Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa
File: d1071032-5bb5-48fb-ad34-13668ce372b7.roa (raw, json)
Hash identifier: yLlPjvW3nDcJMwJZ73UzoZaxYZqey2xfP2DMCJwEaO0=
Subject key identifier: 6F:CA:8F:41:88:54:CB:7C:2E:7F:05:D6:16:B6:96:C1:AC:E6:BD:BA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6FD013D94545725FB6A8092F2F4D88664AEE0032
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2d::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d0:13:d9:45:45:72:5f:b6:a8:09:2f:2f:4d:88:66:4a:ee:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=533c7f703105c8aa6da108e72dfff31cb1df8a24681890eec006543ee1ebf5a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:55:27:bd:74:b4:7f:7e:31:2b:1d:cd:cf:
ed:f4:87:bc:33:7a:1c:1e:d5:3e:53:24:93:a5:2b:
a0:76:a1:27:80:e4:99:a1:de:0d:d6:00:29:e5:06:
f8:0a:48:2d:95:ba:01:43:b9:fe:7d:e9:c5:45:78:
06:3d:52:ad:88:5f:1c:77:6f:7c:fa:cd:ec:07:78:
33:9c:27:b4:a6:dd:13:bc:81:3a:30:8f:da:b7:5b:
5f:ab:30:c7:19:32:8b:f1:f6:ee:57:04:7f:56:ca:
32:bc:4f:4d:ee:ea:9e:29:dc:9a:bf:7a:e4:c8:ed:
42:96:ba:ae:d6:fd:ae:02:92:f0:45:ae:75:a1:66:
d8:0c:09:d0:b8:0d:94:e2:c5:31:5c:aa:a4:0e:5e:
9c:69:85:b9:6b:92:02:f6:e3:a5:16:6b:07:c5:fc:
48:3e:03:c0:62:bf:89:af:e0:c8:4f:17:25:99:92:
16:e2:38:1a:a8:83:8e:06:b4:af:60:26:5d:7b:57:
69:b3:76:8f:c2:7e:25:87:95:2b:d9:f5:f1:7c:80:
25:c9:43:1f:1f:c5:7d:18:aa:52:5b:2f:c6:4b:18:
e3:9b:a7:75:29:55:9c:7e:f3:b2:48:30:66:00:0d:
e4:e7:6d:d6:d0:6d:75:c0:59:f7:84:88:d6:d1:01:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:8F:41:88:54:CB:7C:2E:7F:05:D6:16:B6:96:C1:AC:E6:BD:BA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2d::/36
Signature Algorithm: sha256WithRSAEncryption
ae:a7:e6:ac:9b:41:65:1f:09:6e:b3:56:83:dc:5f:a4:d4:a2:
71:44:2d:8c:9c:9a:ec:72:e2:36:c6:46:f6:b1:85:50:5a:a4:
b9:fa:ab:ba:55:86:44:23:19:e0:8c:56:e6:48:d0:fd:d6:46:
83:73:6e:23:ab:60:44:68:4f:54:b7:ac:f7:44:61:7c:d2:3f:
b2:6e:7d:a9:91:19:50:e4:ab:0b:60:82:22:ff:cc:11:7c:29:
aa:a0:f5:d0:af:16:85:05:e8:ac:5b:d9:9e:b5:25:b7:f8:d8:
1e:fa:56:f5:31:18:87:21:e5:fa:32:16:a6:51:4a:92:9d:cd:
66:38:a0:99:95:11:f1:5a:35:79:1a:43:ee:7c:47:52:64:a2:
a0:12:0a:15:33:ea:46:d4:b7:97:d9:eb:16:ff:79:10:38:dc:
bb:10:93:56:0a:f2:e1:21:c1:22:f3:e5:31:a2:bd:63:36:09:
54:3b:d8:b2:dc:4e:3c:ff:19:b9:3a:19:d5:f3:5d:c7:71:fd:
02:70:5b:e5:ea:16:e8:ff:f7:f4:43:ed:87:22:33:ff:cf:7f:
79:46:c8:c7:ab:36:c1:bf:51:ab:41:30:3a:28:b0:cf:3d:48:
b0:cd:0e:bb:b1:68:e9:f1:08:ab:15:44:c6:3e:fc:7d:cd:ea:
6d:8d:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:41 2025 by rpki-client