Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9433fe9-a966-4fae-87f4-03367d6b18b4.roa
File: c9433fe9-a966-4fae-87f4-03367d6b18b4.roa (raw, json)
Hash identifier: dihJgy++jDg4gBAU0AlQth3kArH6mi3LEWoSzI39TnA=
Subject key identifier: E1:45:4B:20:3F:69:B0:42:AF:66:E0:C2:75:F8:37:8D:9E:F1:D9:9B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1A83FFA5500336FA6B6E1436CA9BA245948D15E7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9433fe9-a966-4fae-87f4-03367d6b18b4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:83:ff:a5:50:03:36:fa:6b:6e:14:36:ca:9b:a2:45:94:8d:15:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=cc39e0d707440779bf271969c6596bdbdbaf6938d92b852d6e91df0d6acc8cc2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:47:2f:a6:ba:a5:f6:a8:94:52:4d:fa:dc:
37:1f:28:8a:14:08:47:60:6b:51:65:18:31:4e:39:
cd:6e:18:db:8f:11:dd:8d:9f:67:b9:fb:2a:7a:9c:
5b:b9:99:26:be:2d:d4:56:ee:01:d6:ff:0d:a3:69:
2a:fd:c7:f7:15:dc:a6:85:7d:f2:c7:1f:33:e3:e8:
86:96:d8:53:f2:fb:ff:fb:b7:0e:fe:86:5b:db:af:
47:89:1a:ff:e2:7c:fe:cc:58:16:8e:30:2a:76:f3:
f0:81:2a:79:a5:1c:53:5f:08:2b:30:54:e5:d2:20:
c8:0b:e1:f4:33:2c:61:03:bc:c5:e4:08:a3:9e:21:
a8:3e:21:de:38:a4:9b:80:f2:c2:04:42:be:64:51:
aa:e1:46:4c:4b:de:26:69:3f:07:fa:1a:45:3e:a3:
f7:f5:a0:d7:61:ed:0c:28:5b:52:b3:28:3e:63:45:
41:76:03:52:7a:79:df:0f:1f:47:2e:bf:44:8a:c9:
c4:1c:e0:fa:7b:51:96:85:24:be:64:86:d0:7b:3d:
aa:7d:40:d1:b3:48:9a:13:cc:dc:81:1f:4c:95:88:
59:dc:85:f9:a7:18:fc:40:71:50:8e:fd:cd:a1:81:
fe:a0:76:c8:a9:40:c4:d9:b8:e9:d7:47:29:0f:63:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:4B:20:3F:69:B0:42:AF:66:E0:C2:75:F8:37:8D:9E:F1:D9:9B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9433fe9-a966-4fae-87f4-03367d6b18b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:2080::/48
Signature Algorithm: sha256WithRSAEncryption
74:d2:79:b7:73:5a:47:ff:2e:b8:7b:80:6f:61:72:6b:f2:b2:
fb:98:1b:b6:a4:50:19:61:a1:6c:7f:0e:2a:af:0e:a9:a6:3a:
7c:61:d8:d4:31:c5:47:f1:dd:3d:52:0a:b1:35:78:5b:36:76:
9d:a9:21:6b:80:be:81:19:57:47:47:72:6f:25:79:6a:aa:8f:
5a:40:2f:48:40:b5:3d:ef:b8:c1:b2:9f:c7:67:b1:5f:45:96:
cf:aa:89:23:82:db:a1:8d:2a:98:bd:f7:23:88:d4:44:95:69:
bc:c4:41:f9:03:8e:24:21:19:82:e3:ab:90:84:b3:74:c5:65:
2a:76:07:4b:d9:13:62:b1:ae:b5:66:3e:2a:0c:ed:c1:22:99:
47:95:8f:64:63:32:74:09:1c:67:4b:51:65:dc:16:d4:9b:a4:
59:2a:73:2e:59:f6:b5:4d:cd:2e:4b:b3:36:c2:7d:f4:a2:74:
8b:85:d7:69:5b:a8:ef:77:10:b4:8f:25:51:3b:92:6d:eb:49:
4f:19:75:5f:5b:da:cc:1f:ab:10:03:cb:75:72:63:92:a8:3e:
9b:d9:fd:83:b7:5e:9e:2a:18:85:cc:5d:9c:df:86:3d:97:57:
6a:cb:a0:4f:7a:f5:f2:d3:a4:80:de:75:51:39:b3:90:3a:56:
8c:dc:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:51 2025 by rpki-client