Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa
File: d2fd8734-3950-4090-9359-e2baa68e90e6.roa (raw, json)
Hash identifier: 0o8KW8djL3PKgl6BJ2rMYytSvQk3szSEGf193FBhGY8=
Subject key identifier: 84:17:2B:CE:0D:2C:BA:BB:4A:ED:85:15:71:44:88:E1:AD:39:C6:B5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5557D86C8EC0400D003029F303618DA98C369029
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:4840::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:57:d8:6c:8e:c0:40:0d:00:30:29:f3:03:61:8d:a9:8c:36:90:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=25b8b840eb1635712aea106bba567f2cbbee39ef65eb38529221a8245458066d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:75:38:8c:60:a9:0b:8f:ee:88:75:b0:3a:
01:cb:9c:89:50:70:9e:85:dd:ba:55:d2:7c:70:d6:
8d:c0:cf:f4:3f:34:8e:95:80:87:23:66:c9:52:37:
46:f3:2a:41:26:65:ce:5a:98:06:b0:a6:1c:49:6e:
55:cc:e6:5b:e1:74:df:4d:8f:58:e2:ae:03:5c:4a:
f9:35:c8:18:f8:03:ff:10:36:1b:d0:37:04:35:d8:
b4:fd:f8:77:d7:15:a6:e4:cc:9b:b3:e9:1d:9b:40:
5d:e7:29:30:32:4c:f5:6c:97:c4:08:a1:43:1d:be:
73:f5:ca:0e:4b:75:16:b8:41:46:18:84:f1:9f:71:
02:6e:23:83:e2:b5:32:63:d8:2e:27:16:bc:99:06:
72:b2:cc:34:0d:4e:5c:8b:73:45:f3:df:f1:b8:8f:
82:6e:f7:01:db:79:1e:61:d7:b2:47:d2:21:88:47:
cb:88:35:92:07:ce:a5:54:f4:7d:e2:2c:ce:03:a3:
f4:e7:49:0b:d7:e9:92:87:b9:5f:58:4e:a3:e5:aa:
48:a2:33:a7:c4:98:e3:61:b2:5d:59:d5:4e:a1:50:
4d:67:d7:34:66:e9:45:a3:14:a8:94:a9:5a:50:8d:
16:6a:06:3f:d6:2f:78:66:60:cb:b1:65:95:0b:d3:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:2B:CE:0D:2C:BA:BB:4A:ED:85:15:71:44:88:E1:AD:39:C6:B5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:4840::/46
Signature Algorithm: sha256WithRSAEncryption
8b:4d:71:9e:11:9a:2e:79:4f:d4:5b:22:6c:bc:d7:a2:f7:2b:
e8:db:be:32:0b:9c:03:0e:15:de:5b:b4:42:20:5c:dd:25:0b:
d2:73:46:2e:de:e2:38:a8:48:8d:a9:dd:44:8c:fd:14:27:3d:
af:74:54:dc:f7:50:43:63:64:fc:d1:fd:e5:85:37:b5:55:5a:
ef:2b:81:0f:aa:7f:67:5b:01:13:9f:c2:db:a6:88:82:f2:fa:
6f:75:cf:0a:a0:0a:90:72:91:9a:d9:d6:a7:50:51:24:bb:1e:
2f:64:da:48:bf:6b:b1:e2:67:fa:61:c5:89:2a:f0:6d:78:b7:
9c:d5:a4:e6:45:e3:58:6f:55:24:6d:a2:02:20:82:13:81:01:
a7:57:8d:7c:31:0d:3d:95:d5:fd:7e:17:74:07:67:7e:29:76:
57:89:c0:bc:7e:b3:4c:83:52:e8:90:b0:bb:cb:e7:f5:27:e0:
1d:fb:10:23:1f:eb:5a:0f:e4:bc:29:84:92:a9:35:de:40:c8:
fd:7f:e2:1e:5f:af:9b:2e:b4:8a:08:98:4c:65:ad:84:ed:80:
a1:01:34:5a:3e:97:a5:49:36:f0:f3:9a:08:d0:0e:6c:18:a4:
83:a6:30:57:9b:df:de:de:9d:27:4d:61:9b:44:42:f9:39:be:
c4:1b:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:25 2025 by rpki-client