Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
File: 28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa (raw, json)
Hash identifier: PltxrN4gRq6kAH8mlY+6wWtsItEqdka5vQ9XTfuxR0k=
Subject key identifier: 47:32:DC:A5:CF:0B:64:6A:46:37:6F:0C:D4:BD:56:10:BD:A8:52:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F19277DE4B62D174433DF4C75E921595C035AC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:19:27:7d:e4:b6:2d:17:44:33:df:4c:75:e9:21:59:5c:03:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=118b6c2fb7d6328fd3f7f53fdbb60a7f679b07fe5e56e53bd7800449f46da82d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:fa:55:ee:0f:4a:82:a1:34:13:74:5e:d5:
b8:f3:5d:16:e9:54:9f:82:b9:a8:1a:1d:3b:e6:3e:
20:e7:b0:54:24:03:43:1f:4d:a9:07:8c:6f:aa:da:
98:1c:b3:68:db:25:89:72:9a:8c:0d:1f:20:93:bb:
ac:c4:f9:fc:98:29:a3:ca:bf:41:bb:5b:58:9a:97:
f2:8e:e5:25:0b:44:fc:28:49:3d:73:df:cb:03:37:
e4:67:fc:7b:71:e9:ca:b2:32:b3:ef:1f:64:45:c4:
b4:0b:53:36:98:2f:b9:7a:e6:4f:30:5a:7e:c4:7c:
8b:cd:f0:20:49:2c:fd:ea:cb:6b:e7:93:1f:4c:ea:
48:3b:64:39:ec:b1:90:a9:dc:42:b4:ce:f0:43:65:
66:12:17:27:f1:a7:33:e2:bb:0a:5a:52:ec:8b:48:
30:48:e1:bd:1c:60:3c:7c:19:9c:fe:62:f2:60:2b:
b0:20:5f:29:79:f8:24:27:59:fe:c0:cb:c5:c5:9e:
ae:c7:52:76:4b:0e:1f:3a:43:7b:b4:1c:61:2d:f7:
ff:9f:36:de:03:fb:5a:ae:3d:77:5c:9f:54:3b:bf:
00:d5:67:55:c4:b2:c4:3f:34:51:55:1d:a2:98:e4:
4d:75:08:7b:93:7f:e2:62:98:e9:cf:54:cb:f8:6b:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:DC:A5:CF:0B:64:6A:46:37:6F:0C:D4:BD:56:10:BD:A8:52:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:60:e0:22:96:dc:67:d1:65:d8:d1:04:e3:4a:3d:26:c5:67:
b6:8f:56:39:69:eb:09:5f:f9:cf:58:be:2e:96:aa:85:75:2d:
0d:bb:5d:ac:34:82:85:54:57:b1:cb:65:5e:d6:18:49:9d:ba:
2f:08:b6:a5:d2:2e:ef:a2:79:5d:29:7a:fc:9d:10:1f:6b:37:
cb:df:45:2a:b3:83:b0:6a:33:23:77:e8:56:d3:9b:13:c8:eb:
29:f5:33:d6:e9:f9:07:d7:5d:c1:9f:f0:a1:5a:fb:f0:01:11:
79:27:4a:64:30:c3:8e:09:7a:9b:8e:b4:f6:19:df:9f:e3:c7:
f0:8d:1d:6e:6e:20:86:85:b4:79:8c:ee:59:e6:b3:7c:1c:3f:
cb:8b:ce:e0:09:e2:ee:83:c9:e3:21:ca:bf:71:be:13:4e:da:
a0:6a:fb:71:a0:be:aa:4e:9a:be:8c:53:b8:a4:95:85:85:58:
bb:76:6e:2d:c8:54:42:b0:02:35:25:96:72:9e:be:51:ec:9d:
f2:81:9e:f3:1f:7f:13:77:73:1b:05:41:4f:85:89:c5:ff:52:
08:6b:13:d5:da:f7:a6:17:c7:a6:fd:12:8c:fb:70:0b:26:36:
00:f9:6a:fc:2a:2d:ad:ec:a9:f3:3f:4c:43:0e:fc:6d:9c:d3:
15:8c:76:f5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDxknfeS2LRdEM99MdekhWVwDWskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDExOGI2YzJmYjdkNjMyOGZkM2Y3ZjUzZmRiYjYwYTdmNjc5YjA3ZmU1ZTU2
ZTUzYmQ3ODAwNDQ5ZjQ2ZGE4MmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoA+lXuD0qCoTQTdF7VuPNdFulUn4K5qBodO+Y+IOewVCQDQx9NqQeMb6ra
mByzaNsliXKajA0fIJO7rMT5/Jgpo8q/QbtbWJqX8o7lJQtE/ChJPXPfywM35Gf8
e3HpyrIys+8fZEXEtAtTNpgvuXrmTzBafsR8i83wIEks/erLa+eTH0zqSDtkOeyx
kKncQrTO8ENlZhIXJ/GnM+K7ClpS7ItIMEjhvRxgPHwZnP5i8mArsCBfKXn4JCdZ
/sDLxcWersdSdksOHzpDe7QcYS33/5823gP7Wq49d1yfVDu/ANVnVcSyxD80UVUd
opjkTXUIe5N/4mKY6c9Uy/hrzyUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRHMtyl
zwtkakY3bwzUvVYQvahSRjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjhmYzQzYWQtMGMzYi00ZDc3LWFhMzItNWVmYzQzMWU2OWMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A
4DANBgkqhkiG9w0BAQsFAAOCAQEAb2DgIpbcZ9Fl2NEE40o9JsVnto9WOWnrCV/5
z1i+LpaqhXUtDbtdrDSChVRXsctlXtYYSZ26Lwi2pdIu76J5XSl6/J0QH2s3y99F
KrODsGozI3foVtObE8jrKfUz1un5B9ddwZ/woVr78AEReSdKZDDDjgl6m4609hnf
n+PH8I0dbm4ghoW0eYzuWeazfBw/y4vO4Ani7oPJ4yHKv3G+E07aoGr7caC+qk6a
voxTuKSVhYVYu3ZuLchUQrACNSWWcp6+Ueyd8oGe8x9/E3dzGwVBT4WJxf9SCGsT
1dr3phfHpv0SjPtwCyY2APlq/Cotreyp8z9MQw78bZzTFYx29Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:54 2025 by rpki-client