Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63dae4a1-7eca-43a5-95c3-28ca5e2a960a.roa
File: 63dae4a1-7eca-43a5-95c3-28ca5e2a960a.roa (raw, json)
Hash identifier: a8Y869VjW0v2/tJgYDf6K0BR8mHDREGosMp56draFys=
Subject key identifier: 67:B1:2A:AF:84:CC:0D:84:E8:FF:73:5B:4B:68:22:6E:B7:E5:AF:A4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 05E12682AA8F04DCBB774E95A0FC6C6DB961EDFB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63dae4a1-7eca-43a5-95c3-28ca5e2a960a.roa
Signing time: Fri 28 Mar 2025 00:00:16 +0000
ROA not before: Fri 28 Mar 2025 00:00:16 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e1:26:82:aa:8f:04:dc:bb:77:4e:95:a0:fc:6c:6d:b9:61:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 28 00:00:16 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:b7:32:6d:97:65:58:91:ad:42:56:4a:b4:
f2:3c:f2:f9:25:ce:fd:ff:0a:4c:6d:3c:1c:1a:67:
cd:1a:8e:45:bd:9a:60:76:75:9f:fe:7c:3b:d0:34:
6e:84:af:32:c6:5e:20:f0:3e:d6:83:e4:e4:d4:b5:
d8:0c:18:96:db:9d:37:b5:03:11:d4:7a:4a:56:ee:
52:c4:7a:71:ee:97:26:0d:47:dc:b6:4e:ff:3b:b1:
3a:b4:d1:e3:58:d4:0f:56:75:37:6e:ac:22:aa:0f:
72:03:3b:9c:56:1b:4b:0c:56:53:c6:2b:55:c5:41:
fc:a5:7e:bf:23:9b:45:c8:64:02:41:05:9e:b7:30:
63:74:04:e5:e2:3f:c7:c2:23:b7:12:1b:cc:3f:46:
1a:32:87:73:a5:fc:fe:6b:4b:f1:22:cd:59:42:54:
f9:64:1e:34:d3:bf:51:57:28:1a:ff:18:05:fe:49:
08:28:67:aa:82:2a:e9:e0:b2:31:e2:86:4e:e9:7d:
86:22:71:67:01:08:7f:ec:51:99:05:bb:f4:46:16:
67:26:cd:b8:6c:ce:b5:e4:23:70:39:dc:13:82:74:
f4:b2:94:ae:0a:40:3a:cb:3c:35:9b:a5:ad:97:3d:
d2:7d:3c:c7:38:39:d0:34:39:9d:b6:c4:11:21:0a:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:2A:AF:84:CC:0D:84:E8:FF:73:5B:4B:68:22:6E:B7:E5:AF:A4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63dae4a1-7eca-43a5-95c3-28ca5e2a960a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:7000::/40
Signature Algorithm: sha256WithRSAEncryption
cb:d1:88:98:4a:bb:80:24:ab:65:77:aa:4c:2b:d5:bd:75:20:
9b:bb:bc:b6:7b:18:30:3f:d2:83:9b:64:62:e3:79:4f:4e:38:
0a:8f:e9:ae:09:bc:0f:b5:11:26:52:20:b3:30:74:2e:dc:0c:
5f:94:8c:1d:5c:b1:54:0d:17:c8:06:df:82:14:11:79:42:92:
da:9b:33:be:97:00:87:5d:71:50:5e:7d:30:37:59:fe:e8:d8:
61:12:63:c3:89:ca:2c:07:61:67:e6:37:f8:1f:b4:fd:83:55:
53:9e:2a:1a:1a:67:56:32:e7:7d:41:e2:4c:01:80:5f:ea:71:
00:ab:3d:f1:d1:51:40:43:55:72:20:3e:f8:a2:e2:44:86:b1:
87:80:6e:b4:b9:8f:4d:4f:50:d9:ae:23:b3:54:01:b6:ce:33:
d6:2b:a1:4b:21:a3:19:1b:be:a3:58:f0:53:e3:75:31:25:6d:
01:e6:6f:0e:47:ee:de:23:c1:8d:69:6c:b4:d3:4e:cc:98:20:
e4:ad:73:0d:94:cc:e3:82:4c:b4:a9:bd:41:85:1b:a7:8e:14:
7e:05:ad:48:3c:88:bb:87:3d:ab:7a:1b:f4:f1:86:f0:e9:30:
b4:56:9b:cd:00:e3:4f:1e:fe:4c:7c:aa:31:4d:6b:ec:d3:0c:
df:4d:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:44 2025 by rpki-client