Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
File: 0e68fbde-eead-4e29-b902-4eed053693ac.roa (raw, json)
Hash identifier: gOaRLHz9EzsN3tzt2vVkXM/Djih1YEvELWfT5nOdviM=
Subject key identifier: 73:23:B3:BD:50:61:DD:2D:5F:6F:AF:B2:FA:39:C8:F9:C9:7B:B8:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DA781B5F0D8F183A5A69BE0916D2C0865B65B7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a7:81:b5:f0:d8:f1:83:a5:a6:9b:e0:91:6d:2c:08:65:b6:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ac9862225b6632bc9359fc2f71ee680317a25b446ae09f35c90b6c2e49ee7920, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:77:ab:7e:92:93:eb:d2:aa:02:16:00:44:
87:ed:84:13:df:54:a1:e6:86:07:9c:6e:8f:94:c2:
45:64:25:ac:a9:fb:a4:0a:f3:94:aa:9e:4d:17:47:
47:e2:67:c4:bd:bd:cd:c3:f1:d7:84:6c:6d:a1:17:
56:0c:49:ec:37:51:42:18:6b:63:c9:a4:f3:c7:73:
7d:99:ea:d4:68:93:65:88:0e:35:f9:f6:01:d7:63:
c2:88:5f:a9:c1:66:f9:91:a9:22:39:cc:13:da:36:
b1:91:e9:d9:3b:ec:6e:2f:5e:ae:cc:f1:ed:46:4a:
77:40:66:b7:4f:3f:03:59:2e:f7:9d:f9:d2:fa:a7:
24:3e:94:ca:5e:85:60:2f:5b:27:1f:f4:99:26:ba:
09:90:74:14:f4:fe:f6:30:88:bb:ae:79:82:87:62:
c0:35:aa:07:d4:95:9c:89:cf:2a:f2:ea:91:69:e0:
c3:1d:c7:3d:6a:2b:fc:14:b6:51:3d:47:38:d0:9a:
16:81:7c:2a:17:f1:31:8f:14:05:11:02:01:b4:6d:
5f:f6:6e:f2:f2:da:53:16:51:cd:c3:4a:8d:bf:35:
6c:98:fa:3e:ed:c8:12:3a:73:99:fb:38:31:4c:8b:
19:74:2c:31:7e:91:2e:af:a4:4b:3b:43:e4:59:5d:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:B3:BD:50:61:DD:2D:5F:6F:AF:B2:FA:39:C8:F9:C9:7B:B8:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/36
Signature Algorithm: sha256WithRSAEncryption
95:2d:da:e6:f9:d3:ec:9e:55:af:41:28:0c:3c:3a:66:dd:a2:
38:2e:c4:32:42:07:3a:ba:6b:cb:87:f9:b7:ed:02:0b:38:cd:
a2:3e:45:b2:e1:01:e5:28:b1:a3:2a:09:5e:db:73:98:b5:e2:
cf:8c:43:7c:a2:0f:40:5f:dd:b4:c5:69:51:69:83:98:61:6d:
77:80:58:ff:78:91:82:01:75:67:21:66:70:e3:7a:01:d4:cc:
37:11:81:d8:dd:45:6f:12:e8:2d:a7:06:75:ab:bc:84:fa:5c:
97:ae:68:e5:e0:73:c6:08:a0:c0:07:b5:28:03:97:eb:1b:8e:
3c:f2:fd:4a:5e:42:f3:54:06:f6:a3:a0:d3:b7:b1:11:38:ad:
ee:39:01:37:a4:05:c2:8b:26:c9:b3:e8:60:a8:62:a8:33:de:
d9:65:66:60:2b:d5:be:14:34:bf:62:7e:63:92:2e:21:2c:46:
ba:58:20:19:af:42:85:ca:cb:a0:1b:f3:ba:e6:2e:1c:eb:fa:
15:0a:f8:e5:eb:44:0e:2e:35:34:5e:03:b8:cf:cf:73:00:e0:
f8:65:3f:4a:75:8e:ac:93:06:d0:b1:96:7b:31:fa:fa:99:24:
b2:b3:2a:b0:37:ab:81:7a:28:07:3e:75:68:5d:86:d7:c8:70:
6b:09:b5:65
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbaeBtfDY8YOlppvgkW0sCGW2W3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjOTg2MjIyNWI2NjMyYmM5MzU5ZmMyZjcxZWU2ODAzMTdhMjViNDQ2YWUw
OWYzNWM5MGI2YzJlNDllZTc5MjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ7yd6t+kpPr0qoCFgBEh+2EE99UoeaGB5xuj5TCRWQlrKn7pArzlKqeTRdH
R+JnxL29zcPx14RsbaEXVgxJ7DdRQhhrY8mk88dzfZnq1GiTZYgONfn2Addjwohf
qcFm+ZGpIjnME9o2sZHp2Tvsbi9erszx7UZKd0Bmt08/A1ku95350vqnJD6Uyl6F
YC9bJx/0mSa6CZB0FPT+9jCIu655godiwDWqB9SVnInPKvLqkWngwx3HPWor/BS2
UT1HONCaFoF8KhfxMY8UBRECAbRtX/Zu8vLaUxZRzcNKjb81bJj6Pu3IEjpzmfs4
MUyLGXQsMX6RLq+kSztD5FldTycCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRzI7O9
UGHdLV9vr7L6Ocj5yXu4mDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGU2OGZiZGUtZWVhZC00ZTI5LWI5MDItNGVlZDA1MzY5M2FjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BsA
MA0GCSqGSIb3DQEBCwUAA4IBAQCVLdrm+dPsnlWvQSgMPDpm3aI4LsQyQgc6umvL
h/m37QILOM2iPkWy4QHlKLGjKgle23OYteLPjEN8og9AX920xWlRaYOYYW13gFj/
eJGCAXVnIWZw43oB1Mw3EYHY3UVvEugtpwZ1q7yE+lyXrmjl4HPGCKDAB7UoA5fr
G4488v1KXkLzVAb2o6DTt7EROK3uOQE3pAXCiybJs+hgqGKoM97ZZWZgK9W+FDS/
Yn5jki4hLEa6WCAZr0KFysugG/O65i4c6/oVCvjl60QOLjU0XgO4z89zAOD4ZT9K
dY6skwbQsZZ7Mfr6mSSysyqwN6uBeigHPnVoXYbXyHBrCbVl
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:01 2025 by rpki-client