Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa
File: b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json)
Hash identifier: tNOemQeelSSFCifT1M0TTqkZTY7fXYKAPGc8uaLsZV8=
Subject key identifier: DD:24:E8:40:F5:75:99:73:A5:F6:C4:26:54:62:9C:A0:7A:DD:8F:E1
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3735F237B1B3ABC712A1E39372FA5EBADB6CD429
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa
Signing time: Wed 26 Mar 2025 00:02:04 +0000
ROA not before: Wed 26 Mar 2025 00:02:04 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf1:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:35:f2:37:b1:b3:ab:c7:12:a1:e3:93:72:fa:5e:ba:db:6c:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 26 00:02:04 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:d5:19:99:67:0d:9c:5f:a9:1c:2c:2a:e4:
1a:a4:47:72:9d:77:36:e8:c0:43:57:48:5e:df:a2:
c6:48:0e:1b:ea:da:a2:76:ef:15:46:a6:8a:e4:79:
30:ae:0f:aa:6e:55:ce:aa:bb:1e:dc:bb:87:9c:4f:
f5:24:d6:aa:b7:70:ae:5b:69:c7:c7:a9:93:eb:16:
fb:84:32:9e:d3:a5:66:09:e9:fd:76:7d:40:41:bd:
a7:3e:2b:db:6c:a9:85:8f:78:e9:32:c3:08:96:09:
28:11:36:50:57:62:39:79:07:a4:7e:ee:43:50:8a:
2a:4b:ac:8e:d2:f9:7d:e7:dc:de:fc:59:95:ba:97:
9a:40:92:16:11:22:2a:63:1a:dc:53:ce:b8:f0:09:
f4:7a:38:09:ad:78:29:4c:25:f5:a8:c0:90:73:56:
7b:bd:5c:8a:a9:ae:ba:f9:52:76:53:14:ae:6e:77:
34:f3:3f:0c:a8:0b:e2:9a:26:08:64:2f:97:43:41:
ab:6d:86:e7:ce:ed:50:fd:f3:92:82:72:29:60:22:
c1:fc:c0:49:4a:7f:f7:61:87:59:9f:86:c9:7a:72:
d6:21:cc:61:af:8f:a6:a1:d5:f5:a5:1b:56:12:cb:
09:7c:89:26:58:18:69:3a:e6:d9:2c:b2:ed:ce:5a:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:E8:40:F5:75:99:73:A5:F6:C4:26:54:62:9C:A0:7A:DD:8F:E1
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf1:9000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:33:08:90:15:1a:88:1d:a4:26:db:65:18:ab:18:34:33:86:
2f:8b:55:fa:3e:be:b8:34:e5:70:31:8f:96:4a:34:3f:32:d3:
e3:ef:94:b8:10:18:f3:5a:60:43:02:30:18:c2:59:9c:51:30:
2f:28:e8:56:11:3c:20:b4:f8:38:f8:8a:c2:32:ff:ab:fe:80:
99:b6:df:9f:3c:24:d5:24:f5:d6:7f:9d:2c:df:06:b7:aa:84:
21:cc:5b:cc:10:7a:e9:69:15:b4:db:23:8d:95:7a:68:c7:78:
97:3b:fc:be:70:08:bd:53:4e:d2:a4:77:ed:e0:8c:9c:8c:74:
85:7e:f7:41:45:25:20:8b:a2:70:19:a4:82:e6:5e:3e:35:8d:
d4:b0:53:24:c4:37:f6:c0:8d:df:40:8a:03:4f:2e:f9:ac:cb:
db:36:3f:39:93:38:61:46:b9:57:28:4f:07:41:f1:1a:9d:c9:
5a:9d:b5:81:d9:c9:1d:bd:40:26:bb:4c:b7:26:f4:c5:9e:5b:
33:66:be:cc:50:ce:1d:98:f3:25:b3:e6:68:b6:80:ae:de:98:
e7:f3:36:ea:06:e5:30:e7:03:e2:91:e1:4d:1a:69:7f:fe:db:
2c:e4:7e:e1:2a:8f:63:38:92:f2:40:86:8b:75:7e:e8:1c:8e:
51:c9:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:49 2025 by rpki-client