Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa
File: b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa (raw, json)
Hash identifier: IdAAY4g5TNWj27cklJRgbW+z2umT3Sb9O4rN6AX7K+E=
Subject key identifier: DB:06:71:37:8A:A2:19:4C:85:7D:FA:32:82:62:63:1C:97:5E:27:4D
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 147E81C340B5FF330331B296DCB133FFA030B35C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:f0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7e:81:c3:40:b5:ff:33:03:31:b2:96:dc:b1:33:ff:a0:30:b3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=58400bc183ff8ad1c3d988a2f5d30dfee237d341fa11e3ef3ce85cc49041288e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:cb:34:00:27:72:88:d2:0c:69:8f:28:a2:
a7:7b:8e:9f:b9:3d:e7:07:dd:67:de:4d:5b:a2:a9:
f6:70:1b:37:f6:98:ed:31:39:b8:ab:07:f3:27:5e:
d2:c7:58:7e:10:9d:23:3f:ff:63:ba:7e:12:84:12:
58:92:43:8b:4b:d3:c5:b7:73:ac:e9:4f:4c:fa:a6:
50:ca:4a:cd:23:e7:44:c7:ed:88:6e:0e:70:07:40:
1e:e5:39:1c:c7:2d:07:3f:c9:69:68:77:5f:2d:29:
83:8f:e8:fb:67:b5:54:d0:ad:b5:13:bb:d6:e1:b7:
80:77:74:ff:34:d4:09:e5:0c:18:83:0d:26:6b:ec:
51:15:a7:ff:f7:10:49:12:ae:4b:22:ee:b5:11:d6:
3c:51:c4:9e:3d:b7:d3:c6:92:7f:91:d1:3a:a4:d2:
a5:d3:84:1f:84:21:f4:84:68:ba:a3:38:21:8c:23:
e2:fd:5d:f9:b2:58:8a:20:c4:73:bb:62:2b:1f:16:
52:dc:d1:41:91:db:b7:76:e8:9e:2a:66:2a:ae:f9:
cd:74:2c:f6:62:3a:f4:1d:e6:c0:75:19:e9:4b:0e:
06:2e:c6:af:f2:25:66:76:3e:63:c0:b5:82:9a:bc:
f0:b7:46:34:ca:e1:c4:aa:45:39:3b:b0:ec:b4:fb:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:06:71:37:8A:A2:19:4C:85:7D:FA:32:82:62:63:1C:97:5E:27:4D
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:f0c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:f9:75:56:0b:8e:26:22:86:3a:0b:b5:f7:63:94:ff:9d:9f:
e7:c8:e8:30:d3:df:dc:1b:e1:24:56:69:f8:06:51:b6:2c:00:
09:41:19:b5:20:90:8b:1a:8f:55:fa:d0:ac:81:7b:8d:fc:20:
44:e4:19:0d:db:8a:b2:1e:fc:36:59:eb:51:a3:20:29:71:1f:
d9:87:52:e2:46:c9:a7:ac:e2:cc:79:f5:f8:69:9f:eb:22:de:
fe:57:56:ec:76:27:7e:53:88:13:6a:f7:6b:91:6c:87:92:f8:
aa:62:a3:31:fa:4c:42:25:0a:02:62:95:9e:bc:17:cd:3a:86:
72:00:3f:e3:fa:7d:74:77:10:22:49:ed:3b:d6:6a:12:b2:76:
61:24:d4:8f:71:dd:ea:a7:b7:75:27:1e:5a:1c:4e:cf:c2:73:
29:ff:e9:ef:34:b5:f1:87:e9:2d:86:2f:86:07:e1:c4:d8:37:
d2:79:aa:54:a4:34:87:6e:35:7f:3b:61:06:da:d7:d2:b0:35:
84:39:49:cf:42:8d:e4:e9:4d:6e:0e:5e:86:e1:df:cf:8d:2a:
5e:eb:73:1f:a5:b8:6d:8f:0b:75:13:70:d7:0e:48:c7:88:21:
1e:14:21:78:c4:26:ac:98:e3:6b:fa:a2:3a:3c:5c:1d:25:77:
7e:34:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:11 2025 by rpki-client