Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa
File: b20a7e82-867b-4d4d-bff9-1bf42972706b.roa (raw, json)
Hash identifier: /0ePzdhaw+BTpYrQsdBREXMiRFsABs1+GRZXd54EduE=
Subject key identifier: 5E:D8:48:9F:14:75:37:B6:82:05:A0:68:CC:D8:68:8B:F3:29:5C:B4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5A8DA2944631CB988A12E3803E453DFF8539E15E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da32:4800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8d:a2:94:46:31:cb:98:8a:12:e3:80:3e:45:3d:ff:85:39:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=82014d3ec9a75097316d0fabcd355fe38c57cf8c1844e52fd8c57b4f1352d0da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:47:40:42:37:58:e5:28:0b:9b:66:b7:5b:
83:b2:b4:1e:aa:53:4a:eb:0a:6b:1c:2a:4c:68:47:
f0:1c:45:08:98:03:3c:97:2d:33:c2:03:45:7d:c6:
c9:22:e3:ba:cd:59:57:e6:43:80:c5:6a:28:d3:f3:
cc:f4:de:74:4f:38:04:43:41:2e:56:53:ee:9d:35:
e6:67:17:41:7c:ae:f9:a5:5e:0d:b7:35:46:42:c2:
be:9b:cc:59:b0:c7:14:e8:5d:df:a6:44:a7:85:83:
76:fb:34:89:32:0f:08:53:ab:31:16:39:95:0b:cd:
94:01:24:d0:cb:2b:ef:d9:79:26:39:80:78:d2:73:
b5:17:34:c3:e1:b2:23:a5:30:80:88:ca:96:53:b1:
92:9a:1c:72:13:22:a9:ea:ab:67:48:5b:64:f1:96:
3f:10:59:68:0a:ef:e8:74:48:fa:04:02:fc:14:b0:
2e:f1:a9:96:70:b9:13:eb:cd:6b:f0:f9:b0:72:2a:
f5:eb:9e:21:45:f5:37:74:15:e9:0c:a8:0c:0e:84:
18:e0:9a:92:33:b0:bb:f9:f6:0d:a7:94:e4:22:6d:
9b:b4:70:37:f1:27:31:af:50:70:89:f8:29:bd:77:
8c:f7:24:93:e3:8c:2a:39:4a:3f:42:ba:0d:b2:96:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:48:9F:14:75:37:B6:82:05:A0:68:CC:D8:68:8B:F3:29:5C:B4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20a7e82-867b-4d4d-bff9-1bf42972706b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da32:4800::/40
Signature Algorithm: sha256WithRSAEncryption
2d:30:6c:34:1e:f3:82:2b:7c:92:97:4e:a3:05:7b:72:55:5d:
c7:5d:d7:3d:b1:ec:61:41:30:0a:bf:b6:94:4d:b0:94:2b:06:
b5:97:59:38:7f:7b:aa:6e:6a:98:60:04:01:ca:9a:c6:6a:06:
eb:dd:af:cc:6f:ac:4d:ef:50:40:28:da:d5:be:52:f7:1d:38:
19:7d:21:c2:c8:f0:97:91:bc:5c:d2:fb:89:25:5b:61:47:8d:
f0:ba:56:4c:8b:7b:6c:88:dd:37:4a:5b:bf:19:db:ea:19:20:
b3:b9:b8:f9:ea:d6:be:09:bf:5a:5b:9a:64:26:b1:41:2a:15:
26:d1:c6:7a:65:c1:8b:42:53:48:74:48:29:d4:b9:81:ae:1b:
6c:82:15:55:5f:8d:25:dc:e3:b1:d7:a5:56:50:0b:c2:40:38:
78:b1:7a:04:46:bc:5b:de:eb:08:c1:02:64:01:e5:be:af:7c:
39:94:b8:2e:d9:b1:fe:70:fe:f8:44:b1:dd:75:5a:5e:4f:16:
bf:35:c3:86:19:33:af:2e:1d:fc:48:4b:15:07:e7:e9:51:9d:
69:b1:db:e1:1a:3d:b1:15:4d:ff:67:2f:37:e6:58:20:8e:0f:
bf:fd:c5:07:07:a8:84:ba:98:e2:9b:63:3f:46:9c:d4:d2:65:
a7:9b:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:25 2025 by rpki-client