Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eef09379-b7af-46dc-9775-9d99b9c7f587.roa
File: eef09379-b7af-46dc-9775-9d99b9c7f587.roa (raw, json)
Hash identifier: fhrTbGsZVIeUrWswkylXsBD0x1Mw7EpVelQvlKxSYKo=
Subject key identifier: 2E:F5:8C:3B:91:FF:61:BF:B4:CD:97:92:3F:BB:B7:74:82:C2:FD:2F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0C77E802BC114D0341DB8106FA50490AE6E27111
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eef09379-b7af-46dc-9775-9d99b9c7f587.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:77:e8:02:bc:11:4d:03:41:db:81:06:fa:50:49:0a:e6:e2:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6fe914d5bf6db299562df1a2c0b589792663ebca54cc43dd2cf0e294ac3d5a52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:5c:5d:28:91:c0:1f:3b:b0:85:76:f1:98:
85:ce:86:90:e5:0c:90:08:4e:33:13:a5:4b:46:09:
f5:69:2d:b4:ab:97:58:96:c5:20:00:18:cb:83:27:
6b:00:96:e4:d0:1e:25:fa:3e:8e:8d:d1:70:eb:32:
0a:9d:29:ba:05:f7:81:2b:77:6b:1d:8c:0c:6a:75:
ea:d9:f5:cb:d3:46:08:95:e8:6a:4a:17:eb:e4:19:
de:60:b4:e8:a7:9e:45:e3:2e:74:01:20:0d:2e:3e:
31:be:58:3a:75:99:ef:b8:41:b3:ae:d3:cb:1c:8d:
3b:bf:d7:6b:81:a3:54:45:11:d3:ba:ed:21:78:7b:
d2:6c:08:f3:0c:2b:0a:dc:8d:8f:08:4d:59:88:37:
37:19:b8:14:ac:1d:3f:a3:6f:ea:60:bd:3b:96:70:
62:bd:2d:9c:eb:23:9e:3d:34:e4:99:94:a4:f3:7b:
aa:f4:86:df:46:c3:89:e1:11:38:97:8a:73:db:5a:
ac:73:eb:c5:06:8f:c4:b7:2e:96:8e:f2:b8:21:60:
7f:03:22:6e:34:36:21:b6:ea:ba:e5:43:a7:a1:a1:
6e:9f:ec:7c:08:8b:49:07:24:bc:b3:2a:7f:bf:41:
93:c7:76:d1:76:4b:fe:3b:ae:71:2e:45:09:f8:3f:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F5:8C:3B:91:FF:61:BF:B4:CD:97:92:3F:BB:B7:74:82:C2:FD:2F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eef09379-b7af-46dc-9775-9d99b9c7f587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:800::/40
Signature Algorithm: sha256WithRSAEncryption
45:a2:e9:58:82:ad:dc:ec:2c:69:c1:85:94:e9:fd:83:71:42:
ba:1a:f1:26:22:e4:fe:fb:9f:cf:fb:95:f1:e7:f9:d0:5d:57:
4a:de:cd:94:93:2b:61:28:e6:23:b8:ca:e7:89:2e:c9:00:6a:
f8:e1:6d:3c:b8:74:1b:ac:1b:89:13:64:02:29:9b:f3:ee:c8:
41:e7:e6:37:39:65:62:43:a5:07:53:88:99:ab:a6:3c:7b:09:
cf:94:86:c0:08:93:2f:22:16:05:ca:94:83:74:1d:55:81:2c:
71:cb:bb:03:ee:83:2a:14:02:72:04:af:1e:d2:4a:15:5c:72:
9f:09:ef:73:e1:45:fc:58:cb:5a:4b:23:2f:5f:18:c2:db:11:
2d:6b:58:45:0f:94:3c:66:42:fd:5f:9d:d5:37:81:1f:fd:c4:
82:cf:38:57:cf:31:94:21:18:b0:30:12:b8:68:13:68:4b:ee:
45:57:a2:4f:76:f6:76:80:a6:59:0f:ad:c9:3d:8e:a1:7b:e6:
07:87:1a:11:f4:fc:37:04:07:79:5c:8f:a3:d7:5f:f9:72:0a:
38:bb:c9:ae:72:ce:e1:e7:3f:07:83:61:db:19:24:76:ec:b6:
59:5f:48:84:59:b0:b0:5a:5f:82:3e:53:5c:c0:cb:4b:4a:82:
2d:77:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:12 2025 by rpki-client