Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa
File: 197500e2-3802-44b2-a561-ca3dad01e209.roa (raw, json)
Hash identifier: 5YpwdW+xKiqsP4ThHpOs0QefQFaLxtpTe5/mS42+RNI=
Subject key identifier: C6:79:00:45:B3:AE:59:09:83:FE:3E:92:59:79:EF:B0:90:DE:FB:F7
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 1FCA7A4EFA5EA3FA39995172B8F21F844F1FE5E0
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 175.41.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ca:7a:4e:fa:5e:a3:fa:39:99:51:72:b8:f2:1f:84:4f:1f:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=5f1eabc7aae3a44cf9106537255d786978a9b75edb18db59e9aaeaa735ebf8cd, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:c1:b0:27:e7:96:00:ac:b0:1b:e5:ee:9e:
0f:e9:3f:9c:ae:0e:40:ab:ac:69:e4:36:a9:48:fd:
82:e6:68:55:ef:76:d1:54:af:74:ca:51:23:0c:45:
25:63:54:17:0b:f8:e5:e4:7d:7e:e5:25:ca:11:8b:
af:d8:cf:48:65:b0:5c:dc:9a:28:f6:45:c3:45:48:
c9:50:fd:d4:b9:eb:02:74:45:03:16:1a:da:f9:26:
97:d2:0e:86:d4:af:e4:4e:a0:17:b7:91:48:4d:c6:
7e:fc:94:42:3e:23:8f:c0:14:ae:94:52:99:46:00:
a6:21:e8:d9:81:c6:45:c2:f6:41:5a:f6:d0:c2:b2:
c2:ac:55:86:79:c8:ac:b7:cf:be:f9:93:0d:78:2a:
ab:a3:73:97:0e:61:84:87:3c:9d:05:87:96:ec:e9:
45:55:d9:79:2d:a4:11:5c:17:b5:7b:bd:1b:28:3d:
07:a8:8e:cc:93:12:ef:9d:ff:73:ba:74:f4:a5:5c:
cc:6b:1b:e2:46:ff:15:61:85:6b:2e:0f:e0:31:5a:
f9:3d:a4:79:12:04:93:0c:b0:41:5c:e5:49:8b:a9:
2a:36:69:48:9a:bf:4c:23:60:57:a8:a8:f2:54:38:
aa:11:d2:01:db:99:33:9f:70:15:20:30:43:f1:b3:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:79:00:45:B3:AE:59:09:83:FE:3E:92:59:79:EF:B0:90:DE:FB:F7
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.41.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:25:9e:9a:2e:66:bc:a8:d8:32:da:c8:b4:f4:5c:bf:5c:77:
47:9f:be:9a:73:b8:6f:fc:8c:e5:1d:09:21:0e:ed:05:84:8e:
75:f2:ea:30:fc:b8:61:be:27:a0:cf:8e:59:06:a6:08:36:1a:
40:d8:12:18:95:44:df:34:4b:3d:9a:2f:11:c4:c8:ae:d6:57:
55:c8:9a:4d:98:a3:57:39:8f:e5:66:e0:40:46:19:47:22:8e:
de:a8:92:8a:be:0f:1e:d7:6b:05:e6:37:83:21:0e:dc:54:f6:
b8:4e:eb:8c:2b:43:22:c5:ab:76:de:b6:30:ea:52:13:04:8c:
c0:24:52:69:38:dc:64:2b:7f:b9:48:39:17:e7:66:84:69:b7:
b2:d8:c7:89:5c:fc:80:11:8b:cf:17:f6:8b:f8:a9:25:e6:7c:
15:8e:79:da:ee:4f:31:c6:7c:8f:2b:8b:64:78:58:86:21:4b:
62:ba:c4:99:50:55:c2:90:ad:74:82:71:86:58:9a:b8:cb:ce:
49:15:c3:2e:0b:15:bd:1e:db:d4:d2:e2:64:d0:c6:97:ad:52:
6a:32:a5:41:30:b3:71:da:03:b3:96:a9:c6:85:df:20:da:d1:
af:b1:a4:96:89:4e:d8:36:3b:2e:8a:95:76:96:f2:d1:29:73:
db:80:3a:b4
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUH8p6Tvpeo/o5mVFyuPIfhE8f5eAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDExMzAwMDAwMFoX
DTI1MDIxNzIzNTk1OVowejFJMEcGA1UEBRNANWYxZWFiYzdhYWUzYTQ0Y2Y5MTA2
NTM3MjU1ZDc4Njk3OGE5Yjc1ZWRiMThkYjU5ZTlhYWVhYTczNWViZjhjZDEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw/BsCfnlgCssBvl7p4P6T+crg5A
q6xp5DapSP2C5mhV73bRVK90ylEjDEUlY1QXC/jl5H1+5SXKEYuv2M9IZbBc3Joo
9kXDRUjJUP3UuesCdEUDFhra+SaX0g6G1K/kTqAXt5FITcZ+/JRCPiOPwBSulFKZ
RgCmIejZgcZFwvZBWvbQwrLCrFWGecist8+++ZMNeCqro3OXDmGEhzydBYeW7OlF
Vdl5LaQRXBe1e70bKD0HqI7MkxLvnf9zunT0pVzMaxviRv8VYYVrLg/gMVr5PaR5
EgSTDLBBXOVJi6kqNmlImr9MI2BXqKjyVDiqEdIB25kzn3AVIDBD8bPWMwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFMZ5AEWzrlkJg/4+kll577CQ3vv3MB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0
LzE5NzUwMGUyLTM4MDItNDRiMi1hNTYxLWNhM2RhZDAxZTIwOS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2
Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQArymAMA0GCSqGSIb3DQEBCwUAA4IBAQAKJZ6aLma8qNgy2si09Fy/
XHdHn76ac7hv/IzlHQkhDu0FhI518uow/Lhhviegz45ZBqYINhpA2BIYlUTfNEs9
mi8RxMiu1ldVyJpNmKNXOY/lZuBARhlHIo7eqJKKvg8e12sF5jeDIQ7cVPa4TuuM
K0Mixat23rYw6lITBIzAJFJpONxkK3+5SDkX52aEabey2MeJXPyAEYvPF/aL+Kkl
5nwVjnna7k8xxnyPK4tkeFiGIUtiusSZUFXCkK10gnGGWJq4y85JFcMuCxW9HtvU
0uJk0MaXrVJqMqVBMLNx2gOzlqnGhd8g2tGvsaSWiU7YNjsuipV2lvLRKXPbgDq0
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:52 2025 by rpki-client