Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ffa6708-0cf2-448a-b5f1-bbc7c9b40187.roa
File: 1ffa6708-0cf2-448a-b5f1-bbc7c9b40187.roa (raw, json)
Hash identifier: OSI19hEo78PvI2u6WvezxgqwU2bhS+yhoTTLM+BRIiM=
Subject key identifier: 30:84:6D:8A:54:E9:CB:6D:89:D2:96:B7:10:06:13:2C:DE:5E:50:93
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5D3695B66378F638381778EF23F6A8C5148A55CA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ffa6708-0cf2-448a-b5f1-bbc7c9b40187.roa
Signing time: Tue 25 Mar 2025 16:11:21 +0000
ROA not before: Tue 25 Mar 2025 16:11:21 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:36:95:b6:63:78:f6:38:38:17:78:ef:23:f6:a8:c5:14:8a:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 25 16:11:21 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:69:92:44:71:7b:75:88:1a:75:cc:ca:bb:
92:82:80:2f:4b:ee:fb:bb:38:d7:38:fc:c3:61:3a:
73:04:d8:18:98:bc:ec:13:7c:6e:f0:b2:97:6e:85:
dc:f8:7d:96:0c:70:2d:6b:4f:18:92:5d:b3:82:95:
1a:5f:c3:b6:80:b0:96:c4:e4:2e:8a:d9:80:83:b9:
ad:aa:36:f2:e0:a6:9b:fd:5b:42:92:8d:bb:ad:ea:
37:51:fe:6c:4d:88:62:ea:0d:25:b3:e0:28:64:b6:
a9:41:6c:23:c6:54:a3:62:6e:12:a3:04:26:f1:b4:
c8:92:7f:01:41:92:08:2c:b6:31:55:6e:02:2a:e1:
47:87:ed:f0:1c:01:30:a4:99:c9:52:7b:60:af:03:
c4:6f:f7:33:7e:e1:6b:c9:69:06:ed:10:cb:59:94:
ad:8f:83:f6:8d:e3:df:d0:dd:37:c3:72:1b:46:ea:
a2:98:02:c6:e1:7a:05:f8:95:e4:60:22:43:f3:10:
44:77:ca:2e:1a:e5:b8:94:f1:ed:b0:a3:2a:72:a1:
4e:2f:42:c0:11:48:7b:ce:00:d2:95:91:a0:69:57:
32:64:22:06:0f:12:08:56:bf:4c:f6:5d:88:f5:dc:
1c:0f:d8:b9:d1:af:bf:ac:1c:b3:50:4f:01:d9:a8:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:6D:8A:54:E9:CB:6D:89:D2:96:B7:10:06:13:2C:DE:5E:50:93
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ffa6708-0cf2-448a-b5f1-bbc7c9b40187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:c3:72:70:38:bf:72:48:d6:ce:f0:2b:f6:80:95:17:c3:50:
1d:c7:9a:11:a1:37:13:ad:92:7f:7d:6f:c2:83:37:0a:80:e1:
59:3b:27:5b:10:4e:7c:89:60:f3:d9:09:18:3e:16:2e:5a:2d:
16:24:c1:d7:40:90:19:b7:ff:d0:f4:20:63:1f:55:23:95:19:
5a:09:8f:c0:7c:62:38:87:00:0b:06:9b:a2:10:3f:9a:c1:88:
ca:00:3f:bb:c4:fd:91:fa:4e:b9:ea:9a:50:89:ab:e8:54:6c:
8c:93:91:2d:c7:70:13:54:10:63:f0:19:48:f0:5d:8a:f7:98:
c1:df:92:d4:11:50:f6:1a:37:69:9c:42:b9:5b:89:3d:f9:df:
e6:85:b6:88:88:d1:ff:40:11:77:8d:3f:da:38:d0:f6:14:61:
40:73:03:c1:60:ed:f0:8f:55:d5:1f:3d:48:f1:06:fa:a8:39:
42:d6:cb:89:aa:78:94:7d:60:33:8a:56:aa:dc:aa:14:66:8b:
43:51:e9:fa:4c:03:3b:1e:ff:e8:19:bd:39:d1:b0:91:59:ee:
d4:b9:94:d7:e6:db:fd:be:cf:f2:e9:3f:71:10:88:13:9c:8a:
fc:6e:83:24:39:65:16:36:2e:6b:13:6b:6b:be:12:40:f2:b6:
15:d9:6d:5d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUXTaVtmN49jg4F3jvI/aoxRSKVcowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEyMVoX
DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTdiNTdhYjE2MWYwYTQ5NWNjOGJi
ZGM0ZWQ5MzM4NmIzN2UxNDhjNTI2YjhkM2QxZjZjZTFmYzM3ZWVkZjYxOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5tpkkRxe3WIGnXMyruSgoAvS+77
uzjXOPzDYTpzBNgYmLzsE3xu8LKXboXc+H2WDHAta08Ykl2zgpUaX8O2gLCWxOQu
itmAg7mtqjby4Kab/VtCko27reo3Uf5sTYhi6g0ls+AoZLapQWwjxlSjYm4SowQm
8bTIkn8BQZIILLYxVW4CKuFHh+3wHAEwpJnJUntgrwPEb/czfuFryWkG7RDLWZSt
j4P2jePf0N03w3IbRuqimALG4XoF+JXkYCJD8xBEd8ouGuW4lPHtsKMqcqFOL0LA
EUh7zgDSlZGgaVcyZCIGDxIIVr9M9l2I9dwcD9i50a+/rByzUE8B2agBIQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDCEbYpU6cttidKWtxAGEyzeXlCTMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzFmZmE2NzA4LTBjZjItNDQ4YS1iNWYxLWJiYzdjOWI0MDE4Ny5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaMAwDQYJKoZIhvcNAQELBQADggEBAK3DcnA4v3JI1s7wK/aA
lRfDUB3HmhGhNxOtkn99b8KDNwqA4Vk7J1sQTnyJYPPZCRg+Fi5aLRYkwddAkBm3
/9D0IGMfVSOVGVoJj8B8YjiHAAsGm6IQP5rBiMoAP7vE/ZH6TrnqmlCJq+hUbIyT
kS3HcBNUEGPwGUjwXYr3mMHfktQRUPYaN2mcQrlbiT353+aFtoiI0f9AEXeNP9o4
0PYUYUBzA8Fg7fCPVdUfPUjxBvqoOULWy4mqeJR9YDOKVqrcqhRmi0NR6fpMAzse
/+gZvTnRsJFZ7tS5lNfm2/2+z/LpP3EQiBOcivxugyQ5ZRY2LmsTa2u+EkDythXZ
bV0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:28 2025 by rpki-client