Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa
File: 9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json)
Hash identifier: 07SpBl0ZtBDLhVQvMm/ThI3Jk5iShnyH7R8n0pnH2JA=
Subject key identifier: ED:FC:01:60:5D:EB:70:E9:96:9E:6A:2E:0E:35:63:75:3D:3B:E0:FE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0B3FDC1F0EFB92CA56497EF9E5EBF5D0114B2316
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa
Signing time: Tue 25 Mar 2025 16:10:09 +0000
ROA not before: Tue 25 Mar 2025 16:10:09 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daa0:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3f:dc:1f:0e:fb:92:ca:56:49:7e:f9:e5:eb:f5:d0:11:4b:23:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 25 16:10:09 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:bf:c3:08:d3:a5:27:29:62:77:4d:25:d2:
ca:cc:87:d6:36:4f:10:8e:9d:21:62:6d:dc:0b:0c:
72:af:c9:dd:0e:99:0f:1e:4f:92:60:07:80:43:a6:
dc:de:c5:83:51:be:48:56:6d:d5:ad:04:50:29:06:
4c:ed:ec:d7:d3:52:48:fb:28:be:1e:e7:2d:9d:ad:
55:42:7d:37:a1:8f:7a:70:76:3f:a1:73:5f:9e:a0:
e7:58:69:7f:9d:46:40:9f:65:a7:1c:23:91:c9:e5:
73:a7:0a:a8:08:3a:68:ef:a6:bf:27:57:9a:36:75:
86:89:06:0e:eb:9d:6d:ce:ba:69:28:16:52:b5:28:
43:90:dd:fc:05:b7:9d:46:ea:41:14:cc:b8:70:3d:
12:10:7b:20:a4:39:6c:a1:6d:ee:20:52:28:5e:23:
b7:4a:27:6d:bf:52:f0:0c:9e:b7:c4:5a:69:bc:11:
16:65:c4:a2:43:de:a3:7d:59:81:ea:80:50:c0:94:
a9:ad:9d:4b:c0:2f:e0:20:29:b7:85:8a:38:8e:19:
8d:e4:bc:b6:70:a8:e6:82:9f:5d:0f:b9:5a:54:2a:
31:b8:72:9f:46:e3:2c:f1:71:d6:64:16:0a:be:05:
36:9a:2c:53:e7:7c:3b:3f:25:b5:38:e4:fd:4d:29:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:01:60:5D:EB:70:E9:96:9E:6A:2E:0E:35:63:75:3D:3B:E0:FE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daa0:6000::/40
Signature Algorithm: sha256WithRSAEncryption
33:fd:ae:8d:34:56:9a:4e:fc:cd:c9:24:28:c6:38:68:c6:d2:
97:a1:9a:5b:80:1b:64:ef:e8:ff:d2:f9:b7:7f:75:44:90:1f:
36:0b:4f:4f:ad:2b:dc:3c:d2:5b:d2:1d:42:db:dc:8b:d5:f8:
23:f6:be:89:41:58:ba:4f:e8:4e:3c:88:02:2d:83:78:9c:b0:
ae:d9:3d:db:c4:12:65:8b:25:04:03:8b:a0:ce:2e:6c:fc:52:
7a:64:5a:20:58:fb:bc:e5:24:6a:89:a7:23:34:0a:99:63:d4:
41:ac:4c:e3:23:b7:e5:6c:f7:23:75:5d:48:58:d9:99:f1:d0:
65:ed:ef:11:02:67:6e:51:fb:07:d3:66:1e:43:8b:38:9a:40:
45:77:3c:5c:b5:6b:d9:11:52:1d:e2:45:f1:32:26:38:e8:64:
42:01:c8:08:9d:3b:3f:13:69:dd:24:02:e5:c9:e8:01:54:ef:
a7:89:bb:47:61:25:9b:9f:5b:55:3f:a2:4a:4a:80:48:07:47:
6d:e7:44:52:ef:fb:7f:17:2c:8e:01:9e:d7:17:a9:88:d9:17:
68:c9:23:39:93:2b:38:75:3e:a3:e3:c0:d4:98:d4:cf:e2:9a:
fc:60:ec:68:2e:ea:ab:97:f7:15:b3:ee:50:06:58:06:34:1a:
da:34:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:14 2025 by rpki-client