Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
File: 0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa (raw, json)
Hash identifier: DmVJ2nOeG6L6bcga5s87kQVki0YKoCsLxeUpwRC1nOs=
Subject key identifier: 22:DE:7A:E2:28:7E:BB:44:D9:72:D7:48:E1:99:22:E0:FD:8A:F1:B2
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 5141E46D2D16762A6D9FC892F0D578D93EC3A044
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 240f:8014::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:41:e4:6d:2d:16:76:2a:6d:9f:c8:92:f0:d5:78:d9:3e:c3:a0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=edb23836e47347eef48da8d0f80e51ebff6a4dfdb80cbb504a1aed18604dbbb2, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:31:09:2d:25:42:59:8e:87:bb:95:30:e6:
b0:fa:6b:ef:51:3a:cc:78:78:f3:f6:70:21:ed:ef:
0c:09:f9:6d:94:86:de:2f:c3:a8:4b:56:fa:cb:8b:
ed:f7:73:b4:9e:b3:e8:f9:3d:be:49:4b:de:47:dd:
c8:3b:ca:54:43:45:1e:fe:08:26:17:1f:d9:a7:2d:
99:a9:40:bf:15:e8:ed:32:4a:4d:76:12:2c:10:1b:
f9:5d:95:99:c3:8e:1b:f2:7e:a0:bb:14:59:a1:5e:
c1:6d:96:a7:6d:9c:9e:fd:83:76:98:c2:a6:78:7b:
da:0f:d6:e2:0e:e4:e4:06:b6:87:cd:65:10:87:48:
e6:77:f1:db:d9:67:cd:b9:cc:6b:7b:4e:2b:1f:da:
bd:08:0f:a1:3e:94:2b:7d:dc:f9:b1:79:95:5e:1d:
74:b4:e9:1c:ba:15:4a:6c:c6:db:8c:6a:2a:07:65:
29:39:d7:8c:91:c6:7d:05:ec:75:6d:41:c2:4d:ba:
bd:b5:94:d0:21:37:27:d6:0e:03:6b:86:88:0f:ac:
57:8b:83:08:b8:fb:c9:2a:cf:71:4e:b8:a0:c0:01:
61:7e:6c:ff:d2:65:3d:5d:8d:43:8e:ba:82:18:03:
41:8b:c6:cd:5c:b1:ea:bd:1b:dd:49:d6:78:a2:6a:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:7A:E2:28:7E:BB:44:D9:72:D7:48:E1:99:22:E0:FD:8A:F1:B2
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8014::/36
Signature Algorithm: sha256WithRSAEncryption
3b:ee:14:83:42:99:86:f2:80:1d:19:65:7d:ab:b4:11:1c:f6:
13:1e:dc:72:92:81:42:cc:c5:e0:bf:39:10:2a:90:24:8a:e7:
88:35:25:c8:e5:f9:89:a9:e0:32:84:2d:be:f9:73:7d:59:8a:
08:fc:b6:44:e4:ee:e5:7b:89:53:a6:74:b2:99:4c:25:67:77:
aa:13:f8:ab:79:99:d8:42:06:a8:5a:4c:b1:82:f5:53:92:aa:
3f:04:7a:ad:ec:27:d1:78:9c:39:17:c1:83:59:9c:d0:40:53:
28:ce:31:96:a8:63:8a:db:0b:a4:d1:fe:65:79:bb:27:29:9b:
67:12:22:68:60:c8:6a:73:db:6d:05:5d:3f:ef:ff:47:c3:3c:
c9:da:5a:b5:62:af:ef:fd:38:75:7f:3e:29:3a:f3:80:5f:45:
9c:49:1c:62:48:cd:0e:ce:89:c5:51:6f:f0:93:0a:60:f7:5b:
ef:6b:a6:f5:31:48:53:e7:c8:21:2a:60:b8:a8:f4:a0:8a:7d:
e6:48:52:be:bf:9f:12:05:3e:7f:9a:2a:96:a1:5b:28:a1:f6:
41:e4:96:e3:e0:d1:fe:f6:20:cd:e4:7a:2d:2c:6f:c3:27:03:
7d:99:7c:b8:98:eb:08:8f:15:47:59:f4:83:10:99:fe:8b:b7:
12:77:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:17 2025 by rpki-client