Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: BlftZe02h674dcFlDFC6wTZRE1cBZ5Hn0gkOaFicoVg=
Subject key identifier: F4:60:60:08:9E:0D:7D:F1:7B:BC:68:48:B2:40:3A:7F:CF:16:87:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B36C8765C296C1C32A7CC95C473CBE8977F7C6C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:36:c8:76:5c:29:6c:1c:32:a7:cc:95:c4:73:cb:e8:97:7f:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0285dc09548d252421e46934159b42f8e992a7456cc08f109674db3a05a1d910, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:dd:2c:50:02:48:b4:65:f1:18:dc:f5:83:
58:06:da:7c:b6:e8:4c:d2:5f:24:52:c1:4e:3f:68:
1f:f6:01:01:26:29:f6:e3:1a:4c:62:02:bb:78:96:
d9:aa:5d:63:ab:db:29:8d:4f:7c:a6:c4:2b:ab:2b:
59:06:6e:cb:eb:a9:7e:d2:45:70:3f:24:fa:54:1f:
f1:30:ce:57:55:66:8d:9f:6e:77:c3:12:5e:6f:02:
8c:ec:de:1b:01:18:28:7d:1f:f0:d3:35:d4:e5:4d:
fc:12:7e:05:91:ad:ef:bf:80:55:b8:7b:5f:56:4e:
43:93:fb:e6:22:eb:34:85:a8:20:02:29:09:ee:6f:
ec:09:73:62:79:f0:b3:29:ee:8f:c4:ba:5c:1a:43:
02:d2:da:f0:11:4c:b2:2f:1d:06:c1:66:35:ea:51:
7f:cf:41:26:29:d0:21:98:d5:fc:a2:0e:78:9a:0f:
0b:47:b1:3d:10:8f:b4:fe:11:17:11:23:40:e7:5b:
eb:ab:e2:50:22:58:8d:15:1e:40:96:42:7b:ca:88:
d8:5f:0f:92:04:db:7c:15:e9:3c:95:03:52:a8:d3:
5f:32:61:53:93:4f:69:ea:e8:b7:86:7d:af:4a:7a:
f9:e9:a5:69:72:dc:d9:09:86:bb:9d:7f:b4:17:e8:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:60:08:9E:0D:7D:F1:7B:BC:68:48:B2:40:3A:7F:CF:16:87:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
8a:b4:b9:f3:06:f8:37:02:2e:0c:17:8a:76:e4:4f:6a:cc:80:
09:e5:55:33:fb:d4:46:db:0c:12:db:49:fa:1f:43:43:45:e2:
11:19:6c:9a:5b:22:9a:dc:db:09:e5:db:48:62:c3:1d:ff:f4:
ea:7e:42:01:5a:27:4e:82:e1:df:69:06:47:25:73:8c:bc:fb:
4b:6f:e1:51:27:3a:6e:ac:26:09:c4:f6:47:fe:99:28:cc:87:
ca:98:c1:8e:38:76:19:6b:84:12:98:d4:12:49:3b:6e:63:0b:
9f:3a:71:eb:6b:87:74:80:71:92:94:cb:8c:ad:f6:80:cb:1c:
ba:de:76:64:c7:5d:b1:16:c5:68:d8:4f:db:ba:3f:d0:57:ae:
00:b3:dc:72:71:37:0a:bc:03:f8:17:a0:9b:6c:cb:b2:22:c6:
b7:80:37:17:55:56:39:59:8e:db:76:96:83:db:db:75:6e:fb:
31:6e:97:ee:a7:54:9e:17:ef:52:f0:cb:85:23:27:48:6d:8b:
4c:8a:fd:81:a0:2b:6f:c2:ea:66:b2:91:79:7e:79:32:7d:39:
7e:b7:cf:29:cc:01:5d:d1:05:52:26:62:b9:39:f0:d4:09:08:
2c:a2:9e:af:ca:58:eb:d3:34:af:5e:ac:58:7e:3f:3e:7e:46:
23:e7:06:3d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSzbIdlwpbBwyp8yVxHPL6Jd/fGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDAyODVkYzA5NTQ4ZDI1MjQyMWU0NjkzNDE1OWI0MmY4ZTk5MmE3NDU2Y2Mw
OGYxMDk2NzRkYjNhMDVhMWQ5MTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK933SxQAki0ZfEY3PWDWAbafLboTNJfJFLBTj9oH/YBASYp9uMaTGICu3iW
2apdY6vbKY1PfKbEK6srWQZuy+upftJFcD8k+lQf8TDOV1VmjZ9ud8MSXm8CjOze
GwEYKH0f8NM11OVN/BJ+BZGt77+AVbh7X1ZOQ5P75iLrNIWoIAIpCe5v7AlzYnnw
synuj8S6XBpDAtLa8BFMsi8dBsFmNepRf89BJinQIZjV/KIOeJoPC0exPRCPtP4R
FxEjQOdb66viUCJYjRUeQJZCe8qI2F8PkgTbfBXpPJUDUqjTXzJhU5NPaerot4Z9
r0p6+emlaXLc2QmGu51/tBfoAY8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT0YGAI
ng198Xu8aEiyQDp/zxaHnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGI1MGI1MTYtYjkwYS00ZjY5LWFjZTItOGU5MDRmMjQwZjFkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoM
MA0GCSqGSIb3DQEBCwUAA4IBAQCKtLnzBvg3Ai4MF4p25E9qzIAJ5VUz+9RG2wwS
20n6H0NDReIRGWyaWyKa3NsJ5dtIYsMd//TqfkIBWidOguHfaQZHJXOMvPtLb+FR
JzpurCYJxPZH/pkozIfKmMGOOHYZa4QSmNQSSTtuYwufOnHra4d0gHGSlMuMrfaA
yxy63nZkx12xFsVo2E/buj/QV64As9xycTcKvAP4F6CbbMuyIsa3gDcXVVY5WY7b
dpaD29t1bvsxbpfup1SeF+9S8MuFIydIbYtMiv2BoCtvwupmspF5fnkyfTl+t88p
zAFd0QVSJmK5OfDUCQgsop6vyljr0zSvXqxYfj8+fkYj5wY9
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:30 2025 by rpki-client