Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa
File: c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa (raw, json)
Hash identifier: 5MJbKd36KkkQCMjB5IPblF5YswsBkDqxh8h4F3sJeTo=
Subject key identifier: 98:CE:E5:65:4D:1E:D1:F0:BF:4E:CF:0E:17:50:C4:44:F2:C2:D8:C0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5780B5FCBD7797842D530A940A742E4F4A142DA8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:9080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:80:b5:fc:bd:77:97:84:2d:53:0a:94:0a:74:2e:4f:4a:14:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5aa8d18e1704f0402bec0d85e988b30e58564fe6150d3b9a959adb378c789f9d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:76:9e:d4:3c:d0:05:c8:67:ae:32:72:24:
0b:3a:c5:15:57:25:1f:0f:df:d3:a0:3f:03:a9:8b:
77:72:3b:3b:7b:b4:7b:c2:3e:72:27:ab:3d:df:a7:
e6:71:1b:77:4c:e7:5a:f2:9c:68:98:66:ff:a2:0e:
e7:1b:22:f3:d8:ef:08:d7:39:ee:42:ed:ce:06:53:
ce:8a:62:2e:e0:17:c7:d5:62:cd:cf:2f:9b:5f:ee:
8c:64:a0:1f:3d:86:04:bc:25:d1:be:bb:82:da:ca:
d8:a5:b5:de:90:31:6d:95:4e:8b:1d:3c:99:f0:23:
86:7b:c8:62:3c:8c:e6:1e:1a:23:b0:9b:bf:83:79:
3b:de:b6:2c:92:6b:c8:53:11:83:a8:71:11:97:28:
71:e6:85:59:74:12:3a:35:c4:51:e9:1a:2e:f5:a8:
19:70:d9:5b:be:4b:ca:ba:9c:be:2f:9a:5c:6d:24:
d0:ae:c0:a8:6f:03:02:f0:3a:19:d4:23:68:64:50:
a8:e0:17:d0:f8:18:d8:d9:04:19:c2:42:6c:0e:4d:
50:ad:fe:38:77:dd:f5:27:2e:af:c2:05:a3:31:30:
c6:ef:e0:63:e8:bc:cb:6d:68:18:c7:a6:a5:e1:e3:
ca:9c:fa:e6:bc:e3:80:61:13:e5:9b:70:22:58:cd:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:E5:65:4D:1E:D1:F0:BF:4E:CF:0E:17:50:C4:44:F2:C2:D8:C0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:9080::/48
Signature Algorithm: sha256WithRSAEncryption
37:5f:65:b9:37:ca:58:10:8c:5a:63:8a:2f:1a:48:7e:c7:aa:
d5:7c:c4:46:ac:3b:c7:9c:bb:88:fd:48:99:76:23:cf:b2:06:
2e:8d:06:bb:32:29:bd:36:a2:cf:d7:df:03:1a:c9:83:af:a4:
4d:6b:59:86:f9:22:7a:9a:72:d7:f6:ac:a2:84:57:01:75:a2:
c0:fd:7b:98:62:30:a1:07:2f:f5:e0:ee:63:ca:36:00:b7:e5:
fe:3c:3d:b7:ed:56:34:ca:75:5f:56:22:7b:08:87:c6:d7:1c:
4e:f0:fa:c7:87:5f:5c:0f:56:5d:36:7c:ff:d9:0f:e8:22:2e:
d2:c6:f1:56:c3:3e:0b:25:ac:5d:11:32:77:da:ea:51:2a:af:
a5:1d:2a:06:02:24:7c:d1:33:76:b2:90:c8:c1:b8:22:43:5d:
c9:92:d2:02:48:2d:43:87:63:3a:47:a9:f4:97:41:ed:23:56:
60:6b:ba:32:99:0d:74:4a:d1:4b:b3:c4:43:98:cb:45:44:7d:
dd:12:a8:0a:ab:d1:15:d7:cb:c0:f1:e7:d8:a6:1a:86:18:46:
45:11:40:f2:05:2f:54:03:ef:4e:d3:94:89:9b:d0:86:61:9f:
bf:73:58:eb:4d:eb:87:be:93:24:b1:e5:7a:e2:28:25:b7:d2:
15:71:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:27 2025 by rpki-client