Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
File: 0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa (raw, json)
Hash identifier: oXkGweFMmST/YIzsKdJAxMq/fmHP0XJrOBhArvVca70=
Subject key identifier: 8D:B7:2C:D1:E6:11:A4:0F:1E:9A:EA:4A:33:95:A9:2F:02:89:CE:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 422BF1D7639BD0DDDC83D7EB07F0E0A316827811
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2b:f1:d7:63:9b:d0:dd:dc:83:d7:eb:07:f0:e0:a3:16:82:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7ce5bc3546975c6090a80a3d60e7517dcddfc3afd5ec2acb880e9d7efbf6ecf2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:02:eb:38:a8:51:8a:3c:74:71:02:05:a6:
51:71:aa:9f:ac:30:21:0e:8b:ad:d6:0c:06:5b:2a:
aa:a5:a6:a8:ed:dc:d5:d7:14:d2:eb:da:69:a8:19:
88:bb:74:e7:c7:20:c8:73:bf:2d:62:73:c4:fe:3c:
57:fd:df:e5:5d:2d:a7:a6:7f:2e:9c:47:2a:41:1b:
60:a6:49:67:37:b1:77:33:5c:c7:91:a0:1d:d5:ba:
4f:ed:78:5f:e5:64:de:57:78:76:85:b8:cf:c7:b2:
49:b4:cd:0a:b2:db:6e:ba:93:a2:e2:27:17:4e:7f:
f5:c3:0d:07:6a:5c:0d:25:02:c7:77:88:20:3a:2d:
cd:9f:22:f9:5f:26:e3:c2:86:44:7f:69:d8:c9:ec:
9e:66:cb:cd:15:99:31:99:c1:40:31:45:15:5d:f8:
a4:22:98:91:a3:e4:eb:5f:1c:1d:c8:32:43:45:1a:
4c:1c:54:93:7b:61:96:44:f7:6a:3f:0d:7e:65:f7:
94:2d:c0:62:7a:5a:82:90:a8:26:d1:0a:f8:64:f3:
31:80:b9:fb:61:ba:48:58:32:2c:1a:4e:42:70:2d:
2d:76:0f:e0:94:9d:3a:28:f0:e0:b3:f3:c5:56:ce:
6f:c8:bf:f1:b7:60:ad:20:20:f2:4b:a6:ed:90:4c:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:2C:D1:E6:11:A4:0F:1E:9A:EA:4A:33:95:A9:2F:02:89:CE:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a040::/48
Signature Algorithm: sha256WithRSAEncryption
1e:fc:fe:8d:8e:33:0e:80:de:62:40:9a:50:ae:96:9d:30:91:
a9:fb:43:da:9d:1e:f8:f6:47:3e:78:42:41:93:92:85:35:bd:
9b:3f:ef:f0:68:5d:8c:34:ba:03:22:50:f1:34:92:05:cf:c8:
cb:d4:30:4b:ca:e4:29:6f:2b:86:f0:22:d3:2c:78:35:93:13:
d3:ff:28:27:7d:d3:56:7e:2f:08:c4:60:a2:f6:28:54:b2:8a:
be:c2:02:0d:d3:b8:5e:19:6e:be:e3:9d:3f:1a:10:39:78:f1:
d8:42:ee:e6:6b:45:15:34:7c:d2:15:ee:66:35:db:31:52:56:
bd:5f:03:57:93:d2:5f:f8:24:c4:55:4d:7f:36:d9:0f:b7:52:
24:6b:38:d4:d4:a4:90:3d:e6:72:3f:37:22:d3:4f:b2:75:14:
0c:c3:e8:1f:a6:92:7e:2c:25:18:88:26:9d:1e:9a:1a:f2:be:
74:95:e1:3a:30:a0:cb:27:cc:c5:08:96:83:1f:d5:17:c6:7c:
b1:ee:57:37:01:14:3d:38:5c:45:7d:17:30:9c:66:57:28:78:
eb:86:ed:22:ff:de:40:83:f3:8f:88:ab:61:ad:87:ec:21:bd:
26:3c:e8:be:d9:4b:20:c3:f0:c1:db:b3:76:6f:da:6d:1b:5c:
b9:b7:7a:ab
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQivx12Ob0N3cg9frB/DgoxaCeBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDdjZTViYzM1NDY5NzVjNjA5MGE4MGEzZDYwZTc1MTdkY2RkZmMzYWZkNWVj
MmFjYjg4MGU5ZDdlZmJmNmVjZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMslAus4qFGKPHRxAgWmUXGqn6wwIQ6LrdYMBlsqqqWmqO3c1dcU0uvaaagZ
iLt058cgyHO/LWJzxP48V/3f5V0tp6Z/LpxHKkEbYKZJZzexdzNcx5GgHdW6T+14
X+Vk3ld4doW4z8eySbTNCrLbbrqTouInF05/9cMNB2pcDSUCx3eIIDotzZ8i+V8m
48KGRH9p2MnsnmbLzRWZMZnBQDFFFV34pCKYkaPk618cHcgyQ0UaTBxUk3thlkT3
aj8NfmX3lC3AYnpagpCoJtEK+GTzMYC5+2G6SFgyLBpOQnAtLXYP4JSdOijw4LPz
xVbOb8i/8bdgrSAg8kum7ZBMdzsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSNtyzR
5hGkDx6a6kozlakvAonO6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGExYTI1ZDctNjkzNS00MjBjLWE5NDktNGE5ZDBlNmE5NWQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGg
QDANBgkqhkiG9w0BAQsFAAOCAQEAHvz+jY4zDoDeYkCaUK6WnTCRqftD2p0e+PZH
PnhCQZOShTW9mz/v8GhdjDS6AyJQ8TSSBc/Iy9QwS8rkKW8rhvAi0yx4NZMT0/8o
J33TVn4vCMRgovYoVLKKvsICDdO4XhluvuOdPxoQOXjx2ELu5mtFFTR80hXuZjXb
MVJWvV8DV5PSX/gkxFVNfzbZD7dSJGs41NSkkD3mcj83ItNPsnUUDMPoH6aSfiwl
GIgmnR6aGvK+dJXhOjCgyyfMxQiWgx/VF8Z8se5XNwEUPThcRX0XMJxmVyh464bt
Iv/eQIPzj4irYa2H7CG9JjzovtlLIMPwwduzdm/abRtcubd6qw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:36 2025 by rpki-client