Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa
File: 1ef497a8-abd3-4d49-af13-215841ac320f.roa (raw, json)
Hash identifier: 1ZckWA93I2KmOM4RLFORBHlg1ta6rhRXxXRyNMd92eQ=
Subject key identifier: 97:BC:4A:B4:27:47:68:06:66:E2:07:9B:98:72:5F:CB:F9:96:52:05
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1500224F6768B6785DFA31B33CE7B93A8A4FF076
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa
Signing time: Wed 05 Mar 2025 21:52:11 +0000
ROA not before: Wed 05 Mar 2025 21:52:11 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:22:4f:67:68:b6:78:5d:fa:31:b3:3c:e7:b9:3a:8a:4f:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 5 21:52:11 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:6e:40:19:17:b4:44:a6:11:e5:35:37:da:
84:ca:ee:03:91:40:5e:a1:c5:bc:6f:a1:89:4e:11:
a9:87:69:26:94:ce:92:bc:a2:a2:0d:04:65:65:e9:
09:e6:8a:73:ab:6d:da:5c:0e:a9:94:a1:58:0e:9d:
6a:98:db:e5:77:4f:3c:52:6a:dc:d3:82:81:ba:7e:
7f:d1:17:e0:35:66:ee:45:60:97:cb:99:68:85:66:
ac:f6:77:33:b3:26:79:8d:2c:f5:09:35:ef:1a:2a:
ef:1f:d0:15:74:e4:bd:51:d1:9a:f7:55:e6:da:0e:
96:47:5f:d6:ba:8e:a7:a5:a3:12:c9:5c:6a:49:bd:
bd:b9:b7:ad:4c:15:7e:e4:95:61:ba:1d:34:37:51:
3d:d6:42:83:09:f7:61:9f:01:e6:88:26:db:a6:a2:
15:4d:4c:30:57:b2:76:6f:56:a2:a6:99:17:63:e9:
e6:4d:c7:24:1b:5c:e3:32:9c:61:3e:21:93:18:cb:
1f:6f:60:3d:08:2d:ac:e8:d3:21:1e:0f:b6:e9:7e:
4a:95:ab:e9:a5:86:a0:f3:33:85:b3:b1:3a:8b:c5:
50:81:a0:4d:36:0c:b8:07:fa:fd:96:e1:4b:04:b4:
b5:1b:92:97:89:2b:03:cc:17:5e:59:25:20:b1:9a:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BC:4A:B4:27:47:68:06:66:E2:07:9B:98:72:5F:CB:F9:96:52:05
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:c6:7c:cb:f2:55:d0:21:a8:c0:8f:bd:79:00:5d:36:79:90:
ac:1c:f8:e5:96:d3:65:89:c5:b3:4f:04:fb:c7:57:2a:92:48:
d2:7f:72:e4:43:d6:52:f5:2e:f5:2b:f4:5a:1b:f3:54:c3:c2:
ba:0d:12:84:7e:36:d6:8f:04:8f:81:23:bb:17:8d:43:07:d5:
8b:ba:6e:82:c2:b6:36:25:ae:dc:2e:a6:d6:d5:e6:9c:4d:82:
0b:23:2a:95:d8:7c:4d:cd:94:36:28:45:01:a5:6b:29:fe:e3:
e6:4e:ec:ef:8d:dc:57:97:fc:b7:b6:35:3f:1f:de:74:a8:23:
eb:a9:ec:0b:4f:91:1b:1e:9c:a8:e2:d2:ba:e6:6b:dc:13:2f:
81:4a:84:18:39:4b:18:a6:fd:b3:e6:7a:41:5b:b7:bf:be:7e:
db:6c:ef:c5:5f:4c:d2:55:29:0c:87:4f:c3:89:b8:12:2a:88:
4f:d7:62:dd:f3:bd:f5:f7:5a:2b:e4:df:9d:29:57:1e:f4:da:
4e:9e:3b:44:c7:5c:47:55:df:29:b9:50:c6:8a:f1:11:5f:41:
85:ea:d4:3d:f3:17:17:c7:3a:37:16:9b:97:7a:a8:9d:d8:2d:
53:f8:eb:09:f2:aa:46:79:9d:b7:b6:07:c2:cc:5b:c9:7c:d3:
0a:8e:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:29 2025 by rpki-client