Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
File: f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa (raw, json)
Hash identifier: pD41SY6Cna4xL1LrgFoKBXvVUXbGf8LA7rJNknuBMtQ=
Subject key identifier: 77:04:3C:9E:62:12:72:2B:33:3D:99:24:40:41:15:29:D0:55:A1:F3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 27A7F352888633323E6795AC69F83F19056956CD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
Signing time: Sat 29 Mar 2025 00:01:20 +0000
ROA not before: Sat 29 Mar 2025 00:01:20 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafa:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a7:f3:52:88:86:33:32:3e:67:95:ac:69:f8:3f:19:05:69:56:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 29 00:01:20 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:98:e4:18:1a:9b:e5:aa:29:88:ee:9e:ef:
f2:de:f4:14:5f:12:9c:5d:ca:be:c0:fe:36:23:5d:
f6:47:de:02:91:a5:3e:16:c8:6e:9a:6b:db:11:f2:
ec:78:aa:20:0e:79:96:60:20:d3:7f:d6:d7:e6:78:
3d:48:71:94:b5:51:df:99:fa:06:46:1f:08:e1:79:
24:73:6b:b7:a2:04:96:ee:27:62:1b:10:a2:41:a8:
05:52:63:1d:b7:b7:b9:69:bb:36:47:ba:2f:ba:d2:
92:10:6f:a6:f3:77:23:9e:18:64:bd:3a:94:62:af:
55:3d:80:e9:d4:f1:7d:98:41:0c:c0:03:df:f0:dd:
85:d2:3a:b3:5b:a2:a0:4d:b8:bb:4b:74:b0:03:4f:
cc:59:30:88:c9:88:a5:14:21:cc:68:7d:29:64:9a:
2c:80:b9:6c:61:65:8c:44:12:e6:f5:4f:85:51:5c:
75:b4:cb:fb:b3:db:a0:24:2c:53:40:69:53:c0:02:
c4:4f:49:67:f2:a0:1b:82:3c:71:c2:b9:66:a7:96:
48:97:d7:d3:c9:4a:80:1d:4e:d3:49:f7:a5:cf:4e:
d0:71:0e:69:d6:35:a3:51:a6:01:22:f8:d6:fe:b7:
c5:e1:a3:79:33:50:3d:d7:14:86:24:ad:45:3c:7b:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:3C:9E:62:12:72:2B:33:3D:99:24:40:41:15:29:D0:55:A1:F3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafa:8000::/40
Signature Algorithm: sha256WithRSAEncryption
58:8a:7e:fd:c8:ea:c8:71:a2:5f:73:3c:22:9c:23:8d:55:e6:
c5:de:42:99:93:ae:2f:46:26:68:7e:ad:b1:10:a4:d7:a2:d9:
4d:1e:bb:76:77:02:27:80:d4:6f:32:86:68:d9:b8:10:50:a9:
87:68:fc:af:47:e7:72:83:64:ef:26:c2:a2:17:e8:96:32:1d:
08:41:e0:66:69:0b:3d:9b:39:6a:47:1f:c6:36:1e:f2:85:fa:
74:0c:03:43:52:3b:18:cb:48:ef:d1:4d:c3:5f:15:96:fb:85:
c0:f4:42:a4:23:48:94:7d:18:18:1b:f7:df:0f:a9:26:72:ec:
91:12:e5:8b:80:cd:bc:e5:a5:51:8b:76:6f:a7:f0:36:d8:48:
18:c3:fb:39:82:96:1f:4a:d8:40:d6:e1:3e:b1:e1:09:3c:fe:
c5:b1:ec:5a:9d:83:96:06:bf:51:20:bf:e5:9a:0d:bb:ea:80:
c0:41:cd:71:05:ac:49:c0:3a:3b:a4:71:69:62:12:af:34:aa:
89:93:89:d8:70:4a:01:c5:3b:2c:f0:01:66:1f:de:0d:1c:06:
7e:09:79:31:f5:f2:a9:1f:c8:04:ab:be:03:32:41:4f:b6:44:
15:4c:55:3d:09:76:bc:02:91:62:71:92:60:6c:75:1f:e3:ea:
47:aa:60:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:17 2025 by rpki-client