Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d69acedd-f392-46bf-8125-ae563560d66f.roa
File: d69acedd-f392-46bf-8125-ae563560d66f.roa (raw, json)
Hash identifier: ISSrv44WM6cpCR/nDEB/OYmhnP9jJva2Gmi7+Oy8UV4=
Subject key identifier: 51:44:41:0C:E5:C2:A2:19:B5:5F:66:D0:86:5B:2B:88:4F:D6:75:84
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 601111FAE245A85305C41EF2A53E609CCFB10CA4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d69acedd-f392-46bf-8125-ae563560d66f.roa
Signing time: Fri 28 Mar 2025 00:00:30 +0000
ROA not before: Fri 28 Mar 2025 00:00:30 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:11:11:fa:e2:45:a8:53:05:c4:1e:f2:a5:3e:60:9c:cf:b1:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 28 00:00:30 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:cb:4c:4d:bf:18:f7:45:46:4d:56:32:25:
3f:b8:e2:bd:fb:c1:20:1d:68:9a:46:01:2f:e4:af:
97:7a:42:34:2e:a8:52:43:fc:67:59:c7:2e:4a:df:
0a:2b:6b:1c:b0:84:31:53:36:40:1a:b6:d8:00:7b:
46:15:96:c0:9e:1e:d2:44:af:25:62:4b:e9:75:3e:
d7:a1:0b:f7:ab:01:62:f4:26:9f:0e:ac:2c:8d:b6:
3f:6e:31:f6:7b:fe:24:af:c8:e2:62:de:c2:74:a0:
c1:d1:9e:74:16:cc:1a:da:e9:8a:75:05:19:a0:a9:
2f:3c:10:fb:cd:88:0b:88:27:ca:cb:66:c3:0c:40:
d8:1a:3a:d5:0f:6e:1b:a8:e4:79:fa:97:93:0b:c1:
1f:b0:ff:90:34:3d:a3:4e:84:6f:1d:69:1a:ba:38:
17:e8:47:51:a0:01:27:c5:08:ae:11:4c:87:51:9a:
ba:97:10:49:4e:28:25:dd:32:6b:6c:b2:e2:9f:68:
b8:90:76:02:c4:5d:df:d3:63:79:17:da:71:1a:4e:
9e:02:5c:4c:65:65:50:4f:e6:6b:dc:0f:57:9c:40:
77:1c:91:a1:c9:2b:46:93:1a:f2:f8:b4:7c:54:4c:
2f:5e:2d:02:42:a9:86:53:85:d6:25:7d:4f:60:81:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:41:0C:E5:C2:A2:19:B5:5F:66:D0:86:5B:2B:88:4F:D6:75:84
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d69acedd-f392-46bf-8125-ae563560d66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:a000::/40
Signature Algorithm: sha256WithRSAEncryption
39:fb:db:81:1d:59:26:56:0b:d0:12:85:f1:9b:e1:5b:36:06:
8c:4e:c5:5b:47:bd:74:9c:36:d8:25:a9:4c:59:f6:e0:4c:ad:
36:31:7a:96:79:df:3b:46:d7:59:d2:41:9a:f2:c1:01:60:27:
79:5f:80:83:1a:3f:32:f3:65:8a:d1:0f:7b:39:c0:1b:4f:fb:
6b:76:ce:34:8f:57:9d:6e:54:8c:9e:8b:f4:55:3c:27:66:cc:
de:9c:71:81:63:27:12:44:39:8a:17:c1:d8:69:77:9d:c4:e9:
49:5c:c5:b9:1c:b5:45:e9:57:43:1c:50:28:5b:0b:51:f7:c9:
c0:a3:6a:b4:8d:dd:3b:0b:8f:b6:01:c4:75:ef:e5:bd:29:21:
53:e9:39:dd:aa:66:39:f6:93:73:f5:d0:5f:bf:9d:fa:49:01:
0d:fd:32:46:b9:7c:1e:44:ed:42:ba:a1:bf:5c:d0:1a:81:f6:
36:96:3e:06:30:d1:ef:80:b0:87:67:7b:bb:ba:82:9b:0a:f9:
65:9a:e0:01:8c:ee:58:7d:5e:6d:2a:9a:ef:ea:79:88:a2:6c:
14:9d:61:69:9b:f0:81:6b:9f:09:cf:32:f8:5e:ca:c1:21:87:
81:da:8f:7d:e8:eb:f4:6b:a1:d8:cd:7e:c5:80:91:03:5e:8b:
fd:ea:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:59 2025 by rpki-client