Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa
File: d6d439a9-d0b0-44a2-b326-95d1592e6156.roa (raw, json)
Hash identifier: 2pQe63yAIfvDY1O+kxoZih2VxrfpmXDI+OH7Qlk8QQg=
Subject key identifier: 29:DC:2F:B6:AD:32:30:62:DA:08:2C:3C:D8:1A:84:BA:7A:72:00:44
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 25E4AC8B460C66127AF3D59E88D5F333A5F017D0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa
Signing time: Fri 21 Mar 2025 00:00:17 +0000
ROA not before: Fri 21 Mar 2025 00:00:17 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e4:ac:8b:46:0c:66:12:7a:f3:d5:9e:88:d5:f3:33:a5:f0:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 21 00:00:17 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:7d:51:da:b7:82:b5:5e:61:c7:79:a9:53:
72:06:b8:73:75:9a:96:6d:30:4a:b1:38:3c:9c:b6:
7a:76:d4:65:9f:0a:f4:51:bb:b6:43:ad:ba:62:07:
99:a4:53:6b:c1:58:7c:b2:04:56:b4:1c:a7:9d:da:
7a:97:3d:8c:e6:d7:08:7b:ba:68:b7:6e:5c:84:96:
78:31:c8:3b:59:dd:0b:bf:8f:e3:d5:9c:c4:6e:94:
c6:2d:16:8a:8c:da:80:6c:cc:67:37:6f:58:38:f7:
a4:db:c9:bb:e0:35:d6:6d:02:c0:40:ee:97:3a:37:
a9:d6:0e:2d:80:72:47:28:c6:9d:75:ce:f0:00:c6:
84:c7:0c:cc:b9:2b:22:1c:a2:c3:20:69:6c:07:df:
ac:95:c2:39:91:39:c7:ae:8a:42:9b:c0:d4:71:22:
44:3d:8e:16:16:b0:4f:54:04:4d:8f:aa:51:03:61:
83:c7:4e:26:94:56:8f:76:7b:fb:03:64:7e:c1:48:
31:a8:47:a3:96:29:b4:79:94:c3:8b:ae:03:10:ea:
09:c7:d0:53:8e:6b:65:39:6b:5b:38:e3:92:d6:0f:
47:fc:e4:55:d2:1a:31:cf:88:2f:fe:d6:2e:72:79:
47:78:55:54:b8:d4:c3:af:15:25:1c:8a:f7:a3:ea:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:2F:B6:AD:32:30:62:DA:08:2C:3C:D8:1A:84:BA:7A:72:00:44
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
29:00:63:5c:26:8b:22:93:9c:ab:e2:a7:e3:1d:37:fb:21:f5:
f9:2b:d3:53:e8:ae:d2:23:2c:3f:f2:7f:d6:11:68:40:da:39:
e1:94:bc:74:87:7d:14:c7:ff:25:14:fe:ab:44:ce:bb:04:43:
7b:8b:6d:1e:2a:29:d2:dc:47:5b:26:ba:41:85:0c:7f:b9:d0:
7b:c0:ce:95:8d:74:ce:25:ad:f0:9c:53:40:b6:69:82:81:f8:
0e:2d:15:08:49:d8:94:7a:0f:dd:fd:b8:03:dc:25:d7:eb:f8:
20:68:a7:2e:22:f5:19:6c:7d:86:c2:1e:c9:db:c6:ff:94:3a:
2c:7a:1c:6f:c4:8c:e9:e4:69:37:b1:fa:7a:af:8f:af:62:24:
a0:7b:17:4a:53:df:ed:2d:36:11:f8:b7:e7:68:1a:2f:f6:19:
2e:42:bc:96:59:55:de:a4:e9:7c:df:a2:60:48:dc:dc:29:03:
ab:65:32:30:e0:84:94:dc:6f:cb:f4:87:03:80:d8:5e:7a:ca:
23:2b:91:40:f6:8b:5d:bb:df:18:0c:b9:e2:aa:72:a5:30:ea:
6b:fa:f1:b7:76:c8:3f:70:33:4a:2e:59:9f:60:82:f8:c6:2c:
d5:2f:50:3a:14:b2:59:2b:4b:7e:fc:4b:67:89:e3:97:88:74:
13:86:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:15 2025 by rpki-client