Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c53a68e4-6b3d-4fba-a3e7-7c778c3b46b6.roa
File: c53a68e4-6b3d-4fba-a3e7-7c778c3b46b6.roa (raw, json)
Hash identifier: 91VaZQ9EuydPZ6tPmoOYFp85c52b/UfKkucypmualGI=
Subject key identifier: 20:F0:9F:F9:F9:23:4A:03:35:7D:41:0F:F9:AF:AE:6A:D1:B2:43:19
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6914511C910C803A6147DB13A9149038F1539C81
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c53a68e4-6b3d-4fba-a3e7-7c778c3b46b6.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:b040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:14:51:1c:91:0c:80:3a:61:47:db:13:a9:14:90:38:f1:53:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=177bf9ebee0bc9bf27c3a90b36d9152481d253c842cb8846ba78738ebc31f9a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:c6:6f:4e:fd:b7:33:fa:97:ad:9a:18:d2:
28:0e:0e:bd:a2:29:e1:a2:2e:81:4b:6c:ef:2c:a0:
66:f4:ec:63:14:1b:ef:cd:a6:af:21:76:31:72:df:
9f:95:a6:75:69:a7:6b:a3:d2:2c:c5:34:43:16:9b:
11:80:35:86:17:2c:6d:16:72:ce:eb:e6:5f:af:7b:
f8:40:03:a1:a3:99:6f:53:a9:85:0f:a4:77:fb:8c:
0e:c9:d4:5e:4d:69:f6:bf:76:07:31:7a:a1:9a:28:
92:a7:35:ae:93:0e:a3:a3:30:4b:89:0f:82:70:a9:
d1:25:16:10:f0:ed:57:8e:3a:b9:e2:69:cc:5a:69:
3f:f4:54:67:3d:f7:8c:b9:48:0e:65:88:4c:bd:47:
a1:d7:b9:01:7d:2d:7a:02:d9:fe:d8:46:8b:62:ed:
11:67:2e:05:26:d3:b9:2c:e7:7a:cc:da:50:60:26:
f2:19:34:7b:a6:09:bc:38:ab:99:82:32:00:df:fd:
77:9d:80:96:06:19:fc:85:da:8b:3c:c7:20:27:f2:
e4:ab:d9:90:18:5a:40:83:9a:78:6a:8d:be:c4:df:
80:0f:52:08:74:4c:ab:67:58:84:a3:72:8e:fb:35:
89:e1:3e:36:da:f7:96:c2:13:9b:a2:14:87:b1:2f:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:9F:F9:F9:23:4A:03:35:7D:41:0F:F9:AF:AE:6A:D1:B2:43:19
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c53a68e4-6b3d-4fba-a3e7-7c778c3b46b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:b040::/46
Signature Algorithm: sha256WithRSAEncryption
5e:2a:52:5c:43:95:c5:43:a9:e7:ea:b5:aa:a8:a7:00:5d:24:
d8:af:1e:f3:e2:ba:ee:5d:dd:65:81:b4:a4:b0:0d:47:4e:6d:
0e:fd:ec:9d:d7:95:4f:67:08:22:a3:6b:5d:55:92:fb:6f:d7:
e2:3b:03:78:bb:dc:7a:62:99:56:9d:0f:0b:55:ea:dc:11:64:
a1:0f:1e:f1:fe:ee:e3:f2:da:9e:58:ae:4a:6c:96:2c:47:db:
c1:75:f4:f9:f6:c3:d8:a2:4d:c7:f5:e8:5d:81:ca:5f:c4:dd:
6c:d0:74:f1:29:2e:e7:45:16:6d:03:1e:08:0b:6e:3d:de:1b:
ed:ef:c0:7c:72:8e:36:d2:4b:f8:43:0a:f3:4b:a4:10:e0:6d:
79:a3:ee:44:45:5b:a6:d2:d9:d4:d3:74:c7:97:32:0b:9c:3f:
b7:34:92:c2:8a:b4:cb:00:fe:5c:3f:c0:50:71:d1:dc:7d:ad:
32:28:ff:27:6e:d2:b6:d1:3c:06:6b:3c:fd:77:78:99:b9:85:
90:13:40:2e:75:46:2b:1c:bf:17:40:5c:5b:d3:15:8b:69:78:
0e:51:25:de:5d:4e:c5:57:53:71:b5:b1:a2:bb:58:96:20:1e:
49:6f:c8:74:a5:65:10:7c:54:88:48:2e:e7:33:85:5c:4b:fc:
61:7e:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:37 2025 by rpki-client