Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
File: ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa (raw, json)
Hash identifier: nt2yx5Q7BBEn0HGzjLmVa5cwK3gMnuRBlTK5anukod8=
Subject key identifier: BC:C7:C4:2A:72:0E:96:B4:3E:72:12:F6:A8:33:DE:23:9B:A8:75:B3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 21872E5303E884A21DB4E9E4BA0EAB883597E8F3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
Signing time: Tue 25 Mar 2025 16:11:37 +0000
ROA not before: Tue 25 Mar 2025 16:11:37 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daa0:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:87:2e:53:03:e8:84:a2:1d:b4:e9:e4:ba:0e:ab:88:35:97:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 25 16:11:37 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:ce:5e:1f:9a:98:f5:a5:30:31:c5:67:17:
cd:5c:2f:be:51:b7:43:4c:bb:b5:73:7e:01:cf:e8:
ed:a5:47:a6:67:4e:1a:6b:56:a4:36:f4:fa:6c:81:
21:96:e8:7c:65:fd:99:7c:6f:a6:13:f3:58:b2:d6:
c2:e9:5c:ca:18:e0:36:80:09:fd:a1:cc:be:55:88:
2f:15:79:39:19:8a:fa:b0:2e:15:7a:c8:75:57:bc:
9c:ac:91:c7:f2:0c:a9:bb:f1:86:aa:a4:b2:5b:f1:
68:a5:78:9b:7e:0f:d7:91:0c:82:0d:bc:9e:2c:b3:
bd:4a:30:e9:e3:c9:c9:f2:52:57:0d:69:f4:d1:9f:
38:76:f2:6d:fe:6b:e8:6d:38:6b:cb:68:50:a3:18:
6b:60:1e:19:f5:64:21:e3:b1:5e:18:97:98:ea:80:
2c:1f:b2:c5:92:d8:df:c6:9e:df:31:d3:88:25:f0:
ac:d8:99:de:f9:7e:12:27:c9:1f:bb:8f:f5:24:c0:
aa:a9:b5:b3:c0:de:5c:91:00:1f:61:22:ca:9c:fb:
b3:82:80:f8:d0:e3:a5:e9:fc:a6:70:6b:8d:08:23:
2a:cc:95:d5:df:42:69:3a:7b:3c:cf:70:ca:55:5d:
04:50:8c:fc:67:7b:e0:0d:13:a5:25:c7:2e:f7:a0:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:C4:2A:72:0E:96:B4:3E:72:12:F6:A8:33:DE:23:9B:A8:75:B3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daa0:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:a5:7b:90:d5:a6:87:96:de:a1:cf:c8:ec:6f:77:10:09:22:
73:37:63:b1:5b:5f:a8:44:ca:01:f6:f0:c4:61:82:df:b2:71:
b4:eb:18:74:0b:38:e1:40:ca:ec:8f:ba:b8:e6:8a:72:63:c6:
35:10:e7:aa:72:ad:76:c7:ae:dd:4a:f9:13:2b:c0:1d:39:b6:
0b:a0:c4:a4:0c:50:3f:6c:6f:3c:7e:ce:37:f2:41:6b:3b:aa:
dd:23:16:15:c2:0b:53:d8:b5:8b:62:c0:22:83:4b:b1:8d:04:
cd:d6:0e:5d:a2:c3:c5:8b:54:ff:73:44:cd:3e:b4:4d:f3:79:
b4:9b:56:b7:ed:15:32:94:0a:23:67:5b:80:a1:07:8a:60:1c:
17:df:f5:86:cf:a4:91:97:34:70:ff:1e:1c:ec:3c:35:ff:22:
98:8d:75:c3:05:76:3b:cb:98:6f:ab:dd:ee:dd:d9:bf:b1:bd:
d3:9b:66:26:db:af:24:bc:46:0f:d0:30:5a:a6:2e:b2:3a:a0:
fb:99:d8:1b:08:3c:7e:1d:65:26:e4:7d:93:c3:d8:a0:58:54:
a3:7d:ce:76:c9:51:1d:17:6b:a2:3a:8e:2f:78:25:c0:71:79:
f1:c8:d0:8f:ab:d8:53:2e:24:97:ca:4a:57:92:bc:f4:62:b1:
ae:c7:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:38 2025 by rpki-client