Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef7cb16e-78b6-4a0b-b4bb-2457f694b483.roa
File: ef7cb16e-78b6-4a0b-b4bb-2457f694b483.roa (raw, json)
Hash identifier: unw7eB6X8iAn1Fyzjh+BP+UUI10XE/Z4THkeS7vuq1A=
Subject key identifier: D0:06:81:41:18:05:92:8B:43:3B:3A:6D:2E:EC:3B:7B:8E:B4:E5:9C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7D8652E3EE5C54EF5ECEFF593FFF982546D83F77
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef7cb16e-78b6-4a0b-b4bb-2457f694b483.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:f000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:86:52:e3:ee:5c:54:ef:5e:ce:ff:59:3f:ff:98:25:46:d8:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b0489c49f88728bd2a1511854a2000804d71d5fa5c79fd7a04103d6df48c7da1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:d5:f8:58:4a:11:ce:f9:c5:5c:ac:20:64:
dd:d3:a2:0e:22:56:85:bd:b6:95:cc:29:48:8e:8a:
fb:d9:9f:02:27:6e:3f:72:fa:e3:3a:84:57:d4:15:
96:37:7b:ab:f0:a6:85:27:4f:15:f9:4a:59:d7:da:
6a:fa:bb:7e:ca:08:26:20:a4:2a:56:57:c1:e0:ac:
07:b2:0d:aa:93:bf:e1:ba:f9:78:8e:0f:01:de:53:
4a:3b:56:05:50:51:95:38:7e:ca:2e:bf:ed:61:47:
f0:e9:ec:6c:1f:54:ea:38:71:81:c4:29:a1:be:f0:
f3:cb:f6:4b:97:cc:30:9c:d8:90:cf:ca:f1:d1:7d:
30:25:45:80:8c:59:54:3b:25:bf:2e:34:27:8f:d4:
21:83:07:15:34:e7:c2:52:eb:10:11:d6:a9:ee:d0:
b9:1c:4a:4e:84:59:c4:04:98:3e:fb:d9:84:35:56:
cb:a2:b9:ab:98:b8:2c:0d:c8:ab:3b:12:ad:4a:24:
59:e9:e2:b6:81:75:9a:7c:2b:2a:c4:0b:f8:8f:97:
da:a3:4f:d1:60:fa:d3:6a:e1:9f:3f:75:b9:32:66:
1e:0c:f8:ed:be:4b:be:f0:88:bf:cc:52:f0:8b:bb:
e3:75:b0:de:c0:7d:e8:ab:d6:69:f6:4e:94:b7:71:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:06:81:41:18:05:92:8B:43:3B:3A:6D:2E:EC:3B:7B:8E:B4:E5:9C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef7cb16e-78b6-4a0b-b4bb-2457f694b483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:f000::/40
Signature Algorithm: sha256WithRSAEncryption
28:31:63:f2:93:d0:e5:34:f2:c3:5c:56:6d:99:a7:b3:0d:d2:
f4:e5:e3:00:14:8b:2d:6f:0a:7b:30:ce:9d:6d:b8:72:10:c1:
d9:22:83:98:ae:32:a3:fb:63:d0:dc:f1:8c:a7:39:be:26:89:
f3:70:50:10:a1:c6:22:e0:b0:3f:97:4c:9b:36:21:4c:78:53:
fb:ea:45:90:24:0a:99:21:e7:a6:64:5b:f3:2f:87:25:59:3c:
3a:8c:c2:e4:de:d2:3d:61:2f:a9:3e:05:c6:97:b7:24:62:94:
32:fe:4a:8e:09:36:53:f3:3c:68:b8:b5:39:4e:15:07:7d:de:
8d:ba:87:0b:3a:5f:5f:16:87:5b:8b:49:7b:a4:0c:b8:e8:70:
46:30:86:00:bc:1e:3d:76:66:cc:db:09:54:81:27:8e:8f:f7:
28:8d:b2:1b:d6:9d:80:10:79:55:78:c1:33:5e:dd:25:b2:8b:
2d:fa:f3:74:49:89:c4:cd:d0:1b:d4:4d:63:ce:ce:66:3b:1c:
ec:f1:6d:0a:e6:fa:c4:46:c3:73:e8:cf:e3:67:ef:56:8a:d9:
ef:09:95:c9:c0:e4:27:a7:43:77:5e:84:1f:c1:3a:3c:57:14:
e9:4b:20:f8:c0:7c:d7:81:55:45:98:15:d3:a3:b5:0f:3c:5f:
2a:65:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:54:07 2025 by rpki-client