Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa
File: f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa (raw, json)
Hash identifier: k7FulbVMlMtZqRIgB48Zz1LX4WLvXg59DveouVZo15c=
Subject key identifier: C6:D6:69:D9:81:3F:B7:5C:F3:92:72:E0:19:63:9D:B2:80:3E:5C:E5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 314B4EF21831DBDA993D326FC8EBE16DAF6783E0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:7000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4b:4e:f2:18:31:db:da:99:3d:32:6f:c8:eb:e1:6d:af:67:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ef88a042d872ba94892f87a4a345aec71294dd467a4061c1ccdd2df6f2209ff0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:3d:9b:3d:3c:32:e2:cd:37:9b:bb:77:7c:
21:f2:d5:fd:a7:9d:65:ac:20:6c:c6:35:c1:cb:37:
97:de:07:b7:29:6c:24:24:24:98:cf:5c:2a:07:36:
8e:08:c7:f2:da:33:d2:14:95:07:15:3d:75:59:25:
5e:6d:b7:84:75:1c:b9:01:72:26:60:2c:60:d8:97:
b8:a6:69:d1:60:ab:61:d7:1a:67:75:01:83:5e:55:
16:34:09:39:72:84:b5:0f:3c:ca:d6:08:fb:d2:72:
26:94:86:7a:ff:f5:04:68:8c:9a:a4:65:98:0c:44:
30:09:6c:ed:55:e4:a0:2d:93:8f:76:28:88:78:da:
f6:2c:b8:03:78:c7:06:48:98:88:bc:39:41:b3:fb:
e4:31:ce:78:f3:88:bd:3d:b9:d4:e8:6c:98:e2:d2:
73:a4:13:5d:07:36:a6:97:64:1d:3f:39:b2:52:18:
82:79:49:b7:5a:41:fb:0b:bf:f4:a9:df:91:fc:ea:
86:bd:3c:ef:d7:67:7b:8c:1b:8e:1b:77:04:ec:12:
20:c7:24:d7:f8:7c:77:7d:d5:93:76:9d:45:cc:8a:
b7:0b:ac:ce:03:22:54:c0:96:a8:c9:c8:0c:08:65:
ca:fe:4d:29:e3:26:0d:bf:9a:1a:6a:6c:f7:d6:73:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:69:D9:81:3F:B7:5C:F3:92:72:E0:19:63:9D:B2:80:3E:5C:E5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:7000::/40
Signature Algorithm: sha256WithRSAEncryption
97:bb:4d:1d:c7:cc:fa:5c:d5:6c:d8:e9:d9:e2:3f:26:ff:5e:
1a:2d:bf:2d:91:84:1f:90:5f:5c:27:07:10:26:c8:7e:37:86:
df:f7:1b:7b:37:dc:59:1e:a5:cb:c0:ae:2e:46:b0:6e:46:77:
dd:00:e4:1e:18:41:56:71:ff:50:2b:de:12:07:84:3a:78:12:
ce:dc:96:b7:5e:eb:71:8c:a0:af:dd:ae:05:6d:3f:62:01:6c:
72:5c:dc:77:15:67:08:3c:a0:b5:09:98:2b:d9:52:f9:f1:33:
c3:19:42:98:ce:cb:63:98:8a:a4:38:37:f3:89:4f:da:a9:24:
f9:f3:2f:2e:bb:75:b4:bf:50:f2:cf:49:35:49:b3:7c:6e:a6:
2a:1f:9b:36:61:0b:02:63:46:21:52:84:00:48:4f:65:c9:a9:
a9:ac:28:0d:d4:c7:32:e2:01:37:86:63:45:05:59:2b:9d:37:
5c:d4:02:f8:af:44:bd:9f:b4:e3:ed:b2:72:e1:6a:0c:ee:b7:
e7:fa:32:69:9f:3b:5b:88:2d:5b:de:3d:94:c3:af:94:25:b7:
91:69:20:6e:6b:c2:11:64:09:50:8c:6c:d3:2c:42:d3:72:05:
fe:25:9c:65:a3:f5:a6:4b:d4:18:e5:74:67:e5:61:1a:a4:70:
82:de:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:44 2025 by rpki-client