Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
File: 11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa (raw, json)
Hash identifier: Y1CMGtOCzoUHHvBsI1e+Lmxt+EnSX6Gd3TXZBDRs3Jk=
Subject key identifier: 93:7A:70:85:E0:E6:A5:42:D6:A0:1A:60:97:85:1E:A5:E7:2A:6C:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B408605C472AEF4A1F305B8FB78A06F611763B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:40:86:05:c4:72:ae:f4:a1:f3:05:b8:fb:78:a0:6f:61:17:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=71a9327b7a6f58f5085e5ba8aa8ff5128be40b2f950021449dc74b9284261fcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:7d:21:a6:c9:6e:7d:32:9d:30:bd:2d:d4:
75:69:f1:20:87:10:4a:f2:a9:05:c3:74:e7:53:71:
2b:aa:08:e9:96:95:23:4f:a8:be:8e:2c:b8:82:8c:
83:b0:9a:42:22:12:96:88:fc:80:70:24:2c:d7:62:
1f:47:34:dc:c2:ef:51:be:fb:02:55:99:19:1b:8c:
88:fd:41:85:33:73:e6:35:4b:2b:a7:42:05:da:b7:
d6:a6:94:29:3d:bf:72:97:77:d5:04:e2:b4:79:fc:
cf:fd:11:93:4b:da:d1:12:22:3a:f2:91:e1:55:fd:
28:60:31:72:de:5a:03:c4:2a:d7:34:38:f7:59:d5:
eb:2f:a4:32:e4:19:34:23:a0:8c:b9:68:e6:63:f5:
68:79:12:55:37:93:54:c2:f8:39:f0:ce:b3:dc:d3:
5a:1c:8d:89:cf:2d:78:ee:9d:27:0a:0b:d2:ce:b4:
77:36:2f:f5:b4:01:61:fc:de:18:cd:98:b9:66:3d:
dd:ba:17:77:83:e8:b5:40:67:ea:a3:9a:80:fd:49:
8d:fc:20:98:4f:14:aa:22:d3:93:06:01:01:d8:11:
d3:a7:c5:52:40:84:79:46:14:8b:c4:17:9a:93:a2:
ee:d2:d8:cb:35:0c:f0:84:0d:4d:10:86:88:50:3e:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:70:85:E0:E6:A5:42:D6:A0:1A:60:97:85:1E:A5:E7:2A:6C:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b:800::/37
Signature Algorithm: sha256WithRSAEncryption
45:c2:b4:93:aa:ac:56:83:f6:07:ae:ba:da:1b:07:55:44:f4:
33:07:9c:a8:b8:a2:d0:65:0d:d8:45:12:4b:12:b2:27:1d:c3:
d9:15:1d:86:64:f2:49:27:70:d1:be:0b:06:0d:ad:b7:38:d6:
8b:08:76:6b:02:78:e7:c6:b3:57:8a:ec:d2:7c:c4:84:ac:8f:
48:65:46:b2:8d:91:42:3d:2c:9b:c5:d0:69:5d:25:88:60:26:
35:11:bc:e7:30:9d:3e:56:45:5f:f5:54:80:9f:7e:c9:78:bf:
bd:91:25:81:b0:9c:4a:cc:a6:4c:fd:de:a2:02:ec:3f:07:fd:
a0:ce:fa:ea:37:6a:bd:5a:47:71:b2:41:ee:f3:57:79:3a:b9:
68:42:c6:f5:8f:42:dd:38:1c:bc:d9:ed:01:3d:ef:b9:04:ca:
02:66:c0:6d:45:a7:5f:7f:83:35:82:9d:64:8f:76:c8:47:94:
b8:b9:c0:63:54:81:18:71:5d:fd:a2:6e:04:4c:6c:23:69:0b:
a8:28:e5:b8:75:b9:02:23:50:73:48:88:8e:45:ec:e3:f8:d2:
2f:c1:a8:30:cb:4a:62:c0:37:7c:6e:47:43:b7:6c:48:e3:dd:
0f:7a:a2:ca:c1:ae:38:95:5d:48:76:7b:f9:ab:07:e1:9b:ed:
aa:8e:2a:e4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO0CGBcRyrvSh8wW4+3igb2EXY7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDcxYTkzMjdiN2E2ZjU4ZjUwODVlNWJhOGFhOGZmNTEyOGJlNDBiMmY5NTAw
MjE0NDlkYzc0YjkyODQyNjFmY2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKF5fSGmyW59Mp0wvS3UdWnxIIcQSvKpBcN051NxK6oI6ZaVI0+ovo4suIKM
g7CaQiISloj8gHAkLNdiH0c03MLvUb77AlWZGRuMiP1BhTNz5jVLK6dCBdq31qaU
KT2/cpd31QTitHn8z/0Rk0va0RIiOvKR4VX9KGAxct5aA8Qq1zQ491nV6y+kMuQZ
NCOgjLlo5mP1aHkSVTeTVML4OfDOs9zTWhyNic8teO6dJwoL0s60dzYv9bQBYfze
GM2YuWY93boXd4PotUBn6qOagP1JjfwgmE8UqiLTkwYBAdgR06fFUkCEeUYUi8QX
mpOi7tLYyzUM8IQNTRCGiFA+iH0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSTenCF
4OalQtagGmCXhR6l5ypswzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTFjMTUwZmMtZGNiNS00MDJjLTliZjAtNWE0NmMyYjU4ZDM1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0BsI
MA0GCSqGSIb3DQEBCwUAA4IBAQBFwrSTqqxWg/YHrrraGwdVRPQzB5youKLQZQ3Y
RRJLErInHcPZFR2GZPJJJ3DRvgsGDa23ONaLCHZrAnjnxrNXiuzSfMSErI9IZUay
jZFCPSybxdBpXSWIYCY1EbznMJ0+VkVf9VSAn37JeL+9kSWBsJxKzKZM/d6iAuw/
B/2gzvrqN2q9WkdxskHu81d5OrloQsb1j0LdOBy82e0BPe+5BMoCZsBtRadff4M1
gp1kj3bIR5S4ucBjVIEYcV39om4ETGwjaQuoKOW4dbkCI1BzSIiORezj+NIvwagw
y0piwDd8bkdDt2xI490PeqLKwa44lV1Idnv5qwfhm+2qjirk
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:55 2025 by rpki-client