Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
File: 10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa (raw, json)
Hash identifier: AXdZuUauoihg1BZ+J6WYmguqhVhbdcjBh6voNyAPTvE=
Subject key identifier: CC:E0:EF:97:32:2A:31:7D:FE:9B:A2:16:C8:8C:AD:71:31:E2:EC:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F10C0C3E80E08460366BA79B32EA5FDAB7FAE3B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:20c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:10:c0:c3:e8:0e:08:46:03:66:ba:79:b3:2e:a5:fd:ab:7f:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4b151efe637fc18a2c38cf3d24705437b6c155ecd8961f847f31be9a53a4556c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:2f:e0:b9:4e:fe:a5:b8:d7:8c:fd:ea:b9:
99:d2:89:26:8f:67:8e:1f:5d:53:36:ac:9a:3a:8d:
c2:da:8c:8d:e1:bb:ec:d8:c4:24:c6:fc:90:7a:9e:
30:50:92:80:0b:df:59:f7:ed:88:b8:96:e0:41:ab:
56:3a:81:52:93:39:e1:51:14:c6:82:75:10:ab:bc:
99:15:76:11:14:2d:21:ce:7a:63:6a:dc:f4:91:38:
52:76:91:ae:9d:5f:96:40:ae:cc:20:f3:f4:43:fc:
8b:2e:60:f2:33:32:f6:42:41:ef:b3:c4:cd:70:5d:
dd:bf:ca:cd:0f:14:6c:db:b4:16:56:b0:76:e9:32:
ca:30:af:c3:13:6e:8e:8c:72:f7:c0:66:b5:e5:b4:
e6:43:24:a3:1d:4f:6b:ab:23:55:ad:0c:a0:6f:d8:
70:96:f5:3f:0e:df:59:12:b4:db:10:ce:6b:e2:56:
7e:98:a8:e9:09:07:63:4f:38:3a:e1:44:7c:b4:5d:
0b:df:0e:f6:9e:e4:a0:18:97:77:c4:7e:0d:79:b5:
95:97:1f:15:13:77:0a:3a:c3:01:2e:8a:0a:41:c9:
c4:c8:c1:e2:ca:1b:19:83:e1:de:70:dd:4f:46:7a:
d0:91:33:ef:36:d8:5b:ac:86:fc:d4:77:e5:ac:63:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:EF:97:32:2A:31:7D:FE:9B:A2:16:C8:8C:AD:71:31:E2:EC:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
68:9c:ab:71:72:0b:36:6f:2a:de:95:7f:95:c3:32:9b:a5:01:
d3:e7:ac:a5:17:b2:c3:4a:a8:0b:68:66:f6:2c:8a:d8:27:b7:
0a:1e:9c:5a:95:b8:72:99:1c:e7:84:32:04:3e:7f:56:f9:73:
3c:e0:80:a3:ed:93:57:c1:0f:87:46:36:27:25:03:bf:45:f3:
cc:ff:66:2d:ee:66:b4:1f:3c:36:6e:b6:79:1e:74:d7:0d:62:
9f:87:07:b6:fc:e8:6e:aa:36:11:3f:19:df:7c:68:e3:ba:ad:
41:68:68:f4:dc:37:54:cb:3d:ab:52:d5:cf:34:9e:37:ac:82:
66:cf:f1:a3:90:b8:fd:89:83:5e:fa:c3:19:bc:75:ce:73:c3:
ef:95:f1:20:41:06:94:fe:d9:fc:94:aa:47:25:bd:3e:4e:5f:
a1:a2:5b:ee:1d:22:d7:df:78:62:69:a4:17:e2:79:82:51:25:
d4:b2:41:d3:54:7b:04:5d:ff:d0:63:5c:f6:d2:64:48:c1:78:
81:74:a4:44:6e:8b:1b:80:9f:b3:6f:cc:83:57:1e:33:d0:37:
ed:ce:f4:86:11:dc:92:b2:7b:7f:7f:ed:1c:96:5f:e0:38:da:
df:d9:e9:86:3a:ca:c6:0e:e5:e1:79:4f:e5:2f:66:69:fa:73:
41:74:65:a1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULxDAw+gOCEYDZrp5sy6l/at/rjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiMTUxZWZlNjM3ZmMxOGEyYzM4Y2YzZDI0NzA1NDM3YjZjMTU1ZWNkODk2
MWY4NDdmMzFiZTlhNTNhNDU1NmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANd/L+C5Tv6luNeM/eq5mdKJJo9njh9dUzasmjqNwtqMjeG77NjEJMb8kHqe
MFCSgAvfWfftiLiW4EGrVjqBUpM54VEUxoJ1EKu8mRV2ERQtIc56Y2rc9JE4UnaR
rp1flkCuzCDz9EP8iy5g8jMy9kJB77PEzXBd3b/KzQ8UbNu0FlawdukyyjCvwxNu
joxy98BmteW05kMkox1Pa6sjVa0MoG/YcJb1Pw7fWRK02xDOa+JWfpio6QkHY084
OuFEfLRdC98O9p7koBiXd8R+DXm1lZcfFRN3CjrDAS6KCkHJxMjB4sobGYPh3nDd
T0Z60JEz7zbYW6yG/NR35axjfs0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTM4O+X
Mioxff6bohbIjK1xMeLsWTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTBhYzVkMjEtYWM3OS00NjBiLTllMjAtNWZmYTM2NmNhMGVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUg
wDANBgkqhkiG9w0BAQsFAAOCAQEAaJyrcXILNm8q3pV/lcMym6UB0+espReyw0qo
C2hm9iyK2Ce3Ch6cWpW4cpkc54QyBD5/VvlzPOCAo+2TV8EPh0Y2JyUDv0XzzP9m
Le5mtB88Nm62eR501w1in4cHtvzobqo2ET8Z33xo47qtQWho9Nw3VMs9q1LVzzSe
N6yCZs/xo5C4/YmDXvrDGbx1znPD75XxIEEGlP7Z/JSqRyW9Pk5foaJb7h0i1994
YmmkF+J5glEl1LJB01R7BF3/0GNc9tJkSMF4gXSkRG6LG4Cfs2/Mg1ceM9A37c70
hhHckrJ7f3/tHJZf4Dja39nphjrKxg7l4XlP5S9mafpzQXRloQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:27 2025 by rpki-client