Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa
File: db727801-736f-41c5-bf1a-e19ab3b36eff.roa (raw, json)
Hash identifier: NwG2T43bhbTqhLdA8tCCuyvH3d180HPH7iLoovODeMg=
Subject key identifier: E1:B2:B1:22:47:E0:0F:61:62:D1:31:0F:BA:0A:21:27:CC:2A:55:87
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6E414E642C33C07B649EB17E488755F2EA85705E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:8880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:41:4e:64:2c:33:c0:7b:64:9e:b1:7e:48:87:55:f2:ea:85:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3caa0a8f3494c21a5a0b5d79052e4eaf76195fbf3479dc19ac79738bf5aebffe, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:a4:06:57:d3:12:f4:60:a7:6b:33:b0:ff:
63:e2:c3:c3:b8:90:b5:97:d6:47:19:34:05:46:f2:
a9:ed:b2:67:a0:9d:72:06:8b:bd:53:46:ff:2e:0b:
b7:1e:36:8a:b4:90:bd:0d:3a:ee:06:f6:92:1d:89:
a7:67:ed:df:6c:a3:81:1a:ee:9a:33:c6:e1:40:b8:
e8:2d:ad:af:e2:32:29:26:e7:9f:6a:ab:9d:62:9a:
39:1f:5c:0d:bf:7d:59:99:57:ca:54:4f:8a:a2:58:
3f:22:1a:ee:99:42:42:2d:0d:63:eb:d5:07:c5:ac:
67:7e:5e:ad:8e:52:07:06:91:f7:30:d8:42:95:99:
e7:9f:51:ed:d4:37:a8:3c:87:8e:ce:b3:01:ff:8a:
40:12:5d:9e:4a:e6:1b:1e:d0:59:54:5f:c4:63:ac:
d6:c0:06:a4:12:0c:00:fd:71:e9:1b:73:ae:7e:9d:
a2:ea:6a:ae:3f:f0:77:87:e9:a4:ca:f2:54:57:4c:
65:8a:eb:14:6f:7b:b8:85:3e:f1:4b:03:ec:7f:36:
c5:ca:6e:5f:b6:1d:33:56:5b:f0:f0:fb:8f:b3:f3:
65:20:c1:b4:09:e5:28:5d:0e:d6:a8:6c:cd:51:9e:
a6:8f:92:c3:3f:25:d2:c4:bf:7a:33:95:3c:ad:34:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:B1:22:47:E0:0F:61:62:D1:31:0F:BA:0A:21:27:CC:2A:55:87
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db727801-736f-41c5-bf1a-e19ab3b36eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:8880::/48
Signature Algorithm: sha256WithRSAEncryption
08:9a:09:85:19:f1:c8:a9:87:ae:b4:31:96:8a:be:01:07:7c:
aa:7f:78:b9:65:7b:50:fe:f4:9f:88:60:05:10:87:b8:ba:3f:
ac:6b:6a:76:81:02:a0:57:e5:da:20:7b:f2:28:b8:4c:68:20:
1d:81:da:1a:33:d4:75:e8:52:24:8f:ff:fd:d1:30:aa:2c:a9:
c5:54:7e:29:12:ce:f0:34:d9:dc:bd:a0:96:ea:9d:44:0d:12:
55:67:eb:45:e6:dd:d8:ee:26:fc:3a:4b:3a:55:3e:10:49:b1:
7b:9d:1e:ef:f9:af:e8:f9:b8:a8:cc:c1:ee:a8:75:26:35:0c:
6f:e6:a0:a1:cc:44:75:39:48:93:22:4b:8b:6a:aa:52:cf:64:
dd:6f:83:93:87:13:50:68:77:b3:5d:62:d4:18:e2:3d:cf:a0:
80:e9:e5:3d:fe:43:ef:cc:f4:ca:fc:c6:d8:3e:51:14:4a:d6:
65:2a:b5:ee:f4:9d:54:34:b7:b0:c7:01:77:45:f8:f3:a7:90:
c1:81:dd:dd:65:64:2e:38:4c:d0:d5:ba:bb:8c:23:94:cb:44:
9c:58:fc:4b:29:76:c0:d6:d4:1c:9d:c0:38:b0:a2:8a:2f:22:
e2:3b:f1:f5:06:43:e2:61:4a:b6:ec:82:1e:77:c6:7e:37:b2:
02:6d:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:21:02 2025 by rpki-client