:d6:dc:22:0c:35:9f:81:c9:
27:2f:5e:04:62:40:69:50:14:6c:db:64:1f:76:6f:17:86:18:
43:08:4d:ee:65:4b:ab:4e:84:0a:80:79:04:92:eb:87:04:35:
76:19:7c:89:7b:71:34:ca:2e:3b:10:8f:c5:aa:d5:48:2b:b2:
67:01:0c:1e:e1:62:dc:79:92:85:10:7b:a3:cd:40:08:95:1c:
d6:d5:d4:21:aa:2a:04:12:c8:65:dc:57:81:09:0e:76:d6:97:
65:02:8f:4a:04:a6:54:48:ea:d3:04:5a:6d:9f:95:db:ed:f9:
51:e6:3a:d3:1e:1d:c4:8d:28:22:fe:c2:d6:e1:bd:b9:cf:b7:
03:c5:12:fe:5c:7e:45:36:e7:23:a5:72:56:f6:10:c8:39:ce:
9d:33:37:5b:bb:50:e6:93:7c:e5:08:e3:72:2d:c7:01:a9:2c:
d8:83:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:52 2025 by rpki-client