Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa
File: efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa (raw, json)
Hash identifier: MgLGA5AejxrHgl4lXq2nt0/WeJKIxZ/fu5CbGsShDM4=
Subject key identifier: 64:2D:69:C0:00:A1:71:E2:D3:AA:F2:FD:63:E3:3B:A5:C6:70:AB:61
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0240A560A9606CB03B09C69C96493D4BC6A1CE5E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 203.83.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:40:a5:60:a9:60:6c:b0:3b:09:c6:9c:96:49:3d:4b:c6:a1:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=2dea02f578f2fa7c2aaeca8dc31fb8760d0470b3bb9f2764324db16efb8e9205, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:99:a6:06:9c:3d:0e:48:29:75:ee:a4:62:
d3:5d:0a:1e:33:71:a4:9f:ee:7e:fe:78:00:fc:a6:
f9:ab:20:94:53:a9:b6:ed:90:14:f4:6b:df:05:5e:
5a:b7:96:3b:80:af:c6:72:a7:29:12:97:97:9f:d3:
50:a1:02:d2:af:23:f7:09:e0:c6:95:71:60:1c:35:
3b:14:e7:2c:c9:13:e8:45:15:a4:8f:89:c8:93:ba:
02:5f:d7:0f:3c:a2:48:14:11:4e:3b:34:06:e1:e4:
14:20:af:70:f7:65:20:8c:b1:11:67:09:cb:ad:5c:
3c:b3:4d:7f:fb:ac:12:81:c4:60:95:09:33:b5:29:
c2:03:e1:f1:9d:16:d2:da:75:9c:18:ed:e6:22:cc:
61:5e:3b:90:ac:23:62:5f:7f:31:22:ce:7f:29:e4:
78:43:4d:0d:9f:00:2b:2b:64:41:ee:09:64:c4:aa:
a5:2b:64:22:e5:ab:5d:fd:4a:0c:6d:e0:4f:3b:57:
69:b1:6a:1e:c9:b4:8c:d7:14:87:db:da:6f:c8:0b:
a4:d2:32:4f:26:50:82:a8:20:2f:7e:fe:82:11:70:
4d:a0:6f:7b:1f:72:e9:6e:10:c0:2c:03:e3:1f:8c:
59:b8:ac:24:cb:24:3e:39:fd:d5:e3:fa:a2:19:01:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:69:C0:00:A1:71:E2:D3:AA:F2:FD:63:E3:3B:A5:C6:70:AB:61
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:f8:5e:97:6d:99:f0:8e:01:9e:9f:44:ea:d5:ce:41:94:7a:
16:e6:f8:00:5c:47:09:2b:6e:2e:47:f2:b2:08:1c:91:e2:3c:
d3:5b:e9:11:b4:88:ab:cc:8a:8c:05:8e:3d:4f:43:65:7a:7a:
ce:8d:d2:bf:39:c8:72:27:9c:23:3b:b0:58:e2:ff:50:86:67:
f9:29:7d:61:46:fc:d1:77:b3:3a:7f:5f:82:a6:32:81:2f:a1:
61:7c:e2:c9:47:3c:55:5c:61:1f:58:e2:cc:0e:93:fe:fa:1e:
c1:71:31:05:da:42:86:89:44:84:ef:40:1c:5b:2e:a5:10:91:
35:f7:73:7c:62:13:c0:cd:42:86:0f:0b:43:82:9b:ec:f4:ab:
4d:3c:2e:ad:b9:cc:0b:ed:e9:3e:18:c3:fa:6f:28:79:37:94:
7d:3a:84:5f:34:ad:e6:74:b9:a7:8a:4a:9a:26:45:6e:a9:66:
8b:38:66:19:86:00:0b:22:0a:16:fe:41:57:b7:0f:2b:7c:2d:
96:2d:5e:7e:2a:d0:76:ce:88:62:0e:45:c4:e5:77:52:e8:bf:
60:09:75:a3:dc:56:e4:27:b3:a5:4e:68:99:a4:2c:79:d2:cb:
0e:0c:f9:f5:08:2f:c1:ee:14:10:9d:3e:81:57:84:a7:76:03:
b0:6f:07:73
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUAkClYKlgbLA7Ccaclkk9S8ahzl4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMDAwMDAwMFoX
DTI1MDIxNDIzNTk1OVowejFJMEcGA1UEBRNAMmRlYTAyZjU3OGYyZmE3YzJhYWVj
YThkYzMxZmI4NzYwZDA0NzBiM2JiOWYyNzY0MzI0ZGIxNmVmYjhlOTIwNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQSZpgacPQ5IKXXupGLTXQoeM3Gk
n+5+/ngA/Kb5qyCUU6m27ZAU9GvfBV5at5Y7gK/GcqcpEpeXn9NQoQLSryP3CeDG
lXFgHDU7FOcsyRPoRRWkj4nIk7oCX9cPPKJIFBFOOzQG4eQUIK9w92UgjLERZwnL
rVw8s01/+6wSgcRglQkztSnCA+HxnRbS2nWcGO3mIsxhXjuQrCNiX38xIs5/KeR4
Q00NnwArK2RB7glkxKqlK2Qi5atd/UoMbeBPO1dpsWoeybSM1xSH29pvyAuk0jJP
JlCCqCAvfv6CEXBNoG97H3LpbhDALAPjH4xZuKwkyyQ+Of3V4/qiGQGjCwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFGQtacAAoXHi06ry/WPjO6XGcKthMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2VmZDJhYzNkLWRjMzgtNGQ5My1hYWFjLTRjYmQ2Y2M5MTFjNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy1PcMA0GCSqGSIb3DQEBCwUAA4IBAQCj+F6XbZnwjgGen0Tq1c5B
lHoW5vgAXEcJK24uR/KyCByR4jzTW+kRtIirzIqMBY49T0NlenrOjdK/OchyJ5wj
O7BY4v9Qhmf5KX1hRvzRd7M6f1+CpjKBL6FhfOLJRzxVXGEfWOLMDpP++h7BcTEF
2kKGiUSE70AcWy6lEJE193N8YhPAzUKGDwtDgpvs9KtNPC6tucwL7ek+GMP6byh5
N5R9OoRfNK3mdLmnikqaJkVuqWaLOGYZhgALIgoW/kFXtw8rfC2WLV5+KtB2zohi
DkXE5XdS6L9gCXWj3FbkJ7OlTmiZpCx50ssODPn1CC/B7hQQnT6BV4SndgOwbwdz
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:33 2025 by rpki-client