Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa
File: f0035674-15ff-434e-b4d2-44fc6010a1aa.roa (raw, json)
Hash identifier: jRWC5RzRTb13r8zxFAzxRJ2wyz4l2ikuce5ozAJ+BJs=
Subject key identifier: 83:19:FB:B5:38:34:68:66:CC:4B:35:D6:23:A7:E7:D3:5F:24:9A:3D
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4B6BB14B9D98D0C74C128C023A8B2E77C59FBF13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6b:b1:4b:9d:98:d0:c7:4c:12:8c:02:3a:8b:2e:77:c5:9f:bf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ae3ab211dc94cc58bf4ff1180d0adba1967ffcff58ab5edc1953ea688daa310c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:35:48:48:d7:7a:76:84:65:c7:a7:52:e0:
29:d0:5d:24:2a:2a:b1:f3:e6:86:dd:1e:27:32:ef:
13:9b:ea:43:2b:52:12:7d:db:65:bd:a2:be:d2:7e:
60:ab:79:5f:79:7b:95:0a:a0:38:1a:85:2c:70:01:
fa:e1:5a:cd:86:65:68:29:ea:6a:35:9a:fa:f8:1a:
df:97:65:30:9e:85:ed:6b:60:84:57:40:52:0b:a4:
d7:82:e6:a5:c4:e1:92:34:c9:d3:d0:cb:ba:b1:88:
94:59:82:74:e6:06:1d:01:9b:4e:b6:a6:59:47:34:
5c:da:ce:06:20:1a:f1:a8:53:ec:8d:3e:b1:95:fe:
ff:5f:31:77:fc:e7:74:d6:1e:da:54:8d:26:44:50:
36:1c:73:3a:f7:52:ec:60:5a:83:8d:9c:71:92:dc:
06:d8:70:17:d2:02:f2:b7:71:56:77:5a:e8:71:fd:
77:69:84:f4:ff:aa:37:3f:8a:5b:3f:48:85:20:dc:
ab:2a:7d:3c:27:e2:70:71:d3:ef:a5:37:f5:79:88:
be:af:6c:62:c3:c2:c7:93:e3:ca:9c:24:fd:2c:09:
49:25:70:c3:2f:9e:0c:b0:01:38:10:4f:69:13:4f:
35:bb:0e:66:a6:3a:85:ed:5b:fb:01:72:85:3e:15:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:19:FB:B5:38:34:68:66:CC:4B:35:D6:23:A7:E7:D3:5F:24:9A:3D
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f0035674-15ff-434e-b4d2-44fc6010a1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:e000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:b0:f7:7f:45:81:90:41:e3:c1:60:36:2c:32:bb:ac:5d:7a:
18:1f:e7:a8:5a:3e:53:92:eb:1c:91:21:01:fc:62:57:00:29:
e4:99:f5:a8:2b:63:8f:34:0d:11:24:93:78:4a:77:6a:d9:30:
ff:24:b4:75:a3:2b:59:34:e0:7f:70:22:75:42:8b:32:a4:ec:
d3:7a:5b:b5:13:17:59:f5:20:1d:1e:68:b9:bb:e6:8e:54:70:
4c:2d:c2:6f:e1:7b:97:21:95:d2:21:d3:d1:6e:07:20:2f:97:
eb:19:bb:f7:c3:16:43:f0:78:7f:ba:90:ed:f2:a1:2c:42:84:
44:9a:57:12:78:67:f6:bf:de:98:2a:eb:02:19:94:84:eb:00:
9f:3d:e0:e2:89:62:69:4a:a8:b5:ec:d2:d0:9d:d6:48:28:ff:
7b:fd:e9:c1:3b:1b:8d:30:90:08:78:b4:d9:3f:b0:00:8b:e1:
82:1f:ad:d6:11:3f:2f:6b:5c:72:b6:e8:e0:9e:94:7a:79:89:
5c:3a:86:06:c2:85:5e:e2:8f:99:08:b3:bf:fd:55:ea:f2:f2:
2b:08:1e:96:d4:41:96:1a:a1:6b:bf:31:23:88:61:4c:d9:68:
66:36:cb:a6:10:00:2d:cc:c9:a4:b9:b7:e8:85:11:c1:4b:40:
68:1d:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:21 2025 by rpki-client