Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c18e991-5fbd-4f5a-b386-f3403cd62fb9.roa
File: 9c18e991-5fbd-4f5a-b386-f3403cd62fb9.roa (raw, json)
Hash identifier: /jVPw81o19Ex+1C9BZmCLFFaxUtDiyokEaNvZWEHrVA=
Subject key identifier: 0F:81:8D:BA:99:E6:D9:32:49:EB:B1:88:67:A3:FE:C3:8F:11:7D:29
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2C20794F9826E8DF2E4FA4682F065CF060B4B24E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c18e991-5fbd-4f5a-b386-f3403cd62fb9.roa
Signing time: Fri 28 Mar 2025 00:00:26 +0000
ROA not before: Fri 28 Mar 2025 00:00:26 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:79:4f:98:26:e8:df:2e:4f:a4:68:2f:06:5c:f0:60:b4:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 28 00:00:26 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:f9:59:a1:dc:c0:b8:7e:25:33:ff:91:54:
51:bc:2c:49:9c:43:3a:61:00:4b:18:1c:4c:e6:21:
be:d7:97:8c:7e:bb:32:13:1d:df:ce:08:bd:04:8e:
26:ad:85:7f:e2:3e:00:ac:8b:17:bd:98:92:65:44:
84:98:ce:5d:10:af:ef:6a:dc:ca:ca:87:fa:6f:c8:
68:91:2a:cb:4d:a1:86:fc:b4:48:44:b9:8c:49:6d:
6f:25:04:e1:9d:35:c1:53:df:b3:11:82:de:0c:e0:
a9:35:d9:e2:9b:78:f2:e6:56:d7:d4:35:2f:37:ef:
1f:3f:83:b9:47:1e:ce:b6:fd:33:86:d8:bf:89:9a:
26:2b:ab:56:0a:56:c7:be:a0:1f:fb:b4:62:fe:94:
b2:1c:0b:3a:6e:ef:a5:0a:01:72:1b:19:72:56:c6:
b8:57:3f:f1:10:ba:77:50:65:44:69:9c:a8:81:47:
41:c7:52:48:ca:57:82:ac:57:09:30:db:d8:2c:52:
a9:78:6f:6e:cf:74:74:a6:de:1c:5b:ef:57:d8:76:
cf:de:84:a7:b8:f9:f0:77:d7:c7:0a:72:70:14:6d:
c3:4c:d8:1f:bb:f8:60:23:6a:90:1e:84:6d:cf:56:
ce:83:1c:87:75:df:8f:84:f9:27:64:99:d6:94:e2:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:8D:BA:99:E6:D9:32:49:EB:B1:88:67:A3:FE:C3:8F:11:7D:29
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c18e991-5fbd-4f5a-b386-f3403cd62fb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:9000::/40
Signature Algorithm: sha256WithRSAEncryption
57:1f:e6:39:f0:d3:40:42:4d:87:14:51:8e:04:73:07:ee:5f:
56:2b:3b:74:7b:4e:bc:12:c6:5a:bf:a7:95:67:18:2c:38:65:
25:54:07:28:5d:63:4a:d6:b3:4a:50:db:b9:22:c0:40:74:65:
06:92:87:f5:1b:2b:b8:6a:41:f6:69:5a:ef:5e:cf:a6:10:b8:
cb:07:d7:17:04:f6:a7:88:2d:d8:7b:5c:e7:85:c4:2a:93:b2:
88:f7:00:f0:d4:21:7d:6b:35:ba:0e:4a:e7:6d:6a:04:c0:4d:
0e:9a:3e:eb:ce:46:3a:6c:06:9b:cb:d0:f5:c1:f4:6d:a0:c0:
36:04:e7:e2:cf:78:c5:40:a6:5a:d6:0a:17:0a:ad:46:42:fa:
2a:73:25:d1:86:21:bf:61:ba:37:3a:85:bd:71:e6:25:42:b9:
4a:01:cb:fb:65:b4:66:e4:ee:6c:52:4d:5f:23:92:f4:8c:5c:
91:72:a3:6e:2d:4a:ba:c6:0a:79:53:58:97:2b:ca:9d:d2:73:
17:55:d6:9f:38:2b:0f:c0:69:ca:f4:52:c1:f8:7e:b8:e0:9a:
dc:d2:eb:e0:fe:f1:f0:64:81:a1:0d:b8:64:75:4e:ad:3a:2a:
d2:8b:ec:5c:05:b8:40:96:e2:84:10:8b:35:d4:4f:14:e9:1c:
5d:e6:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:22 2025 by rpki-client