Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa
File: 825b729c-7c4f-404b-b26e-13e5d882a631.roa (raw, json)
Hash identifier: Owp/p6+abF9iJ6ExSttFRgACovdrKQ6DSR5v2y/CI+c=
Subject key identifier: D3:74:20:EF:A1:D9:AD:58:26:B5:9F:CA:14:0D:DB:AD:D9:E9:00:66
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 03977E1875995D9032176ED787648A94A3F9AAC0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa
Signing time: Fri 21 Mar 2025 00:01:43 +0000
ROA not before: Fri 21 Mar 2025 00:01:43 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:97:7e:18:75:99:5d:90:32:17:6e:d7:87:64:8a:94:a3:f9:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 21 00:01:43 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:99:2c:e3:5a:a6:b5:fc:5c:75:cc:99:19:
c7:48:47:f5:31:84:98:e1:9c:f2:8b:40:2b:8a:79:
e6:3f:8e:9e:70:79:12:d2:08:63:0b:44:c6:f5:d3:
27:59:c5:fc:fc:3e:47:75:22:d2:e2:d8:65:03:40:
15:25:80:8f:23:15:da:d7:48:f3:55:50:ad:98:17:
c9:38:68:b2:90:25:ce:32:c7:e5:75:a6:f5:01:9c:
f0:12:48:19:9f:c6:91:e5:50:3c:00:b6:6a:24:15:
76:a1:ab:4a:0b:2c:32:7d:33:e8:a0:03:af:8a:a1:
e5:b2:12:31:ee:ed:52:be:4e:c9:13:af:b9:26:a0:
7f:24:7a:78:cc:ea:93:b3:01:bd:26:03:78:55:fd:
4e:a4:ac:d2:45:47:91:84:de:85:f0:16:a3:c4:80:
b1:9c:c4:b3:fb:d6:4e:d9:13:40:e1:bc:da:79:03:
d6:4e:a7:1a:98:ea:e3:c0:b1:00:ad:d2:8c:ca:0f:
9e:0f:4f:08:0a:9e:c1:e6:2f:10:4f:4d:3d:50:e0:
a2:6b:6a:16:f4:c4:5e:b0:59:55:1b:16:60:6f:e1:
87:59:9e:12:15:a9:dc:a5:c0:a4:ec:50:a4:17:79:
8e:86:d9:d5:45:18:8a:86:29:32:bf:1d:84:6b:51:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:20:EF:A1:D9:AD:58:26:B5:9F:CA:14:0D:DB:AD:D9:E9:00:66
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:06:ea:72:42:12:6e:dd:f0:64:aa:bd:79:c9:12:01:cb:0c:
0b:0c:85:a4:f8:55:83:22:15:5f:6c:c9:58:53:66:bd:44:5c:
cd:7a:7a:09:39:f8:ea:b1:62:07:ed:4c:5b:03:0b:9b:54:f5:
94:73:fb:d5:34:e0:eb:98:da:12:78:d4:34:f2:fe:01:f4:f6:
89:ee:75:60:80:ae:76:fc:36:a1:8a:c6:91:14:cb:39:9e:82:
f9:b2:68:71:5a:60:b8:ca:eb:11:44:d6:48:8a:e9:17:3d:2f:
ba:ce:6b:ee:bc:67:a7:84:56:77:e9:33:22:10:79:9c:85:60:
97:9d:95:9b:27:01:fb:84:17:af:38:35:fb:ea:0a:54:99:c1:
e8:36:17:bc:92:15:27:a4:45:5a:06:cf:b1:c5:79:00:ac:38:
48:01:c6:bf:3f:4b:fb:83:52:13:6b:d0:3d:0e:c1:68:8c:e3:
c9:28:bf:ea:51:eb:d7:6c:3d:e4:5d:62:57:7d:08:7b:ed:74:
13:3e:a3:af:e8:17:e2:51:64:a3:2f:05:00:c5:29:b8:7b:2b:
68:d7:17:60:61:29:4e:51:80:e4:66:39:7d:87:6b:4e:36:d8:
ed:c3:ee:59:10:44:8b:72:67:ac:55:fc:66:e4:8f:79:62:89:
3f:53:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:20 2025 by rpki-client