Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa
File: c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa (raw, json)
Hash identifier: lL5t+nAJZ06UmNOsf8k9022R8AANxT326aJv1D3RooI=
Subject key identifier: 34:29:C1:27:4D:0D:D8:D3:C7:FA:48:DD:4B:15:23:2E:F0:EA:BD:E6
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7DEA9FA57710DC0C6D7FC39F6A6DD26CAF495020
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da12:8400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:9f:a5:77:10:dc:0c:6d:7f:c3:9f:6a:6d:d2:6c:af:49:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5d026f9896fc1171b7ed4f189a4964254ad674714deabf8482c91359982ddd1d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:10:ed:af:55:bb:66:b7:d4:0e:d3:f8:e9:
ac:dd:99:eb:fd:6a:82:fa:15:61:94:c2:87:ff:ee:
a9:8d:67:10:c1:c4:dc:02:27:32:aa:d3:6a:cb:22:
a9:76:82:52:fd:6a:d4:5d:06:1b:1e:ec:80:95:1b:
62:13:33:69:f6:f6:dc:be:ab:b5:08:9f:05:2c:4a:
e0:b0:39:9a:d6:25:4c:6d:d6:fa:32:07:f2:0c:c7:
98:8e:b1:9f:85:f2:9d:c9:87:49:f0:50:6e:f2:93:
d7:09:5c:6d:49:32:50:c1:c3:70:f3:29:a2:d2:d7:
06:ce:b9:9c:64:0d:1e:bb:a3:87:20:52:d5:dd:52:
97:58:9d:3c:a9:5c:32:ec:e9:b9:06:57:0f:5f:d0:
bd:fe:13:82:f6:4a:5b:15:28:39:35:48:fa:70:d1:
ec:fd:bb:91:55:85:dd:50:f9:46:0c:0e:78:76:8f:
fb:36:fa:c1:d4:3b:49:12:35:d7:1b:01:da:90:01:
7a:34:96:62:6a:85:6a:42:e1:1c:74:07:be:66:2d:
ac:55:f1:1d:eb:6b:18:93:2e:ed:97:99:eb:cd:a7:
f7:a4:af:e1:4f:76:78:ef:b3:9b:dc:69:9c:7e:37:
a5:2a:c2:68:ce:c7:0f:94:5a:9c:a0:61:b9:a2:01:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:C1:27:4D:0D:D8:D3:C7:FA:48:DD:4B:15:23:2E:F0:EA:BD:E6
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da12:8400::/38
Signature Algorithm: sha256WithRSAEncryption
76:a8:fa:43:e8:b4:92:86:c0:98:de:ea:32:df:92:60:24:bc:
9d:06:cc:b9:97:2d:3b:60:0c:96:e5:e4:f3:7b:df:d0:38:8b:
2e:89:50:46:eb:b6:9c:87:18:d8:d5:c1:9f:a2:2c:3d:fd:b0:
03:0b:27:4b:84:7b:3c:6e:52:6d:3c:20:18:b0:cf:c5:6e:b6:
1a:12:7d:36:6c:54:12:77:e6:4e:ff:98:38:40:55:80:9b:9a:
4a:e2:d2:72:3c:f9:60:0d:9e:70:75:10:cd:d4:06:11:91:d2:
cc:29:bc:bc:ce:95:28:e3:1d:f2:ac:13:fa:73:27:0a:55:9e:
0f:bc:e5:58:ed:25:77:36:65:be:f6:2a:fa:06:a7:db:04:19:
a7:09:26:46:d2:08:51:e6:2d:89:c2:cb:85:23:14:a5:77:62:
d1:2c:5b:07:40:71:f5:bd:2c:58:80:b6:13:a1:bb:f8:47:b3:
00:8a:b9:2c:b1:25:e2:0c:40:72:ea:7b:04:89:f8:e5:dc:c5:
e1:a0:c5:ae:47:22:1d:d8:bc:42:e5:1d:21:40:14:8e:c5:71:
16:6e:92:af:e2:8a:bb:fc:43:2e:ed:ec:de:60:32:be:df:06:
51:dc:03:52:e9:c8:8d:cb:5b:d4:bb:33:90:7f:57:e3:ac:80:
c1:5c:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:19 2025 by rpki-client