Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7e3992-4619-412d-a3bd-6b6b0c457ed0.roa
File: cc7e3992-4619-412d-a3bd-6b6b0c457ed0.roa (raw, json)
Hash identifier: J1IySbW9/mS/Zb8y/SKhHxHs5ezulDLQ+Cmc3q33qK8=
Subject key identifier: D1:41:CC:94:CF:1C:32:A6:64:3E:23:6F:DB:01:5C:BB:A5:E8:6E:AC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 769964CCEAF37060A5329D4B00A313DAD9E7B69F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7e3992-4619-412d-a3bd-6b6b0c457ed0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:8880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:99:64:cc:ea:f3:70:60:a5:32:9d:4b:00:a3:13:da:d9:e7:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=9e45ae18165b14db6d307088dc761176c477ed2ef3a325e654ae2d40445e31a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:fd:57:7d:c5:07:b4:8f:17:82:62:66:b1:
bf:58:a3:83:b1:a9:91:b0:73:a3:c4:89:74:10:86:
53:70:ec:f0:05:8a:dd:03:a5:b8:90:f2:57:aa:88:
65:d4:9a:a5:c5:30:78:41:d9:de:06:ec:92:e4:7c:
fa:46:60:63:67:26:f5:72:8f:3c:2b:b1:98:2d:e0:
14:b7:c6:4a:43:50:9b:2b:a0:ed:b6:11:8f:ec:c9:
58:e8:b8:1c:9e:59:fb:c3:95:4e:24:17:47:e5:40:
12:31:2e:f2:5e:d4:f5:35:f2:f4:53:35:89:c2:1a:
c4:be:2f:97:a2:3c:86:5f:9e:cc:05:00:a7:6e:40:
3e:4f:68:00:71:6e:21:f7:6a:8c:bf:2f:3a:1f:56:
9a:02:1b:ea:9f:bb:73:65:b4:19:bf:e3:29:6f:a5:
8f:d8:70:a1:71:8f:80:92:6f:99:c8:f7:9c:92:1b:
e2:5f:74:86:ac:3b:c4:f5:31:19:d4:02:79:89:86:
fd:e8:b2:23:85:16:7f:05:f9:9e:3f:f0:ea:24:5a:
d2:13:1e:3a:55:33:9d:f7:9d:18:97:76:6c:b2:58:
ee:3f:5f:e7:2e:41:a4:3b:23:1c:1e:d6:b5:91:9d:
83:ad:5e:9e:b8:b0:ee:13:21:30:22:9b:f4:a0:07:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:CC:94:CF:1C:32:A6:64:3E:23:6F:DB:01:5C:BB:A5:E8:6E:AC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7e3992-4619-412d-a3bd-6b6b0c457ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:8880::/48
Signature Algorithm: sha256WithRSAEncryption
81:58:f3:d4:0a:48:4b:6c:86:bd:66:16:cd:62:39:4b:8c:f1:
33:9f:d2:71:c6:7f:6a:e0:8e:4c:ad:3b:c9:4f:13:a9:6b:65:
59:0c:0c:af:c7:3f:8f:92:47:5e:72:93:13:63:68:20:5b:6f:
6e:a8:94:0b:95:91:8c:b6:b1:22:47:cf:77:ae:a8:fc:11:8e:
36:bd:81:f5:d9:ab:42:8e:ef:55:cb:7d:19:09:59:22:bd:84:
b9:00:75:0b:28:f0:e9:28:ed:93:f2:89:3e:3b:17:93:08:0e:
76:46:2a:5a:0c:8f:39:fe:f2:da:a5:c8:e2:e2:2c:65:2e:7b:
d5:cd:46:71:34:d5:21:82:f5:9b:f9:3b:88:1f:85:75:17:9a:
24:04:c3:b8:b7:12:37:30:2f:7d:5f:c3:a2:8d:6c:f0:b1:fd:
89:cf:40:c6:f2:71:b1:7b:8e:06:de:80:ab:2e:11:16:6f:7f:
96:90:fa:34:f0:b5:87:8a:c4:7d:d9:06:05:68:e0:08:ca:74:
59:f6:44:09:b4:da:5e:9d:7e:7c:bf:9e:eb:c1:20:1f:a1:b2:
42:7d:b9:3e:b2:82:7f:45:37:bf:61:2e:4a:55:dd:b8:31:32:
2c:6f:0a:9d:91:54:7e:a2:4f:63:22:c8:67:cb:cb:ba:39:f3:
84:1c:66:45
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUdplkzOrzcGClMp1LAKMT2tnntp8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAOWU0NWFlMTgxNjViMTRkYjZkMzA3
MDg4ZGM3NjExNzZjNDc3ZWQyZWYzYTMyNWU2NTRhZTJkNDA0NDVlMzFhMDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFn9V33FB7SPF4JiZrG/WKODsamR
sHOjxIl0EIZTcOzwBYrdA6W4kPJXqohl1JqlxTB4QdneBuyS5Hz6RmBjZyb1co88
K7GYLeAUt8ZKQ1CbK6DtthGP7MlY6Lgcnln7w5VOJBdH5UASMS7yXtT1NfL0UzWJ
whrEvi+XojyGX57MBQCnbkA+T2gAcW4h92qMvy86H1aaAhvqn7tzZbQZv+Mpb6WP
2HChcY+Akm+ZyPeckhviX3SGrDvE9TEZ1AJ5iYb96LIjhRZ/BfmeP/DqJFrSEx46
VTOd950Yl3ZssljuP1/nLkGkOyMcHta1kZ2DrV6euLDuEyEwIpv0oAethwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFNFBzJTPHDKmZD4jb9sBXLul6G6sMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2NjN2UzOTkyLTQ2MTktNDEyZC1hM2JkLTZiNmIwYzQ1N2VkMC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9IiAMA0GCSqGSIb3DQEBCwUAA4IBAQCBWPPUCkhLbIa9ZhbN
YjlLjPEzn9Jxxn9q4I5MrTvJTxOpa2VZDAyvxz+PkkdecpMTY2ggW29uqJQLlZGM
trEiR893rqj8EY42vYH12atCju9Vy30ZCVkivYS5AHULKPDpKO2T8ok+OxeTCA52
RipaDI85/vLapcji4ixlLnvVzUZxNNUhgvWb+TuIH4V1F5okBMO4txI3MC99X8Oi
jWzwsf2Jz0DG8nGxe44G3oCrLhEWb3+WkPo08LWHisR92QYFaOAIynRZ9kQJtNpe
nX58v57rwSAfobJCfbk+soJ/RTe/YS5KVd24MTIsbwqdkVR+ok9jIshny8u6OfOE
HGZF
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:32 2025 by rpki-client