Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa
File: 6982f3ac-c7ae-423c-a028-517d7541d973.roa (raw, json)
Hash identifier: 5Qvp0UAhG7PMFXCJuN9T0EatXdG/aLa8CtLF6Z/XhXg=
Subject key identifier: E4:03:79:6A:76:83:F1:57:42:C3:B6:3F:1D:43:8F:24:B9:B6:93:63
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 2D9C0B20B4666F3A3A18E79B895720E70F1CD334
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa
Signing time: Tue 25 Mar 2025 16:50:03 +0000
ROA not before: Tue 25 Mar 2025 16:50:03 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2403:b300:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9c:0b:20:b4:66:6f:3a:3a:18:e7:9b:89:57:20:e7:0f:1c:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000
Validity
Not Before: Mar 25 16:50:03 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:b0:c5:23:04:17:91:7f:4c:2c:fa:d5:83:
74:b8:c9:31:6c:1a:13:a1:cb:98:59:4b:c1:25:4d:
a7:98:5b:27:07:ec:e3:96:43:ba:90:5d:64:92:d5:
bf:4b:9e:28:6c:f2:11:20:e3:c6:ae:ac:f7:4d:37:
3f:e0:a6:35:40:d6:ec:01:bc:44:8c:7c:b3:17:e2:
9d:ec:38:f3:69:60:99:94:45:9a:71:ba:1d:bd:37:
8f:cf:e7:a1:93:67:cc:25:8b:38:4e:1f:99:88:05:
26:be:b2:0f:46:d8:f7:ff:30:ce:39:b7:6d:3c:51:
33:64:d6:0c:f0:cd:a4:32:7c:15:6d:11:19:07:be:
8f:1e:2a:98:d1:3d:6b:c8:a6:aa:1d:ea:6b:78:08:
90:c2:16:30:14:81:9c:b6:e3:e4:c6:6d:19:a1:9d:
8f:c3:4f:06:e1:e0:5d:f6:2f:3b:48:37:24:52:a3:
2a:41:e3:76:3e:b1:19:63:05:56:97:5b:0b:5e:cb:
31:3b:9e:31:1b:d7:81:67:bd:72:37:5b:e8:b1:26:
bf:a7:a9:ff:5a:09:99:f4:86:81:79:2a:fe:48:bc:
84:9b:15:c5:c3:6f:b0:d0:48:47:fd:ab:df:89:ec:
14:4a:40:fb:2d:6d:b0:3a:bf:75:87:10:40:de:29:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:79:6A:76:83:F1:57:42:C3:B6:3F:1D:43:8F:24:B9:B6:93:63
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/6982f3ac-c7ae-423c-a028-517d7541d973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b300:1000::/40
Signature Algorithm: sha256WithRSAEncryption
63:39:07:be:56:c2:f1:7f:98:37:21:ac:08:8c:e3:da:a6:26:
23:2d:fc:8e:f2:59:93:4a:e7:6d:ae:fc:d6:2e:17:48:a3:ee:
f2:86:91:5c:7f:5f:c3:ea:49:d0:66:63:f3:e8:24:d6:ac:b1:
95:0c:98:91:75:ad:97:c8:06:33:e1:0a:fb:a9:80:7a:f7:74:
c0:09:e3:86:be:00:f6:0b:e1:b2:d0:7e:e3:ea:6a:d7:f0:0c:
df:a0:66:1f:ef:4d:f0:cf:e2:58:c3:20:c6:96:52:84:42:85:
8c:54:7e:09:b3:4f:30:45:ab:2b:f2:d4:20:48:08:df:eb:4c:
6e:1a:28:6b:28:cf:d5:11:1b:21:f2:4f:aa:ac:5d:36:a5:4d:
00:de:da:5d:50:95:ae:c1:3f:97:e5:3c:bc:6a:eb:08:d4:06:
e9:a0:85:48:8f:f1:71:3f:86:a5:e8:39:d5:5d:03:3e:ed:7a:
a4:5d:56:c5:65:fa:82:66:f6:9e:81:35:d3:9b:1e:56:73:63:
b8:ad:05:8e:04:45:c4:c2:92:4e:15:1c:07:0c:d4:b9:3b:64:
97:b9:a9:99:1b:ea:85:7f:83:f1:ff:55:c7:e4:90:e3:99:1e:
9f:e2:d1:9c:fd:bb:e4:f5:a5:3b:4b:ca:59:2f:8f:28:9a:90:
42:bb:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:49 2025 by rpki-client