Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
File: ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa (raw, json)
Hash identifier: r2zELWifkyh0Mt9nuo0XKSqqMLvvz5UVwzuxXxSq4Kc=
Subject key identifier: E8:96:B7:56:FB:79:E9:75:A5:3B:E4:FF:9F:03:36:22:BE:28:E8:7E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 52590C35567AF563C2B7F4B2E46AABFA2CD5D4E9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daa0:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:59:0c:35:56:7a:f5:63:c2:b7:f4:b2:e4:6a:ab:fa:2c:d5:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f8024386ef4b303fbea2c6615abfe48d8d26924a147579be2bdce840900b91b8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:a8:4f:f2:51:e6:d0:df:18:77:c5:54:37:
b9:85:d0:4b:5f:de:e1:f5:41:eb:08:d9:06:b4:0e:
73:48:c0:a4:86:93:da:6c:da:2f:f1:85:42:5a:3e:
64:ca:4d:59:74:35:a3:5b:6d:44:ee:e9:e1:7f:29:
03:b0:2b:4c:f3:0f:e3:f2:b3:74:ce:1b:c4:6f:d7:
f8:1a:ad:09:ef:d9:ba:f8:e9:ad:1d:90:67:06:65:
b5:64:6e:23:f5:17:de:ac:2b:e1:da:32:12:ed:59:
4e:b4:78:22:b2:57:45:3a:db:53:63:d5:3b:88:c3:
2c:8d:58:cf:2e:3b:a1:90:27:4a:db:7e:33:05:96:
5c:4a:58:5d:2c:03:7c:81:c1:ff:9e:11:20:22:d0:
5e:a5:81:4d:0e:df:90:fb:3b:8d:af:6f:29:34:d8:
75:0c:f5:e7:0d:f4:56:be:9b:ed:ff:0d:0d:ef:a6:
2b:9a:fb:44:d9:cd:f9:53:a7:ba:63:59:d5:04:8b:
18:ab:fa:6a:ad:41:7f:30:d2:2b:38:2a:4c:66:38:
0e:54:a1:a8:04:b9:f0:e4:f1:c5:2d:a0:9a:e5:f6:
2a:19:5d:f1:06:1e:e5:a5:68:db:fe:96:6a:1d:77:
66:ec:f8:d3:df:47:32:ba:38:9f:97:b0:31:c9:a4:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:B7:56:FB:79:E9:75:A5:3B:E4:FF:9F:03:36:22:BE:28:E8:7E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daa0:4000::/40
Signature Algorithm: sha256WithRSAEncryption
88:b8:c8:e6:8d:b9:66:bc:60:a9:44:c1:93:8b:87:f4:85:47:
39:f8:37:cf:53:3b:d0:af:a6:17:8c:a6:cd:85:ba:75:2b:1c:
9f:71:9f:f2:53:76:3e:65:68:33:e4:b2:ed:7f:ca:f3:3e:ee:
14:d8:14:b9:a1:dd:da:66:9e:af:5d:c9:92:b4:e7:71:35:d7:
db:e4:75:ce:92:2a:b8:87:95:b6:16:d6:eb:ce:1a:df:66:47:
f8:70:5d:1e:b3:1b:60:70:26:2a:93:73:ff:f2:a9:23:29:9c:
73:08:b5:f9:3c:a1:0b:60:fd:c2:21:7f:64:59:b5:9b:5a:c2:
ec:5c:e4:41:d8:85:ea:a8:88:58:0f:03:16:af:7c:50:8b:93:
c0:f1:79:df:a0:44:c3:fb:8b:8a:3f:ff:9b:a6:b8:d6:cb:89:
3e:3a:41:5c:ac:d0:32:05:45:40:54:24:c1:ca:6e:54:af:6f:
d6:58:d4:b9:a5:a9:fa:1d:b3:80:38:e5:c3:46:ba:dc:f0:4d:
18:4e:c4:ff:5c:38:f3:33:77:a5:28:35:c6:90:2c:50:8a:b8:
d9:77:f9:a3:69:90:25:a8:1c:6a:0e:27:2a:99:58:28:ae:cb:
7c:1f:ed:24:b7:fd:c3:36:a2:e5:0f:9a:f0:0e:58:5a:f5:e8:
6b:ca:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:32:02 2025 by rpki-client