Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa
File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json)
Hash identifier: jGOSELHN8b6emk+NpKZ4z6OOWrvG6wZ1yiXp3j9OTIU=
Subject key identifier: C7:9B:FA:21:AA:B4:10:0E:84:D6:25:6E:0D:B3:10:9B:E0:39:7F:03
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 78C52FC38753F67B2CBC4777DCF23E9A35830AA5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa
Signing time: Mon 17 Mar 2025 15:00:55 +0000
ROA not before: Mon 17 Mar 2025 15:00:55 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab8:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c5:2f:c3:87:53:f6:7b:2c:bc:47:77:dc:f2:3e:9a:35:83:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 17 15:00:55 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:b0:8d:38:03:ba:d8:71:60:f2:e5:da:10:
27:8d:82:90:f4:37:24:53:2b:b8:57:65:e8:97:8d:
66:cb:4b:49:43:4f:31:49:4e:f1:97:bb:fd:4f:63:
73:c8:dd:1d:60:16:c4:e8:36:5c:4f:a0:9c:39:13:
67:e1:0c:c5:bc:82:d4:d5:41:f4:a7:e4:c4:89:5d:
18:2d:b7:bf:9a:de:1f:dd:bb:c6:64:39:9b:31:0e:
bb:ab:6e:27:45:ec:fd:81:78:5e:06:41:69:42:be:
c0:3e:12:ed:36:ab:bd:14:ba:35:1e:76:ff:5a:65:
52:68:98:17:ff:84:ee:d9:26:2c:3a:61:8b:58:bd:
1b:16:1a:eb:48:25:02:8c:e8:ac:ef:92:23:13:86:
2d:92:b3:63:d1:67:d5:30:c1:e4:a5:49:4b:d9:62:
60:1c:59:33:75:88:4a:b7:7f:55:cb:2b:c4:e5:be:
60:85:d2:44:ee:30:a4:f1:1e:a1:36:0b:a0:9c:3c:
ac:4b:c9:ea:94:f4:4c:f4:cb:8b:6a:5b:f4:67:fa:
d4:b5:6b:fa:cf:26:6c:86:54:20:f0:ea:68:b3:c2:
64:a8:df:7d:40:ce:76:bc:fb:aa:45:51:28:7f:28:
5e:f8:b2:05:7f:ec:54:70:58:e0:bc:46:0b:76:29:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:FA:21:AA:B4:10:0E:84:D6:25:6E:0D:B3:10:9B:E0:39:7F:03
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab8:e000::/40
Signature Algorithm: sha256WithRSAEncryption
17:8e:8d:1c:69:47:e4:6e:89:42:c0:77:94:e4:d8:7c:8b:53:
7a:1a:8b:1d:72:82:5d:dc:87:1f:0d:f6:72:00:08:95:41:58:
78:96:c1:52:59:9b:ae:4c:18:93:9b:d5:8e:03:66:31:c9:fb:
c9:4e:37:9e:f8:d8:14:45:fa:87:b0:98:a0:ca:e7:95:db:38:
dd:e1:d5:87:90:d8:ab:bb:27:9f:a4:b5:22:62:12:34:cc:e6:
74:87:12:00:bf:05:d2:71:3f:4f:94:be:60:89:dd:e0:74:d4:
c6:66:55:04:c9:d6:1e:76:cf:a8:b7:c7:3c:20:ae:47:75:cb:
92:d4:58:ab:c1:a4:07:c0:cf:53:96:e3:74:dc:88:5b:8d:df:
e5:f8:4d:ad:a0:43:fa:c0:1b:61:24:07:bf:52:12:b2:01:b1:
93:06:05:9c:db:85:44:c9:dc:cd:81:c4:34:cf:cf:fb:d3:4d:
66:68:38:6a:0c:49:97:bd:3d:6b:a1:8b:86:f6:e6:4a:ca:2d:
b9:bd:e0:4d:ff:65:8d:8b:43:5b:18:1f:b9:1b:37:88:b9:ae:
93:30:4e:5e:9a:f7:dc:80:66:2f:a0:7d:4d:f5:54:05:26:e7:
76:df:7e:4b:8f:08:45:21:72:90:5d:31:bc:6c:05:4a:66:48:
33:52:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:47 2025 by rpki-client