Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
File: 485da602-98f5-4e2b-890f-c254a3071aeb.roa (raw, json)
Hash identifier: W5NgQIVBUiCoHTNz/MENLtf/glE1XE11Km7SgG9PlBs=
Subject key identifier: 35:ED:42:4E:83:B5:B1:6D:98:B1:E2:FF:97:9B:7B:54:03:B8:98:90
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 17347B0BF5CA8AA678A684165D68A205A9711FF9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
Signing time: Tue 18 Mar 2025 00:00:58 +0000
ROA not before: Tue 18 Mar 2025 00:00:58 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2a::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:34:7b:0b:f5:ca:8a:a6:78:a6:84:16:5d:68:a2:05:a9:71:1f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 18 00:00:58 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:2b:29:86:52:fd:7b:53:98:54:1b:82:8e:
6b:a1:8b:d8:9c:00:f2:69:ff:fc:c1:16:6f:94:78:
2c:77:1c:ac:dd:c2:0b:66:68:b3:5d:a1:d9:d7:fb:
99:26:30:4d:80:c7:5b:38:26:49:76:83:55:a3:f9:
0d:13:cb:ca:c9:a1:61:c3:8f:6f:dd:03:92:0b:ee:
c8:ef:e0:62:43:e9:29:d2:c2:bd:d1:51:0b:dc:9d:
a8:7a:4c:55:1d:90:5a:6c:7a:33:95:2c:21:a6:49:
44:a9:56:68:f6:e6:77:13:ae:33:51:99:15:ec:20:
4a:ef:3a:7b:a2:02:ec:f8:bc:ed:22:ae:a6:de:1e:
82:ed:10:0c:38:79:f9:02:04:41:de:ab:47:05:e7:
41:1d:25:f2:42:cf:b8:83:9d:05:7e:26:02:9b:a6:
0e:c6:7e:60:aa:c4:1d:0a:e4:77:e7:93:39:65:d9:
e8:58:be:74:79:76:ce:06:c8:88:27:87:ec:3f:ec:
af:34:6d:6a:70:99:a7:4b:4f:55:ec:ed:80:cb:e9:
8e:81:60:c4:4f:a8:6a:93:6c:89:6a:a0:33:b0:32:
23:f3:1d:58:a1:17:20:fb:8c:19:b2:0a:da:0a:86:
e8:30:e6:6a:bf:fa:c7:ff:05:39:c6:ce:fd:7c:95:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:42:4E:83:B5:B1:6D:98:B1:E2:FF:97:9B:7B:54:03:B8:98:90
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2a::/36
Signature Algorithm: sha256WithRSAEncryption
63:b2:ec:63:0c:16:aa:2c:6c:2c:8b:68:cc:d1:cb:0f:35:f8:
3e:07:77:3a:e8:69:91:79:e7:78:31:02:68:f5:56:70:09:d9:
97:ed:5e:91:e0:59:5f:73:42:5e:e2:3b:ce:c1:a5:f2:dc:e4:
46:00:ce:86:4f:bc:3f:bb:00:b5:46:f3:6e:10:c4:d2:25:43:
15:43:76:f2:c7:f5:92:76:90:83:b5:d0:dd:1d:6b:a8:69:f1:
ea:e5:c0:ab:af:6e:73:36:9d:93:3b:cc:9f:4e:bc:1c:2b:2b:
53:85:08:b4:79:b6:47:e8:12:16:c5:a5:e4:67:bb:01:20:bb:
f0:8b:d5:f0:f9:f0:27:25:2b:2f:24:c5:0b:7d:19:8c:f4:9d:
85:50:df:98:0e:6e:4f:32:8a:08:0c:64:8a:1f:51:5f:73:a0:
03:76:78:5a:29:63:37:cf:15:c6:8b:43:46:7d:97:e1:6e:80:
f8:ad:aa:1d:bb:58:12:79:c9:18:8f:a3:92:0c:91:66:43:c6:
fd:ce:ad:80:83:56:a4:59:b8:62:66:c9:e4:c7:06:b1:69:1f:
51:f2:72:7a:d2:ef:52:59:c4:11:8f:66:87:8b:07:6f:4c:de:
a6:ad:5c:56:8e:b3:26:36:ab:2f:43:ea:34:9d:83:0f:b7:36:
2e:41:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:50 2025 by rpki-client