Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb2f7d12-227b-4d37-945b-3190fa872ceb.roa
File: cb2f7d12-227b-4d37-945b-3190fa872ceb.roa (raw, json)
Hash identifier: biL1HR1Yh+mwMoOprgRZ+l05AgL1hZMI3++D0kohtuU=
Subject key identifier: EB:A9:49:F9:F3:2F:0F:AF:99:11:DD:F4:40:0B:8D:86:1E:FE:C3:66
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 25F0197E430F19A315F485F7A5F77ACBE46704B4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb2f7d12-227b-4d37-945b-3190fa872ceb.roa
Signing time: Fri 28 Mar 2025 00:00:16 +0000
ROA not before: Fri 28 Mar 2025 00:00:16 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f0:19:7e:43:0f:19:a3:15:f4:85:f7:a5:f7:7a:cb:e4:67:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 28 00:00:16 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:9b:63:1e:87:d7:8d:2c:52:d8:79:b3:09:
9f:a2:a1:db:54:4d:48:21:8e:6d:62:fb:cb:0c:e6:
29:a2:27:5a:26:58:d1:98:23:0e:71:f1:18:39:e9:
d6:b7:f6:aa:9f:3c:90:a6:f6:a6:85:7d:cd:62:dc:
83:1b:cb:b5:02:97:63:0a:e7:de:b5:29:51:3f:0e:
c3:0f:54:e1:e0:15:35:60:ac:0d:59:00:e8:d9:8c:
f3:64:82:e7:5d:10:d3:82:70:f2:74:ed:05:d9:a9:
37:a3:d1:93:d1:e0:22:0b:af:e9:ee:4d:88:a2:56:
c9:72:52:ac:b9:50:61:8c:b4:aa:d3:64:61:e9:bf:
0a:a5:3d:98:b6:8f:82:16:a7:ba:95:99:b5:77:a0:
3b:7b:27:c8:b2:f9:99:b1:97:b6:27:6f:c1:30:0a:
11:2e:02:18:3f:d8:63:b7:46:1a:5f:f6:60:26:27:
4b:c2:0b:d3:7b:4b:72:96:5c:74:ee:ae:20:13:01:
71:69:66:21:d2:5e:1f:78:42:8c:b4:a8:28:a1:47:
4b:d1:99:21:58:1a:6c:6f:50:ed:86:4f:8c:e0:af:
45:cd:cb:9a:f9:09:99:b0:ed:02:3a:73:9d:8a:f7:
9e:3c:cb:23:e8:43:eb:1f:39:12:d4:45:2a:af:ec:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:49:F9:F3:2F:0F:AF:99:11:DD:F4:40:0B:8D:86:1E:FE:C3:66
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cb2f7d12-227b-4d37-945b-3190fa872ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:800::/40
Signature Algorithm: sha256WithRSAEncryption
88:f8:c8:d7:2e:c1:83:d3:c3:d0:08:76:b2:5a:d2:ee:6c:77:
ce:70:66:3b:72:c6:07:76:91:fd:d7:83:17:ca:6b:db:f0:56:
fc:90:39:59:7a:ba:63:f3:ee:dd:68:3c:bb:4d:3e:18:3f:b9:
5d:81:bc:9f:34:d0:39:f7:ce:97:a0:05:9c:ee:d8:af:fe:ef:
d7:f9:18:1d:1d:8a:e8:bb:0c:d5:41:50:d7:23:9e:35:9f:d3:
60:a7:6a:a9:45:6e:61:1a:ac:2b:da:9c:6a:51:df:ae:53:83:
a7:ce:72:b0:69:61:52:30:87:55:83:91:bc:d9:89:75:49:79:
82:3f:2f:24:d6:04:d3:d1:09:6a:42:74:bf:f0:6d:53:ba:d3:
82:30:08:5d:b1:df:dd:9c:4a:28:95:f5:b2:2d:e6:ca:5e:32:
e9:c1:43:33:fe:65:14:34:f6:b1:48:02:c7:e5:c0:9d:d2:5e:
17:e5:c1:39:d0:e3:5f:a4:1f:17:07:b2:45:83:ab:12:7f:e4:
6a:6b:c7:12:a1:74:f3:1b:ae:a2:99:e7:7a:42:e3:df:c7:e2:
9b:38:a2:17:a1:67:c4:de:ce:ea:3a:e7:5a:cf:75:00:d1:5d:
76:75:1d:b0:ca:ad:06:19:a3:56:f4:42:5c:0c:16:d5:dd:ad:
22:b3:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:34 2025 by rpki-client