Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd1834eb-129b-4620-aabb-2d2848f455e0.roa
File: cd1834eb-129b-4620-aabb-2d2848f455e0.roa (raw, json)
Hash identifier: 1/XPMdNzBtQQ0UAac+pjmflCBi3dynor6W4440P4/vw=
Subject key identifier: E1:64:F2:06:7D:31:84:11:C3:F1:89:09:72:CF:AD:77:57:32:4C:FA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 50AF9670595FF86455F4498C177913AE82326301
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd1834eb-129b-4620-aabb-2d2848f455e0.roa
Signing time: Fri 21 Mar 2025 00:00:21 +0000
ROA not before: Fri 21 Mar 2025 00:00:21 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:af:96:70:59:5f:f8:64:55:f4:49:8c:17:79:13:ae:82:32:63:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 21 00:00:21 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:47:d6:5d:57:a6:77:0d:6b:c0:0c:86:4a:
94:87:e7:0a:d5:4e:ac:b2:44:c1:8a:10:3f:3a:90:
b5:3b:91:b2:ab:a7:13:3e:c4:d3:dc:fa:0d:32:c0:
83:6e:c7:1a:42:d8:6e:27:75:8b:e4:33:6d:e2:f0:
71:cf:c3:ae:da:73:5e:80:fd:dc:3a:e5:5a:28:28:
cd:27:2d:14:47:92:c7:10:ff:e5:84:ec:01:58:e0:
d8:0a:8f:b8:96:03:e6:6c:90:ed:b2:12:e3:59:2c:
10:88:1f:b4:70:83:4e:4c:09:24:51:fd:b8:ff:2d:
ba:66:c0:50:8d:ba:20:c5:97:70:f1:45:64:fc:0b:
29:ec:f7:40:70:6a:94:ac:5f:46:4a:8b:e0:53:20:
38:d2:7f:f2:de:80:1f:89:95:d7:c1:85:64:0f:a7:
65:9b:b7:9f:94:9c:d2:13:10:15:40:46:3b:4d:55:
f6:50:b0:89:25:b2:18:6f:a0:fe:c8:4d:01:56:8a:
57:b2:4f:7c:7f:c0:a4:2b:0c:b6:27:51:66:4f:e5:
16:50:49:e7:3f:e0:a4:96:25:2d:e7:63:19:cd:cf:
ed:85:f3:91:92:81:92:e1:b3:4b:d8:32:5c:d7:fc:
ff:ad:9c:a9:5d:c7:3a:37:59:24:f6:ab:ca:82:16:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:F2:06:7D:31:84:11:C3:F1:89:09:72:CF:AD:77:57:32:4C:FA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd1834eb-129b-4620-aabb-2d2848f455e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:7000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:2e:0c:0d:a9:76:9f:fe:db:00:41:ae:83:0f:b0:02:f6:e1:
03:b5:48:aa:d6:d8:e3:8e:e4:ee:78:41:16:d8:60:8c:28:fe:
86:f8:d2:f1:19:36:f1:97:c1:5a:80:0e:bb:76:62:5c:dd:9a:
4e:a4:8a:b3:ed:5e:6c:68:ed:d1:80:17:14:0d:33:c5:5f:5b:
1d:4f:9b:83:18:2f:15:d3:cb:5d:48:06:3e:0c:f2:0e:bc:91:
86:07:cb:db:f6:11:2d:6d:41:fa:71:f4:38:03:15:35:8e:a1:
ae:01:17:4b:bb:e6:e1:01:62:04:b5:42:52:f2:0f:da:87:71:
a6:64:9b:49:16:92:fe:84:98:9a:e0:fe:87:56:11:80:14:28:
9b:ce:53:79:db:97:37:6c:94:ce:47:ec:58:eb:08:03:f2:e0:
3b:c1:39:7c:81:81:7c:81:c3:24:c1:02:16:77:2a:9f:c9:a6:
64:ab:67:e1:fd:91:3a:47:dd:f2:2a:c6:23:4d:9f:a0:5e:69:
1d:fe:45:49:b7:02:d1:d7:2a:ac:5c:80:49:91:43:3e:f4:61:
c6:0d:da:15:ed:88:a3:c2:c9:2f:b9:c8:bd:67:c6:b4:97:cc:
af:8c:0e:36:79:d3:89:ef:be:a5:67:9a:34:55:a0:60:31:1b:
c7:77:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:00 2025 by rpki-client