Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb17f286-f77e-445f-a084-0fef8b29ef6e.roa
File: fb17f286-f77e-445f-a084-0fef8b29ef6e.roa (raw, json)
Hash identifier: O2IDJeyW59Y1tava/xv42UCWMY8VG9fqz6xPddMdcag=
Subject key identifier: 6F:DB:05:60:3E:27:93:56:31:BA:AC:79:BC:87:A9:29:89:21:D9:C7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 58D13D2FF55E884BEBCE262B2800A3C3A65B37EF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb17f286-f77e-445f-a084-0fef8b29ef6e.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab8:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d1:3d:2f:f5:5e:88:4b:eb:ce:26:2b:28:00:a3:c3:a6:5b:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=1d7fce53b5d3a5b71a421485d167923c17d89abc4996ddeaf5d060cec678a468, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:af:88:c8:2e:50:85:fd:84:cf:9a:38:19:
44:6c:df:5c:71:42:7d:89:e6:78:7d:fe:f2:6b:64:
b1:14:32:70:3e:5a:f4:9b:0f:09:ec:9a:e8:70:ea:
bf:8d:c0:43:ab:2e:fc:5f:b6:53:9b:74:de:a9:1b:
7f:08:9f:a4:91:dc:c2:1e:43:72:35:fa:22:27:f6:
b4:a6:59:0f:09:df:87:c9:0b:af:c9:ec:1e:38:1a:
49:aa:79:72:6d:69:9e:7e:5e:b6:84:36:d0:d7:bc:
f9:84:17:b7:8a:cc:b2:cd:ba:1d:19:58:f9:cf:10:
4b:a2:60:95:c1:3f:94:17:d3:85:7b:47:d9:16:3e:
bb:b2:87:14:e1:08:a3:66:88:8c:00:d3:17:a9:49:
99:c4:df:fe:95:5e:82:bf:9a:ce:c8:47:f2:69:4a:
c6:2f:0f:08:d0:0d:11:92:f0:fa:00:6f:9d:d3:b6:
6a:5d:2e:5e:92:c4:b0:ca:83:03:a5:fe:da:ef:77:
0e:26:0e:0d:9f:08:7f:4a:16:03:fb:a4:2a:a8:06:
46:5a:84:c4:2d:ea:89:50:e9:6f:a8:bd:73:a7:7a:
30:fb:8d:2c:4a:ed:80:d2:a1:e4:bf:a4:3e:27:b9:
aa:eb:7e:cd:ac:22:dd:c0:9c:92:e0:e3:36:7c:bf:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:05:60:3E:27:93:56:31:BA:AC:79:BC:87:A9:29:89:21:D9:C7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb17f286-f77e-445f-a084-0fef8b29ef6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab8:800::/40
Signature Algorithm: sha256WithRSAEncryption
c9:d3:fe:28:45:2d:72:41:07:e5:2d:7a:a1:6e:29:64:24:b8:
04:71:45:97:79:80:43:ad:d5:a8:99:8f:07:47:f9:b8:79:1f:
aa:32:ee:9d:19:62:eb:a3:b4:63:f4:cc:9f:14:27:b1:4d:4c:
48:b1:f5:24:99:ee:73:65:5b:cf:38:73:90:f1:3b:30:a6:88:
9c:84:a1:44:36:2e:e3:3c:76:29:93:42:d7:0a:5e:f0:73:3b:
a0:32:e9:1a:5f:2d:8c:cd:77:60:4d:2c:12:8c:3e:82:2c:5e:
bd:f0:f7:49:37:c6:72:63:54:85:6d:30:64:d1:2b:32:2f:b7:
e6:4b:3c:b9:2a:8b:fc:51:54:86:20:c7:dd:d2:6c:b1:26:1e:
95:66:fc:25:d8:be:bb:cc:ff:49:73:16:24:61:cb:d0:05:7e:
32:a9:f1:e4:b1:50:e6:c3:31:d2:1d:53:10:b3:2b:b3:e4:c0:
cb:06:e0:de:f4:fc:2c:84:22:99:20:06:99:5b:fd:e6:03:ac:
b5:4e:7f:a1:f1:84:cb:96:49:6e:aa:20:be:4f:4e:d9:ab:90:
3b:83:be:ee:46:b2:ac:ba:a1:3f:34:bd:f1:ee:49:23:d3:ef:
15:dc:9f:af:76:8a:0c:ab:bf:c2:3d:c3:99:bb:e5:91:78:0a:
86:8b:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:42 2025 by rpki-client