Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa
File: d6622abc-f896-4288-ad4e-5c52c1eaf806.roa (raw, json)
Hash identifier: RIHChOsWZqUvwBhe/yhowP1JrFRiUs17FscEhrYioUU=
Subject key identifier: 55:02:12:2C:6C:BE:97:9C:5B:1F:DB:56:6F:CF:73:16:C9:3E:05:77
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6DFA2498014638269005A259D764F922E6945CA0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa
Signing time: Fri 21 Mar 2025 00:01:33 +0000
ROA not before: Fri 21 Mar 2025 00:01:33 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:4800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:fa:24:98:01:46:38:26:90:05:a2:59:d7:64:f9:22:e6:94:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 21 00:01:33 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:04:a9:22:35:9d:31:c4:23:b9:58:8e:69:
c3:ff:f4:e6:1b:4e:19:77:af:95:95:70:73:ae:b5:
da:6c:69:a0:bb:21:48:1c:47:07:35:9a:ec:9c:cc:
a8:62:cf:f1:f3:83:cc:14:ef:ec:3a:f4:c4:73:be:
00:78:61:42:c1:dd:74:af:62:71:fe:5a:0b:04:89:
d5:40:1f:72:f1:67:f3:73:89:a8:d6:b6:4e:c8:cf:
4a:d5:eb:57:f8:4d:0f:f5:31:52:f0:94:cd:db:41:
72:98:e1:15:ce:b0:29:57:82:6c:69:f0:0f:84:38:
03:63:27:9d:6e:54:19:df:98:cb:5c:a5:ed:ef:b2:
01:90:1f:60:ae:3f:20:d8:d6:71:70:6f:1d:4c:a2:
11:7b:08:6a:72:e1:c2:52:e9:67:11:05:0b:00:47:
f1:fb:d5:8e:3a:dd:0a:79:cb:63:47:33:f5:8a:d2:
97:42:4d:91:d2:71:e8:0b:60:cc:b2:be:a1:26:cd:
d5:d9:5d:a6:74:ed:39:7d:bc:94:d0:49:57:93:ed:
b4:22:14:c7:f7:f4:94:3d:5d:64:5e:f0:6b:31:c9:
d0:d3:d7:59:ee:db:8b:7c:d8:a3:39:ea:ad:a6:ff:
c4:38:bc:cf:70:8d:f5:78:d2:6a:16:46:25:81:58:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:12:2C:6C:BE:97:9C:5B:1F:DB:56:6F:CF:73:16:C9:3E:05:77
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6622abc-f896-4288-ad4e-5c52c1eaf806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:4800::/40
Signature Algorithm: sha256WithRSAEncryption
47:61:aa:fe:86:42:63:ab:48:a3:2e:4c:0d:5a:08:bc:c6:01:
5f:ee:97:2f:c4:bb:68:ad:79:a6:f8:e3:50:9d:14:55:c6:99:
c9:d2:40:bb:0c:ef:86:e0:ad:23:25:11:fa:99:7f:fb:68:3c:
75:f0:dc:59:c5:9c:28:32:e2:cf:2f:44:b5:77:00:2d:6f:b3:
f5:a2:55:57:05:09:c3:52:44:7a:8d:55:d6:05:81:71:32:4c:
c3:78:80:62:ba:63:5b:0f:97:8a:df:bb:db:b0:cd:3c:85:28:
cc:80:95:7c:70:56:c2:99:32:85:4d:4f:69:9b:3e:3c:80:cd:
13:37:c0:84:a2:83:02:c4:48:e0:db:49:d9:53:7f:58:a1:5d:
58:ee:95:2f:b4:0f:37:61:36:df:25:6b:01:93:df:f6:37:1f:
75:8c:3f:16:22:8d:4d:51:ab:79:fb:a9:83:4d:32:3e:5a:ea:
11:8e:04:14:0e:5f:27:1e:a2:21:1a:8e:8b:39:5f:47:c8:ad:
a6:ad:cb:e4:5b:8b:a5:b7:91:85:14:58:56:81:d7:7e:c6:e3:
00:b6:42:63:ea:81:23:b2:54:1e:08:62:f5:ff:c1:35:69:90:
20:ac:0b:83:ca:47:0d:e0:b5:3d:d3:cf:d4:ea:ec:47:14:ea:
55:9f:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:47 2025 by rpki-client