Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa
File: 04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa (raw, json)
Hash identifier: 2bra1A1DaOZLHJITLi3JW/96QrJLTdkHMHLxUCTp8D8=
Subject key identifier: B4:7B:44:57:8F:35:62:36:F5:AF:E0:D2:32:35:B1:2C:D9:C7:F8:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33BB6C336E1FEF62D36B179D86946A5C63FDCD9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bb:6c:33:6e:1f:ef:62:d3:6b:17:9d:86:94:6a:5c:63:fd:cd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1bd615e7926fc012abc1047caff0320231ecf2f6bf3f36948d412a101b588d0d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:0d:06:6e:4a:a5:f7:d1:6d:b9:39:50:e1:
e8:1d:61:89:99:a3:1a:a7:2a:92:9f:de:4e:3e:d8:
1e:8c:fd:9e:ed:14:57:8a:83:c0:7d:1c:75:be:19:
d3:80:7c:7f:52:9b:95:7e:bb:09:a4:89:91:0b:92:
03:ef:00:1b:c4:02:c0:08:7c:31:21:9c:90:13:b7:
c4:7f:f7:97:2c:35:f4:da:0f:1e:b2:77:12:a2:f5:
7b:11:24:18:38:0d:74:f8:b9:e2:e2:bc:d1:d7:ce:
65:b6:1f:0e:20:18:e5:ce:94:1c:5a:a4:20:3b:69:
d1:d3:6d:a4:33:a0:51:a2:a2:26:c8:3c:8f:c0:92:
a7:00:30:82:be:4f:a5:e7:aa:bd:7e:c0:52:43:60:
81:e9:4f:a0:bb:53:f3:cd:59:ea:16:46:fe:53:5d:
8a:55:8a:3a:d4:a9:6d:69:4f:5e:8d:6d:ea:07:bf:
2b:30:ad:83:99:cc:4e:47:f8:ee:2d:30:37:84:34:
83:da:66:58:cd:c2:fe:39:2b:92:c8:20:ab:a0:c0:
38:ff:03:1f:dc:45:39:5c:8f:9d:e7:55:81:c3:51:
ff:43:f0:58:68:a1:6b:a0:83:d3:92:2a:19:0d:fd:
a0:01:96:76:f1:d3:14:fd:42:b5:a8:d8:47:43:3a:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:44:57:8F:35:62:36:F5:AF:E0:D2:32:35:B1:2C:D9:C7:F8:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04c34ea1-cddb-45aa-979f-bfe1fa0995af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c000::/40
Signature Algorithm: sha256WithRSAEncryption
67:b6:ef:22:27:98:c9:59:d0:c3:2f:68:4a:fa:47:12:42:1b:
ef:e3:a0:a3:73:79:25:93:2a:e5:59:2a:ab:42:01:69:c7:01:
df:47:e4:52:80:32:58:22:bf:5d:66:b5:8f:4e:25:5d:52:3f:
08:73:7d:20:1b:6a:90:14:51:d9:71:0a:c7:bc:70:35:e3:99:
5b:65:62:57:ab:6a:3a:e2:cc:e3:b1:e8:f3:c9:f0:39:62:0a:
d9:d7:a7:c8:a3:12:bf:2b:79:15:25:04:59:69:1b:51:58:ef:
84:a7:eb:a0:7c:b0:72:82:ab:81:f4:e6:08:e0:03:64:cf:1c:
59:35:0a:5a:88:d2:82:e7:34:3c:ab:9a:15:51:96:ad:51:02:
71:52:9a:f3:ed:e9:61:b3:60:58:bf:d8:d8:10:0d:f8:c6:3d:
48:17:61:45:89:2f:0c:4f:d1:02:ca:57:be:07:88:fe:63:0e:
dd:f8:23:e3:62:00:a9:76:85:c5:e5:ae:0f:ed:a7:12:60:70:
10:46:b3:09:bb:a3:7e:cc:42:3d:5e:21:04:47:43:08:d3:f9:
5c:15:31:8a:0c:12:78:ff:d3:09:3c:6f:18:09:c0:f0:0c:a3:
bd:c9:6e:5d:69:e9:38:fc:8f:26:ac:5e:a7:67:bc:07:93:7c:
e5:76:7c:54
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUM7tsM24f72LTaxedhpRqXGP9zZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDFiZDYxNWU3OTI2ZmMwMTJhYmMxMDQ3Y2FmZjAzMjAyMzFlY2YyZjZiZjNm
MzY5NDhkNDEyYTEwMWI1ODhkMGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIctDQZuSqX30W25OVDh6B1hiZmjGqcqkp/eTj7YHoz9nu0UV4qDwH0cdb4Z
04B8f1KblX67CaSJkQuSA+8AG8QCwAh8MSGckBO3xH/3lyw19NoPHrJ3EqL1exEk
GDgNdPi54uK80dfOZbYfDiAY5c6UHFqkIDtp0dNtpDOgUaKiJsg8j8CSpwAwgr5P
peeqvX7AUkNggelPoLtT881Z6hZG/lNdilWKOtSpbWlPXo1t6ge/KzCtg5nMTkf4
7i0wN4Q0g9pmWM3C/jkrksggq6DAOP8DH9xFOVyPnedVgcNR/0PwWGiha6CD05Iq
GQ39oAGWdvHTFP1CtajYR0M6ZnsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS0e0RX
jzViNvWv4NIyNbEs2cf43DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDRjMzRlYTEtY2RkYi00NWFhLTk3OWYtYmZlMWZhMDk5NWFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DHA
MA0GCSqGSIb3DQEBCwUAA4IBAQBntu8iJ5jJWdDDL2hK+kcSQhvv46Cjc3klkyrl
WSqrQgFpxwHfR+RSgDJYIr9dZrWPTiVdUj8Ic30gG2qQFFHZcQrHvHA145lbZWJX
q2o64szjsejzyfA5YgrZ16fIoxK/K3kVJQRZaRtRWO+Ep+ugfLBygquB9OYI4ANk
zxxZNQpaiNKC5zQ8q5oVUZatUQJxUprz7elhs2BYv9jYEA34xj1IF2FFiS8MT9EC
yle+B4j+Yw7d+CPjYgCpdoXF5a4P7acSYHAQRrMJu6N+zEI9XiEER0MI0/lcFTGK
DBJ4/9MJPG8YCcDwDKO9yW5daek4/I8mrF6nZ7wHk3zldnxU
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:51 2025 by rpki-client