Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2f6208-6914-4802-9cae-8f5bdc6d9003.roa
File: ec2f6208-6914-4802-9cae-8f5bdc6d9003.roa (raw, json)
Hash identifier: UUYLZ9NtzcE29aKsu8iESONsqBSfxmveEsRojqRVCBc=
Subject key identifier: 4F:8E:94:26:35:4C:97:DF:05:04:EC:37:CE:BF:FA:2C:9D:C9:75:81
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5C01C62B2CA4D52D99892D56C2B2F38F97BBF7E4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2f6208-6914-4802-9cae-8f5bdc6d9003.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:7080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:01:c6:2b:2c:a4:d5:2d:99:89:2d:56:c2:b2:f3:8f:97:bb:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a3d34c2aa2cde10bed2c0c1bfeb28276ab5c88a0214e902fc5463374593f26f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:a1:1a:58:1c:83:c8:ef:ad:ad:93:c5:f6:
5b:55:a0:9a:0f:aa:da:7a:ed:e0:e3:83:8a:8c:e5:
ce:72:a5:62:ea:bb:54:ab:b3:4b:d9:51:19:fc:35:
cc:9a:9b:13:69:99:e5:3c:61:58:eb:ba:33:05:3b:
bb:b2:d8:7c:3a:89:5e:f2:2a:4d:51:e5:26:2f:74:
4c:b8:a1:7f:af:40:f0:5a:a4:80:e3:d8:9a:e3:85:
a3:ff:9a:b2:a5:62:cc:40:ba:b1:66:67:df:e0:a8:
23:dc:2c:2f:14:ed:ad:62:ed:65:62:6d:ef:17:7b:
5f:7b:6d:91:77:1e:38:71:42:8a:d3:86:01:78:59:
98:29:77:a9:7c:1b:8a:f7:9f:3e:81:f8:bd:05:30:
1c:e2:0a:70:21:c7:54:8e:b0:a5:cd:9e:8e:2b:99:
a2:35:82:f1:12:65:57:99:10:72:78:77:2b:d9:d5:
d1:ef:4c:fa:79:78:3e:b3:b5:96:b7:8a:14:4d:bb:
ad:71:fb:1f:ac:07:46:92:6b:79:2b:42:ec:ef:2e:
cd:56:b7:d1:94:42:e5:53:71:85:b7:90:17:be:4c:
50:53:62:e0:7c:08:f5:fc:8c:3d:78:65:5d:18:0b:
46:ef:7c:77:37:c3:14:e3:b6:c8:0a:42:9a:62:2e:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:94:26:35:4C:97:DF:05:04:EC:37:CE:BF:FA:2C:9D:C9:75:81
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2f6208-6914-4802-9cae-8f5bdc6d9003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:7080::/48
Signature Algorithm: sha256WithRSAEncryption
12:b5:1c:9f:25:bd:87:9d:d2:b9:c2:61:cf:5b:32:4e:cd:87:
d2:f7:30:bd:0a:be:da:bb:0d:42:a1:2d:9c:34:48:7c:54:a7:
9d:22:95:0c:58:37:f2:42:5a:09:17:ed:16:08:2d:1a:a2:f5:
b3:d8:af:ef:85:80:02:fa:0c:32:a1:cb:73:36:44:7a:fa:c3:
d6:b9:ba:97:8e:03:a7:39:3d:fd:8c:96:6f:27:94:a0:ea:46:
63:37:85:17:90:c2:ff:19:ab:4c:65:9f:8e:47:a7:1e:1a:70:
1d:2c:61:ba:e8:da:e2:86:09:e3:53:bd:4e:35:7c:09:99:ec:
ce:e7:7e:5a:6d:70:48:9d:0f:85:58:32:41:7c:da:b7:d0:3d:
06:51:00:69:03:80:c2:94:58:d4:1c:c0:50:4c:fb:e1:46:81:
d6:e1:9c:92:aa:8b:2b:97:14:ae:dc:b6:95:9b:47:cb:b7:fc:
76:42:89:02:1b:77:7e:2c:ae:3f:a0:ba:6c:aa:7d:83:6a:2d:
d9:95:0f:17:91:b9:91:d8:df:d7:db:1f:6c:31:35:a0:02:eb:
ee:1f:32:dc:61:0c:a4:80:8a:0b:b4:60:04:2c:52:5d:29:76:
6c:cc:26:b1:15:97:bf:c0:ff:06:e4:c4:1f:a4:8b:8c:6c:6d:
77:97:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:54 2025 by rpki-client