Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d232961-eb43-42b7-908c-1226b1f4eeac.roa
File: 1d232961-eb43-42b7-908c-1226b1f4eeac.roa (raw, json)
Hash identifier: TFfa+/hzS3lMrxyML5+qfX9y6Igcwpcva7M+/IZff+Q=
Subject key identifier: CD:5C:9A:C9:44:7A:41:2E:A9:47:F4:A4:92:8E:15:B0:3F:12:73:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39043677A254D517637045417B4D6AE7DA0CE177
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d232961-eb43-42b7-908c-1226b1f4eeac.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:04:36:77:a2:54:d5:17:63:70:45:41:7b:4d:6a:e7:da:0c:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a173903d29d21860210e490f80175192d8b15d763f84148ada2ab8bc7771fc88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:74:bf:21:97:cd:4e:73:fa:5e:b4:8d:5f:
c0:a8:b3:9d:26:df:e1:d7:12:9c:cd:88:e9:e2:9b:
be:74:f6:d0:b2:eb:e9:c6:de:8e:35:34:0e:ae:b9:
cb:66:1c:cb:c8:66:be:34:72:e1:26:8d:a7:0a:30:
ec:0b:cd:c4:f1:bb:4a:04:64:ca:80:fc:65:f5:e1:
28:27:41:34:b6:46:35:42:0c:38:e1:d5:cc:62:f1:
13:3e:3b:ca:9c:aa:58:8a:bf:5d:eb:53:77:37:de:
e1:46:8e:c0:fd:25:bd:0e:80:2e:a6:01:eb:37:10:
1b:bf:db:d7:2a:94:75:63:06:0b:7b:49:a0:cc:a0:
44:49:c6:ef:6d:01:e4:c1:eb:ea:54:f2:51:b9:70:
cc:87:68:26:52:5b:ab:e4:66:f7:e6:f8:3f:49:ad:
0c:32:6c:6f:4d:02:c5:18:56:c0:c3:e5:00:ff:b9:
67:f1:15:d1:a7:d6:56:29:f4:a1:58:4b:8f:f9:4b:
94:a9:b8:b0:a9:b9:32:e7:65:c5:62:58:9f:a8:19:
73:0a:14:33:ed:6e:8e:e4:6d:5e:87:81:c7:2b:c5:
ea:02:3f:eb:9e:54:12:2a:8b:dd:22:bf:33:20:8f:
ec:da:6c:06:d3:03:ee:00:ee:25:4c:ae:8a:35:eb:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:9A:C9:44:7A:41:2E:A9:47:F4:A4:92:8E:15:B0:3F:12:73:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d232961-eb43-42b7-908c-1226b1f4eeac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077::/32
Signature Algorithm: sha256WithRSAEncryption
1e:0d:f1:84:ff:e0:8c:ef:84:0a:de:dc:41:f7:e3:b8:24:18:
9e:50:c5:27:11:f0:e9:fc:af:01:b6:2e:ad:a2:57:0d:5f:30:
76:89:1e:0c:56:43:7e:9f:06:5d:14:48:d3:38:f4:f0:65:72:
eb:3b:93:70:5c:c6:76:1c:30:a4:22:a2:e9:19:4f:f3:da:d2:
40:47:bf:f0:c4:43:ba:0f:27:79:e6:a1:0d:f7:41:8b:4e:8b:
d7:fc:21:44:0f:36:27:1d:a4:08:86:7a:71:21:d7:7d:0f:9d:
e1:69:e5:61:5f:4b:ef:58:18:10:40:2e:1d:c5:80:12:a8:ea:
30:86:86:93:1e:d4:a4:0a:a2:76:18:3f:c1:fc:3c:be:63:b6:
42:a5:f5:f0:75:4b:7a:7c:23:7d:6e:d9:69:b8:4f:72:c8:ab:
22:e3:3e:eb:c1:54:4e:de:cd:bc:45:b1:18:a6:e5:d7:cc:ea:
8d:c5:8c:94:f8:2e:1c:8f:3f:9f:5e:0b:5d:fe:45:b6:7b:7b:
02:16:7d:c3:eb:ca:2e:c4:94:11:85:f1:e8:5d:94:75:65:76:
7f:eb:bb:92:cb:2f:83:49:7c:20:90:e3:81:0c:8a:56:63:f7:
d5:b7:e8:03:81:19:6b:b4:ac:f1:4c:92:00:35:2d:8e:63:81:
ab:12:af:29
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUOQQ2d6JU1RdjcEVBe01q59oM4XcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGExNzM5MDNkMjlkMjE4NjAyMTBlNDkwZjgwMTc1MTkyZDhiMTVkNzYzZjg0
MTQ4YWRhMmFiOGJjNzc3MWZjODgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALr8dL8hl81Oc/petI1fwKiznSbf4dcSnM2I6eKbvnT20LLr6cbejjU0Dq65
y2Ycy8hmvjRy4SaNpwow7AvNxPG7SgRkyoD8ZfXhKCdBNLZGNUIMOOHVzGLxEz47
ypyqWIq/XetTdzfe4UaOwP0lvQ6ALqYB6zcQG7/b1yqUdWMGC3tJoMygREnG720B
5MHr6lTyUblwzIdoJlJbq+Rm9+b4P0mtDDJsb00CxRhWwMPlAP+5Z/EV0afWVin0
oVhLj/lLlKm4sKm5MudlxWJYn6gZcwoUM+1ujuRtXoeBxyvF6gI/655UEiqL3SK/
MyCP7NpsBtMD7gDuJUyuijXrJiECAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTNXJrJ
RHpBLqlH9KSSjhWwPxJztzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWQyMzI5NjEtZWI0My00MmI3LTkwOGMtMTIyNmIxZjRlZWFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Hcw
DQYJKoZIhvcNAQELBQADggEBAB4N8YT/4IzvhAre3EH347gkGJ5QxScR8On8rwG2
Lq2iVw1fMHaJHgxWQ36fBl0USNM49PBlcus7k3BcxnYcMKQioukZT/Pa0kBHv/DE
Q7oPJ3nmoQ33QYtOi9f8IUQPNicdpAiGenEh130PneFp5WFfS+9YGBBALh3FgBKo
6jCGhpMe1KQKonYYP8H8PL5jtkKl9fB1S3p8I31u2Wm4T3LIqyLjPuvBVE7ezbxF
sRim5dfM6o3FjJT4LhyPP59eC13+RbZ7ewIWfcPryi7ElBGF8ehdlHVldn/ru5LL
L4NJfCCQ44EMilZj99W36AOBGWu0rPFMkgA1LY5jgasSryk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:16 2025 by rpki-client