Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
File: 03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa (raw, json)
Hash identifier: B3dLIRBbICmwu3HI7N6d0ZGmsR5nnHLdt6LZS17ujbM=
Subject key identifier: 68:95:41:B4:60:1E:E9:B4:F2:06:CA:AA:40:D2:E7:80:8F:B1:2F:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B4321E165C1016DE04647D6DB1057283A1EB41F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:43:21:e1:65:c1:01:6d:e0:46:47:d6:db:10:57:28:3a:1e:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3d5f9d3953461daec99bf5764361278bdae0a84eb785cef1900f4070bf6dbe5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:a3:07:9e:62:7b:34:78:b0:b0:b0:8f:9f:
db:5b:ad:42:3c:3e:29:7a:18:67:60:c2:ec:a9:9c:
3f:01:66:87:94:5c:f6:a5:f3:76:79:01:78:ed:31:
e2:7f:52:15:cc:fd:81:0b:0a:c6:27:fe:6c:fd:05:
46:aa:db:f5:b1:f5:d7:99:45:4c:f9:3f:e9:e3:0c:
44:cd:7e:e6:32:09:ba:d9:4c:61:df:7e:26:4c:25:
e2:46:7e:71:58:79:a5:c8:21:61:32:35:b1:07:89:
13:1c:6f:79:3a:2a:f4:ef:b8:d9:d7:90:d4:2a:e0:
f8:82:68:ae:61:b3:70:4b:8d:a8:d8:8e:7c:14:52:
c0:c0:46:45:a1:ff:b8:ea:14:bf:83:44:8e:7a:db:
a1:16:44:3e:b3:ae:9d:bd:f1:9f:7f:07:12:1e:c8:
42:64:e4:98:9c:c1:20:83:e8:0c:8b:e4:5a:12:b2:
24:63:20:61:4a:33:6f:f1:65:1e:fe:12:18:ec:b5:
6a:99:ed:a1:e4:40:20:0f:12:3c:f3:4f:2c:8d:35:
53:38:7b:f5:2f:f3:83:74:b9:0b:7b:08:35:cc:ea:
7b:8a:4a:b0:96:98:bc:0f:c7:36:dc:ae:87:b9:94:
ac:de:90:61:9d:77:60:70:08:fd:8b:cb:0c:4e:92:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:41:B4:60:1E:E9:B4:F2:06:CA:AA:40:D2:E7:80:8F:B1:2F:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8040::/48
Signature Algorithm: sha256WithRSAEncryption
54:13:9d:ad:f0:0e:f5:36:f9:a9:00:5d:ee:2b:0b:b4:1d:fa:
26:1e:c5:b3:c3:03:d7:08:fa:df:5e:9c:91:38:1d:dd:54:08:
c7:0a:37:95:c8:f8:a5:2d:fa:c4:ca:79:6f:6c:f2:70:e6:0d:
42:8b:a1:54:3a:d4:6f:6e:44:27:0d:75:25:1e:b7:60:93:81:
95:27:3f:64:0e:b4:c2:28:be:95:e8:85:a0:c1:b7:0b:3f:92:
bf:9e:bf:9a:00:53:f4:0c:ce:6f:3d:3f:62:7f:b8:1a:99:10:
99:02:11:6e:78:b6:c3:03:91:a3:ab:be:1f:6c:dc:f1:0d:6b:
37:db:0a:81:f5:5d:55:b7:65:a0:b4:e6:81:df:c0:3f:1f:9f:
b6:b6:be:0c:f6:b1:81:58:c9:9a:39:02:18:71:25:61:b1:6b:
b3:11:d6:89:1c:2a:22:8e:40:ba:ef:88:cd:98:8c:ff:c1:3d:
39:bc:0e:53:b4:6c:ac:de:a7:72:4a:35:bf:77:1c:33:7d:30:
48:52:e6:73:a9:fb:9c:59:4a:d0:44:c2:d0:b4:6a:6c:cb:94:
30:9b:9e:0b:8a:46:bd:d2:3a:d1:80:9b:20:2b:a2:30:c7:ab:
69:f4:c6:cf:ff:02:cb:a0:37:0b:87:4e:9a:4d:9f:e1:7b:cf:
48:95:2e:11
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUG0Mh4WXBAW3gRkfW2xBXKDoetB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkNWY5ZDM5NTM0NjFkYWVjOTliZjU3NjQzNjEyNzhiZGFlMGE4NGViNzg1
Y2VmMTkwMGY0MDcwYmY2ZGJlNWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5WoweeYns0eLCwsI+f21utQjw+KXoYZ2DC7KmcPwFmh5Rc9qXzdnkBeO0x
4n9SFcz9gQsKxif+bP0FRqrb9bH115lFTPk/6eMMRM1+5jIJutlMYd9+Jkwl4kZ+
cVh5pcghYTI1sQeJExxveToq9O+42deQ1Crg+IJormGzcEuNqNiOfBRSwMBGRaH/
uOoUv4NEjnrboRZEPrOunb3xn38HEh7IQmTkmJzBIIPoDIvkWhKyJGMgYUozb/Fl
Hv4SGOy1apntoeRAIA8SPPNPLI01Uzh79S/zg3S5C3sINczqe4pKsJaYvA/HNtyu
h7mUrN6QYZ13YHAI/YvLDE6S1gECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRolUG0
YB7ptPIGyqpA0ueAj7Ev6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDM0MTZjZTUtMDQyYS00YjhiLTgxZGQtODE5YzVlMWNkZjA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A
QDANBgkqhkiG9w0BAQsFAAOCAQEAVBOdrfAO9Tb5qQBd7isLtB36Jh7Fs8MD1wj6
316ckTgd3VQIxwo3lcj4pS36xMp5b2zycOYNQouhVDrUb25EJw11JR63YJOBlSc/
ZA60wii+leiFoMG3Cz+Sv56/mgBT9AzObz0/Yn+4GpkQmQIRbni2wwORo6u+H2zc
8Q1rN9sKgfVdVbdloLTmgd/APx+ftra+DPaxgVjJmjkCGHElYbFrsxHWiRwqIo5A
uu+IzZiM/8E9ObwOU7RsrN6ncko1v3ccM30wSFLmc6n7nFlK0ETC0LRqbMuUMJue
C4pGvdI60YCbICuiMMerafTGz/8Cy6A3C4dOmk2f4XvPSJUuEQ==
-----END CERTIFICATE-----
Generated at Fri May 2 17:13:52 2025 by rpki-client