Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a961f3a-fb71-4357-a4fc-28c4024b0441.roa
File: 1a961f3a-fb71-4357-a4fc-28c4024b0441.roa (raw, json)
Hash identifier: ObFwMXAuSLlRt0Z/P4ftlpu3iPs59l27SiCk6s4Vtnk=
Subject key identifier: 01:83:0D:49:A7:78:98:D7:04:F3:E7:D3:14:99:23:1F:37:49:40:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CC78A91C2F2BDDDCD98DE4BA6D4F78739D0F74D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a961f3a-fb71-4357-a4fc-28c4024b0441.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000::/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c7:8a:91:c2:f2:bd:dd:cd:98:de:4b:a6:d4:f7:87:39:d0:f7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=13669c1a7a57eb52f91f33e3e0557b51243dc65f6bee7f602aa7c61aa60b0343, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:05:a4:8a:14:85:61:9c:76:5a:ce:f4:1a:
9c:25:ed:25:47:19:55:dc:32:4a:3e:77:ce:92:03:
f3:10:b3:8d:f5:46:c0:18:20:b4:d6:0f:6d:3b:9d:
43:3e:65:92:b6:d8:73:80:e7:52:18:b7:76:a2:11:
04:ca:d9:da:25:a8:35:19:07:b7:f3:23:05:63:14:
fd:be:d9:9a:0c:52:bc:cc:79:4c:9b:4f:8b:1f:e2:
0f:a0:0d:5d:75:b4:c2:88:7b:4e:6d:f4:84:81:01:
90:65:d1:98:63:cc:57:f7:43:7c:a3:fc:14:31:84:
1a:36:66:c5:08:32:0b:1a:36:ef:31:ea:6c:15:d0:
17:d0:24:e5:4b:2d:c7:07:61:9b:57:f1:23:f6:82:
b6:24:1e:3f:11:dc:e6:ee:11:30:64:83:c0:e2:47:
da:20:1e:86:ce:89:1b:a2:39:31:eb:4a:ca:ee:4d:
c3:04:da:2c:15:f9:2b:e7:bd:7c:1f:c1:a8:e3:57:
4c:40:22:0a:c3:14:07:27:29:53:b2:9e:36:cc:07:
db:ab:61:b1:b5:df:d8:7d:a6:33:e8:ce:db:cc:55:
81:3a:4a:30:db:4e:a7:7d:6f:f0:77:fb:3f:41:c1:
ac:0f:9f:36:7f:0f:ca:ea:4e:36:74:9f:b2:ca:03:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:0D:49:A7:78:98:D7:04:F3:E7:D3:14:99:23:1F:37:49:40:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a961f3a-fb71-4357-a4fc-28c4024b0441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
b6:c2:e2:aa:83:21:7f:2a:44:75:d1:40:ba:58:31:14:e4:c7:
a5:aa:5b:96:ec:09:1e:67:e2:cc:71:83:0e:8c:17:2a:5b:90:
4f:96:66:5a:90:3f:4c:a8:ad:bf:c8:2f:ab:dc:61:3a:df:10:
2b:c5:ed:b2:8e:ec:e1:ae:49:54:af:1d:a5:29:2b:cd:63:9c:
e5:cc:80:9c:a3:16:2e:ac:9c:23:3d:4d:15:28:0b:48:df:83:
24:6b:f0:9f:9f:1a:3d:fd:8f:f0:99:7d:1f:a0:37:63:bd:d7:
9e:57:72:43:20:bd:7f:f7:62:a4:cc:ee:c8:08:39:5b:4b:13:
8a:e9:81:4e:c6:6a:38:0b:79:e5:c1:a7:cb:1a:b3:d1:cc:ff:
fb:05:af:08:ac:46:d5:6d:98:96:fc:a0:06:73:44:23:15:42:
b8:8c:24:dc:b0:0f:04:ce:fd:92:4c:76:4d:20:c7:53:b8:ae:
9e:28:09:fe:0a:93:b6:c7:eb:09:b3:06:9d:b7:9f:22:9c:26:
94:c1:f9:12:60:24:8d:ca:42:06:a6:9e:f3:6c:1d:c8:61:7e:
3c:38:3a:71:b0:64:37:c7:fd:fd:7e:fb:48:c8:78:bb:16:36:
c9:58:b6:fe:65:ed:28:c3:ed:81:c9:7a:31:2d:cc:10:34:99:
61:62:d9:41
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUDMeKkcLyvd3NmN5LptT3hznQ900wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMjUwMDAwMDBaFw0yNTAzMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDEzNjY5YzFhN2E1N2ViNTJmOTFmMzNlM2UwNTU3YjUxMjQzZGM2NWY2YmVl
N2Y2MDJhYTdjNjFhYTYwYjAzNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOsABaSKFIVhnHZazvQanCXtJUcZVdwySj53zpID8xCzjfVGwBggtNYPbTud
Qz5lkrbYc4DnUhi3dqIRBMrZ2iWoNRkHt/MjBWMU/b7ZmgxSvMx5TJtPix/iD6AN
XXW0woh7Tm30hIEBkGXRmGPMV/dDfKP8FDGEGjZmxQgyCxo27zHqbBXQF9Ak5Ust
xwdhm1fxI/aCtiQePxHc5u4RMGSDwOJH2iAehs6JG6I5MetKyu5NwwTaLBX5K+e9
fB/BqONXTEAiCsMUBycpU7KeNswH26thsbXf2H2mM+jO28xVgTpKMNtOp31v8Hf7
P0HBrA+fNn8PyupONnSfssoDR5cCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBQBgw1J
p3iY1wTz59MUmSMfN0lAlDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWE5NjFmM2EtZmI3MS00MzU3LWE0ZmMtMjhjNDAyNGIwNDQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFByoF0AAw
DQYJKoZIhvcNAQELBQADggEBALbC4qqDIX8qRHXRQLpYMRTkx6WqW5bsCR5n4sxx
gw6MFypbkE+WZlqQP0yorb/IL6vcYTrfECvF7bKO7OGuSVSvHaUpK81jnOXMgJyj
Fi6snCM9TRUoC0jfgyRr8J+fGj39j/CZfR+gN2O9155XckMgvX/3YqTM7sgIOVtL
E4rpgU7GajgLeeXBp8sas9HM//sFrwisRtVtmJb8oAZzRCMVQriMJNywDwTO/ZJM
dk0gx1O4rp4oCf4Kk7bH6wmzBp23nyKcJpTB+RJgJI3KQgamnvNsHchhfjw4OnGw
ZDfH/f1++0jIeLsWNslYtv5l7SjD7YHJejEtzBA0mWFi2UE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:47 2025 by rpki-client