Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
File: 2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa (raw, json)
Hash identifier: wi2l5CbdVLY3Lh46ZAPfKvuHO26Mv6mg1mZJEOW/1GQ=
Subject key identifier: 1F:BE:D0:94:FB:70:B5:B5:13:77:C3:41:9A:8F:0C:C8:D0:05:42:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F8EBAC77D65907DC4DE5B2053F71A5AD1DDC1B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8e:ba:c7:7d:65:90:7d:c4:de:5b:20:53:f7:1a:5a:d1:dd:c1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ff4e65e9ad437dab16484943462a03bd8d30ca45430ed02e8560c8f7867c5fba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:62:fe:40:e0:bd:db:67:64:4f:b7:99:4c:
0c:9a:f5:af:dc:33:92:b9:07:11:29:34:8e:f6:06:
9d:6d:a1:87:62:7a:48:fc:21:39:32:92:63:9f:ee:
f4:c5:bf:af:da:34:65:2e:16:e6:7d:c9:4d:f5:3d:
4b:ac:79:29:d5:50:8e:8e:4d:fc:18:30:cb:7c:67:
23:82:a1:b9:5d:4f:6a:56:06:c0:c3:8f:f6:42:05:
48:6f:45:53:dc:8a:6c:46:dc:0d:0b:c7:11:de:4c:
62:54:d6:2b:e3:12:ed:b9:00:9f:03:e5:8f:8e:b6:
3d:58:0c:b1:68:23:a6:fe:63:a7:87:b5:0a:95:57:
70:7f:b1:38:dc:ee:a4:70:0e:a8:66:86:b1:0c:ff:
4e:be:05:89:89:3e:4c:eb:bf:e3:d1:8f:1f:b2:11:
d4:09:ce:4e:2b:0d:c3:a9:04:f9:01:9a:74:80:43:
d1:6c:66:46:1d:9c:d8:a3:e4:13:ce:94:23:0f:8f:
f9:76:97:58:a3:5a:b3:84:1f:99:f8:45:c2:23:cd:
51:e9:0b:8f:30:c1:07:d2:d6:b9:8c:8e:c6:36:37:
89:8d:8f:d3:a1:91:67:85:62:a1:a8:fa:a3:6a:6f:
06:46:3d:cc:4d:9d:b4:b4:8e:6e:71:d2:e2:59:fa:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:D0:94:FB:70:B5:B5:13:77:C3:41:9A:8F:0C:C8:D0:05:42:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/35
Signature Algorithm: sha256WithRSAEncryption
4f:bb:72:b2:78:e9:d1:2b:7d:80:f6:74:6c:f6:2f:12:29:b5:
0c:7d:67:0b:44:3b:c1:c4:35:ca:90:ca:41:35:ca:18:1e:ff:
0d:c1:d1:8e:0f:1a:15:5f:ad:23:bc:a5:29:5f:f8:81:6f:58:
b1:39:cc:11:68:a8:b6:3c:ae:fd:0b:1b:9d:8a:71:12:23:a5:
44:f0:ac:d5:5c:a1:d9:c3:fb:3a:f4:76:49:d5:df:6e:01:1d:
38:e9:40:0f:fa:2b:da:ef:fb:ea:45:bc:f7:a0:ba:a6:e1:26:
b7:b1:11:b9:b7:6a:ec:23:5b:62:59:03:4e:06:97:5d:4b:d0:
b5:b4:87:70:27:a8:3c:b8:5a:7b:76:9c:10:25:1e:cd:bd:f5:
56:98:fe:c5:80:26:46:35:24:53:f6:d2:9d:d4:a3:f6:b2:20:
99:f9:de:a4:b9:aa:7a:ad:26:e9:dc:24:f4:9b:06:19:2f:19:
ae:8c:32:e4:41:f1:7c:ef:5c:1b:da:7a:41:6e:b2:55:33:59:
8b:13:87:d5:dc:8f:fc:1d:5e:51:86:7d:bb:8d:ac:f4:6b:37:
78:2a:d5:0c:6d:39:58:24:3e:14:0d:5a:2d:55:51:fc:5b:56:
53:f1:86:9f:11:8b:40:1e:f4:0b:7e:f6:21:49:d3:86:3e:e6:
fb:c5:f3:85
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUb466x31lkH3E3lsgU/caWtHdwbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGZmNGU2NWU5YWQ0MzdkYWIxNjQ4NDk0MzQ2MmEwM2JkOGQzMGNhNDU0MzBl
ZDAyZTg1NjBjOGY3ODY3YzVmYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6FYv5A4L3bZ2RPt5lMDJr1r9wzkrkHESk0jvYGnW2hh2J6SPwhOTKSY5/u
9MW/r9o0ZS4W5n3JTfU9S6x5KdVQjo5N/Bgwy3xnI4KhuV1PalYGwMOP9kIFSG9F
U9yKbEbcDQvHEd5MYlTWK+MS7bkAnwPlj462PVgMsWgjpv5jp4e1CpVXcH+xONzu
pHAOqGaGsQz/Tr4FiYk+TOu/49GPH7IR1AnOTisNw6kE+QGadIBD0WxmRh2c2KPk
E86UIw+P+XaXWKNas4QfmfhFwiPNUekLjzDBB9LWuYyOxjY3iY2P06GRZ4Vioaj6
o2pvBkY9zE2dtLSObnHS4ln6FCUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQfvtCU
+3C1tRN3w0GajwzI0AVCSzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmM1YmE2NzMtNmQ5YS00ZWYyLWI4YTAtMTFkMGRkYmYzMDJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoF0BQA
MA0GCSqGSIb3DQEBCwUAA4IBAQBPu3KyeOnRK32A9nRs9i8SKbUMfWcLRDvBxDXK
kMpBNcoYHv8NwdGODxoVX60jvKUpX/iBb1ixOcwRaKi2PK79CxudinESI6VE8KzV
XKHZw/s69HZJ1d9uAR046UAP+iva7/vqRbz3oLqm4Sa3sRG5t2rsI1tiWQNOBpdd
S9C1tIdwJ6g8uFp7dpwQJR7NvfVWmP7FgCZGNSRT9tKd1KP2siCZ+d6kuap6rSbp
3CT0mwYZLxmujDLkQfF871wb2npBbrJVM1mLE4fV3I/8HV5Rhn27jaz0azd4KtUM
bTlYJD4UDVotVVH8W1ZT8YafEYtAHvQLfvYhSdOGPub7xfOF
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:50 2025 by rpki-client