Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
File: 32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa (raw, json)
Hash identifier: eGOuTIEXlxmDAnKtuOBe1xEt52Q4Khr7EQ7KVGiZwB4=
Subject key identifier: D7:F7:E4:82:C0:7E:F0:3A:31:D7:09:D7:A1:59:69:F2:C6:A9:13:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 321ED8D4B32AC084FF5D30A1228581980BB8A1A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1e:d8:d4:b3:2a:c0:84:ff:5d:30:a1:22:85:81:98:0b:b8:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3e64ba11e24d48366aeb8a0cd6ebda8c84b5186fa74e2707d3c45163f2a446d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:34:96:a5:36:b0:72:e2:09:05:ac:05:06:
cb:74:dc:10:e8:95:95:38:1a:47:90:b5:3f:a2:dc:
2e:c0:16:96:20:3f:a7:3e:c4:7c:1e:6a:c7:14:d9:
e4:78:0d:c4:be:66:2b:34:29:12:86:61:19:00:1f:
14:22:3b:fb:44:66:54:54:73:94:61:38:ff:19:ed:
94:f3:6e:76:ed:1e:c6:7a:fd:93:b4:68:0b:8e:77:
7c:2e:82:cf:59:b1:bb:da:97:ca:ca:c7:76:b1:39:
8f:05:bf:88:57:5d:7a:19:b2:01:94:61:0f:17:b2:
3b:52:db:8f:af:57:ca:0a:c5:0e:65:5e:1a:5d:4f:
ef:dd:d9:a2:c9:33:92:60:84:5e:28:72:f8:7f:e0:
b7:f8:d6:0b:20:82:fe:fe:ee:1a:0b:a6:62:8b:eb:
57:bd:46:9b:c3:3f:96:d5:69:95:58:bf:12:00:d8:
40:b1:84:ac:c8:70:54:86:dd:89:7a:5c:7b:d0:32:
fc:2c:d4:78:f4:d7:17:97:ae:e2:c4:3b:3b:00:08:
9e:39:25:fd:90:98:8f:c6:84:30:e7:e5:6a:60:7b:
58:f4:25:e4:43:e5:67:74:db:d0:25:75:ca:21:cb:
e9:65:e5:f0:8d:95:74:49:41:b1:9e:45:8f:4f:2f:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:E4:82:C0:7E:F0:3A:31:D7:09:D7:A1:59:69:F2:C6:A9:13:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e080::/46
Signature Algorithm: sha256WithRSAEncryption
7e:54:d9:3b:4f:64:42:d1:4d:f2:ab:ae:6f:5a:d2:2c:d1:2c:
1b:5b:b2:53:1f:23:68:78:47:9e:49:d4:cd:c4:56:13:6d:a9:
aa:74:19:8c:db:22:cb:8f:38:26:25:bd:4e:40:2a:25:de:50:
2a:b4:5d:bb:d8:d4:71:0f:00:c3:50:cf:eb:ce:51:e2:10:4d:
39:ba:e2:06:84:3d:d8:1f:4f:1d:7b:6b:70:a4:9b:a9:94:aa:
30:72:7f:46:1c:b8:79:d0:56:f4:df:19:2f:4a:af:6b:d5:2e:
5d:1f:35:33:6c:8b:c2:df:a5:2d:78:0e:71:66:e7:a7:85:b7:
f4:f6:bb:62:31:43:c9:0e:2e:90:f6:d3:20:81:13:fd:d4:1e:
76:4a:2a:43:72:15:8e:a6:96:b2:9d:79:4c:11:4a:ad:5f:df:
69:47:93:a1:e2:7b:bc:b4:88:d8:e0:8d:ad:e7:67:1c:84:39:
f9:23:08:f4:a6:e9:d1:de:3d:f1:d5:86:67:1d:a1:df:7c:d4:
54:54:11:e8:d5:89:1c:ee:82:b1:3a:08:85:3f:b2:8f:53:ab:
89:9a:07:4f:56:e0:54:ce:eb:48:c8:d3:a9:07:4f:b2:74:2c:
c0:8c:f2:07:90:65:7c:e3:cd:b0:00:39:f4:1b:13:f0:76:b3:
77:1a:61:98
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMh7Y1LMqwIT/XTChIoWBmAu4oagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNlNjRiYTExZTI0ZDQ4MzY2YWViOGEwY2Q2ZWJkYThjODRiNTE4NmZhNzRl
MjcwN2QzYzQ1MTYzZjJhNDQ2ZDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJdPNJalNrBy4gkFrAUGy3TcEOiVlTgaR5C1P6LcLsAWliA/pz7EfB5qxxTZ
5HgNxL5mKzQpEoZhGQAfFCI7+0RmVFRzlGE4/xntlPNudu0exnr9k7RoC453fC6C
z1mxu9qXysrHdrE5jwW/iFddehmyAZRhDxeyO1Lbj69XygrFDmVeGl1P793Zoskz
kmCEXihy+H/gt/jWCyCC/v7uGgumYovrV71Gm8M/ltVplVi/EgDYQLGErMhwVIbd
iXpce9Ay/CzUePTXF5eu4sQ7OwAInjkl/ZCYj8aEMOflamB7WPQl5EPlZ3Tb0CV1
yiHL6WXl8I2VdElBsZ5Fj08vUr8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTX9+SC
wH7wOjHXCdehWWnyxqkToDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzJiNzQxNzktZGI3MC00YjVlLWE5YWEtZTZhZTg1MzkyYTJlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DXg
gDANBgkqhkiG9w0BAQsFAAOCAQEAflTZO09kQtFN8quub1rSLNEsG1uyUx8jaHhH
nknUzcRWE22pqnQZjNsiy484JiW9TkAqJd5QKrRdu9jUcQ8Aw1DP685R4hBNObri
BoQ92B9PHXtrcKSbqZSqMHJ/Rhy4edBW9N8ZL0qva9UuXR81M2yLwt+lLXgOcWbn
p4W39Pa7YjFDyQ4ukPbTIIET/dQedkoqQ3IVjqaWsp15TBFKrV/faUeToeJ7vLSI
2OCNrednHIQ5+SMI9Kbp0d498dWGZx2h33zUVFQR6NWJHO6CsToIhT+yj1OriZoH
T1bgVM7rSMjTqQdPsnQswIzyB5BlfOPNsAA59BsT8HazdxphmA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:05 2025 by rpki-client