Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa
File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json)
Hash identifier: jkfCldReBg4ti4NRgq3Xz2fi7+YlyIezbNVptz4DW+Y=
Subject key identifier: B6:62:36:28:D7:0B:88:F7:4E:6B:60:9D:00:60:E3:72:3E:C6:9D:15
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 201E22B909D87A60CCEAA4DA865DBFDB7CA319CE
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2403:b300:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1e:22:b9:09:d8:7a:60:cc:ea:a4:da:86:5d:bf:db:7c:a3:19:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=2f0f6c7f97f55589b391f87dc495fa18cd021b80ea30e30701d2adea92f8e96b, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:d6:4d:f4:5f:03:19:ab:3c:3b:7c:71:90:
49:77:39:c3:d2:11:2f:ad:da:28:4f:ee:de:50:89:
ea:ca:e5:e9:c8:7b:38:d9:e2:64:ce:e3:38:fa:a1:
3b:01:fb:f0:12:3c:85:a0:6c:d4:c8:ac:15:79:06:
a7:51:53:83:a9:34:f2:33:6e:77:89:33:23:a7:ab:
3e:10:96:fd:66:8d:00:46:3f:f6:e2:d2:58:8f:cc:
50:94:97:a7:2b:4b:e6:6e:ff:e8:b6:bc:1d:79:42:
96:cc:b3:a0:43:9c:96:99:65:a4:d7:06:f4:7f:dc:
09:a9:84:0d:52:c0:d1:1e:5c:ec:59:3e:60:3c:25:
9f:79:3f:5e:d7:38:d9:f0:fe:48:4d:00:0d:7f:fa:
af:3b:94:92:e0:d6:bd:23:59:f1:23:b3:d6:c4:2c:
c0:fd:2f:aa:87:43:76:ca:f3:a1:2a:2c:76:82:f9:
f3:85:d7:97:d7:51:c7:1b:54:aa:fe:cd:13:f5:e4:
ab:b3:b6:7e:2b:50:c6:a9:81:0a:75:14:c7:4a:0b:
35:70:94:f3:63:00:6a:eb:55:99:82:5d:15:b3:b6:
bf:f0:9a:74:93:a0:ba:a1:86:9d:b8:c0:0d:99:46:
7d:12:81:65:bd:81:77:64:43:34:85:30:9f:7d:d9:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:36:28:D7:0B:88:F7:4E:6B:60:9D:00:60:E3:72:3E:C6:9D:15
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b300:1000::/48
Signature Algorithm: sha256WithRSAEncryption
5e:89:fc:5a:1d:ff:db:69:0d:ff:69:f9:68:80:73:63:3c:22:
2f:5c:fd:56:e7:1a:cc:e6:90:b2:db:1b:5e:b7:03:66:b2:18:
70:ad:95:78:72:c2:da:8a:b8:7a:ff:26:50:55:51:08:23:ef:
f9:51:7d:9d:bf:70:6e:9d:83:14:6b:17:0f:88:0e:25:80:a8:
c0:31:32:48:21:6c:87:90:e3:ff:97:9c:b9:68:32:df:c9:0b:
d1:12:1d:c7:fc:49:2d:0f:b0:3b:16:9f:6c:f1:10:10:ae:0c:
e4:3b:97:7f:82:27:e4:ed:09:50:db:b5:0f:77:fb:f7:8f:24:
fd:e4:59:2d:bd:9a:aa:ec:0d:16:27:fd:ba:db:dc:2d:2f:c6:
75:85:fd:63:dc:a8:73:cd:f0:ea:bf:81:00:5b:f8:19:dc:79:
ee:4c:6d:cc:0b:0b:ad:f9:be:10:05:75:c2:07:98:28:75:03:
69:a7:e1:34:57:14:6f:31:86:48:46:c9:06:fc:4b:b9:59:48:
d8:f3:db:73:11:41:bf:9b:af:f1:2a:a0:1b:19:fd:e2:a6:da:
47:92:1c:8a:cb:47:3e:81:97:8a:a3:42:7a:5c:dc:c5:74:a1:
b1:ee:9e:67:99:dd:cc:02:31:fb:c6:81:42:f1:5c:fe:1a:e2:
d5:f2:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:25 2025 by rpki-client