Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa
File: 24cb31a9-0c7a-482c-879d-89bfe0260659.roa (raw, json)
Hash identifier: XO9xjYbEMHzHZAK4oHWC7CZp6QFo4zHfGfqH4+WmPjM=
Subject key identifier: 6C:22:AE:DD:93:44:15:3F:EB:43:4C:15:DA:6E:59:F8:12:9F:65:CE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2DE4AE742E6EB31A441D113F8A542BA98BDBA7B5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa
Signing time: Sat 29 Mar 2025 00:01:22 +0000
ROA not before: Sat 29 Mar 2025 00:01:22 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf5:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e4:ae:74:2e:6e:b3:1a:44:1d:11:3f:8a:54:2b:a9:8b:db:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 29 00:01:22 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:60:bf:bc:4c:cd:6c:7b:cc:c8:80:0a:35:
d3:01:e8:af:85:d6:fb:47:4a:d3:10:7d:b9:d8:01:
aa:8e:3c:bd:75:ff:c2:b0:31:93:85:8f:80:68:88:
f9:e9:a7:ed:3f:01:33:eb:55:68:4a:65:15:1d:54:
82:c1:87:5a:12:68:64:8b:ef:55:6e:9a:eb:cb:25:
43:5b:b9:ee:a4:97:00:c1:98:11:bc:7a:c0:84:a1:
b0:68:2e:d3:48:40:e6:d1:bd:a6:53:b1:2a:14:09:
eb:20:ed:07:cc:0c:77:c5:e7:87:b8:13:be:9d:8f:
22:f0:3a:9a:d0:a3:51:49:06:d4:e4:e0:14:3c:bb:
38:71:d8:25:54:53:45:7e:e2:75:01:35:37:24:1e:
4b:d1:67:a2:a5:29:85:4b:23:ff:7d:93:69:82:88:
16:d5:e4:18:c7:22:9e:28:f0:14:37:f3:4f:31:0a:
db:3a:2c:22:21:64:52:ef:8f:c2:6a:2b:1c:df:34:
43:27:85:4e:75:15:e8:d7:db:39:a7:cc:18:5e:17:
50:b1:61:ff:06:f5:04:16:1a:1d:78:48:ca:38:2a:
50:2d:46:5f:c5:33:72:44:ac:c5:2d:45:f5:81:5d:
b1:5e:fb:e9:71:66:10:09:f9:12:f1:4d:99:af:77:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:22:AE:DD:93:44:15:3F:EB:43:4C:15:DA:6E:59:F8:12:9F:65:CE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf5:800::/40
Signature Algorithm: sha256WithRSAEncryption
3f:02:a8:cb:9b:85:67:54:84:29:8f:ef:76:97:a3:0e:34:b1:
60:32:9e:0f:c2:16:29:54:8a:37:a1:e7:96:27:29:17:cf:39:
db:95:df:4d:6a:b4:c6:39:a0:6e:25:44:28:49:2f:ef:66:25:
fd:83:1c:76:40:1e:eb:ef:4f:97:70:49:3a:61:da:5f:84:47:
62:ff:38:26:79:67:bf:54:d0:c8:78:19:78:b8:a2:8c:b7:a6:
78:62:8f:c7:46:fa:83:7e:f0:6b:5b:67:e0:63:56:29:64:bf:
4e:ed:6c:ca:fb:3f:e0:fe:16:82:1e:ee:23:72:ce:02:cf:7d:
37:08:98:5d:e7:f8:1b:e9:19:55:9e:c5:47:15:c7:01:b8:0c:
18:d8:71:c6:6f:b9:10:b8:38:8f:86:bb:78:27:ba:84:eb:6f:
fb:1a:ef:44:08:10:f7:92:06:16:6a:6b:87:a5:d6:c5:4a:0d:
08:aa:f6:4e:0f:56:65:80:79:54:50:10:8e:22:f3:ff:c6:61:
94:97:7d:2d:6d:96:c2:e6:4f:11:e0:b4:26:42:d9:73:dd:ec:
1e:18:bf:de:49:68:4e:0e:63:08:30:71:f6:9e:cd:f5:2b:f2:
3c:97:e5:7c:7a:26:f8:7c:78:d3:c7:3f:b6:4e:68:1d:a8:63:
1a:6b:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:02 2025 by rpki-client