Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa
File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json)
Hash identifier: 5R3KOnCAfOGkd5vb8KVBcX4wcyIHsEV3va2+vjilTjc=
Subject key identifier: 12:BE:46:C2:03:2C:1C:7B:F7:A7:08:3E:67:D3:62:A1:81:9B:A3:EA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6596E620B01B23F43EF72B4A22E08901378E226C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da13::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:96:e6:20:b0:1b:23:f4:3e:f7:2b:4a:22:e0:89:01:37:8e:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=beb9c6db81d470e9cc6e0b52693c6e547b232745bfeef6d9acdfe4e8da20dec4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:68:94:7c:2e:f5:ed:07:d0:e9:43:2c:74:
22:57:43:4f:2a:c6:06:e7:83:d1:c4:03:92:cd:f7:
52:ff:ed:21:a9:b5:24:43:88:38:a5:0f:cb:21:93:
da:91:b0:f3:5d:a6:ae:dd:de:36:a7:06:49:6e:23:
0e:df:64:84:b2:5c:eb:03:1b:a3:76:d3:12:30:57:
2a:0e:41:59:bc:57:65:66:45:22:cf:a4:2a:63:56:
5c:2f:93:d2:8f:e5:94:a4:27:ec:e0:b0:38:43:5f:
99:89:3a:64:77:e3:d1:4a:89:a7:d0:e4:58:2a:8e:
59:17:31:26:bd:2f:3b:bd:42:fb:94:8a:01:ff:0a:
35:4f:7a:6f:b8:ab:5a:d8:bc:c1:07:70:1c:b8:e3:
9d:77:9b:ad:3f:a6:15:d4:e5:fc:23:41:ad:cb:ca:
42:fc:40:07:de:6e:d2:0d:f2:15:63:97:64:67:16:
70:a1:e5:3a:34:0f:ad:af:1c:ef:45:11:26:ee:1c:
2b:54:bd:9d:31:52:16:6b:b1:8d:20:17:6a:48:e5:
a9:dd:0f:cd:04:4d:be:21:01:9c:ca:5c:9c:4c:56:
7a:69:d4:ad:91:8a:fa:b8:31:2c:3e:06:41:dc:59:
34:c9:60:1d:68:45:34:de:ec:4c:83:0a:5a:c8:b3:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BE:46:C2:03:2C:1C:7B:F7:A7:08:3E:67:D3:62:A1:81:9B:A3:EA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da13::/36
Signature Algorithm: sha256WithRSAEncryption
26:e8:3b:ae:17:83:40:6a:cf:71:d3:7e:35:cd:64:1b:85:2f:
5b:21:71:d9:58:1c:bc:85:0c:77:ca:7c:75:0a:c4:41:a4:a3:
d9:ea:cd:9f:b4:79:1d:48:2f:5b:c3:e8:fb:a6:e9:c6:7e:43:
a6:5a:cc:77:26:c7:56:61:85:cc:fe:90:10:ea:6c:f4:3a:d8:
24:03:79:04:cc:0c:42:2a:45:95:ef:c9:dd:ba:f0:c7:d3:90:
70:23:e6:88:52:de:a9:37:c6:af:74:e8:9a:e6:0b:64:d3:da:
ed:21:87:8a:b5:f2:a2:68:e5:82:77:ac:7f:8c:9b:d6:b9:61:
9c:5a:ee:0f:d3:d5:1c:63:1d:f0:03:14:da:bb:50:e5:e3:b7:
5f:d5:dc:99:e1:97:68:f5:71:a0:22:00:a5:24:f7:a0:32:1c:
d1:31:d4:4d:40:8d:51:8f:63:b9:1f:f2:c1:f2:d0:07:ae:62:
1e:42:39:6e:58:61:ad:77:fd:27:a2:5b:2b:05:3c:e2:d2:b4:
e7:8c:d2:b0:cd:c0:54:b1:54:a9:3e:f8:c8:75:ae:e4:cb:30:
7b:7d:2c:cd:33:04:a6:39:49:15:e5:c3:e2:06:bd:b6:0f:72:
a4:88:79:51:ba:26:83:d5:cf:6b:04:27:db:55:08:8c:65:cf:
5d:3d:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:00 2025 by rpki-client