Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: 6ID8fmcHstNBg/5SyT8z8KjRp/WhmAPLYpuh7DpOJ0k=
Subject key identifier: DF:DA:10:38:5C:89:CF:A5:E7:26:AD:23:96:36:FF:1B:41:B0:A2:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 478653B505A1BDD16EDA3DB28B5F689CCFE52011
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:86:53:b5:05:a1:bd:d1:6e:da:3d:b2:8b:5f:68:9c:cf:e5:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7a59e3df3c8ee2d41ab1008f5a31bd3ad8d7a7538e5416773d1bed8d5691e344, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:ad:ca:42:75:1c:48:3f:7e:d0:94:25:6f:
08:39:ce:17:60:e4:95:a1:14:9c:2c:27:68:c1:5f:
32:55:21:d0:2d:c8:f8:f0:b3:25:50:44:24:8f:be:
bc:12:f1:ae:1b:86:3d:25:c5:f1:0d:74:52:3d:40:
04:b4:ae:c0:e6:7e:ac:e6:8c:fe:e1:43:f6:ff:57:
45:78:22:f8:08:4a:d8:39:89:6f:b3:f9:6d:63:1f:
7a:e6:af:95:a1:bc:9a:02:1d:09:77:bf:9a:e9:3e:
46:11:0d:e9:66:cf:27:a7:be:6a:fa:d3:a6:33:89:
4e:dc:a9:a1:de:fe:73:1d:33:52:98:b3:a9:2b:9d:
1c:f7:06:16:27:f5:59:78:26:87:5b:6d:c0:41:fa:
f9:7b:91:c1:01:b0:80:c7:41:a3:f3:54:ec:45:59:
40:7b:7b:c8:10:d5:46:80:59:4b:cd:9f:b2:17:57:
6a:db:17:e8:b9:15:1e:27:d4:f7:6c:67:13:91:e6:
4c:56:ee:dc:74:61:dd:f3:c7:19:c8:54:16:fa:51:
5d:11:7d:7a:8d:7e:63:8d:a4:a7:e0:24:7f:eb:fd:
e2:29:ce:f2:4f:04:19:ee:1d:47:da:d7:7b:78:83:
da:b4:cd:ec:3a:0e:67:15:b5:ea:31:39:e2:a2:e1:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:10:38:5C:89:CF:A5:E7:26:AD:23:96:36:FF:1B:41:B0:A2:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
88:10:51:9f:71:40:fb:e7:3d:5d:17:de:40:fa:d7:ab:ec:80:
88:bb:a5:b5:fe:c3:b5:fc:60:46:1a:1a:dd:9a:25:ea:68:a3:
3a:b9:8c:b0:75:3d:f5:47:ce:ee:7e:dc:0e:61:29:be:1a:8b:
20:ab:c7:e0:53:ab:17:f9:79:4d:0e:9b:8e:a2:84:f8:38:96:
1a:92:7a:0e:bd:ef:1f:3c:88:1c:9e:85:91:9b:fd:b0:1f:41:
cf:5a:08:11:42:5c:7d:95:d9:9c:84:93:ca:9d:08:b9:fe:d3:
0c:66:88:86:35:aa:5f:51:1f:c3:6d:52:7f:85:dc:2c:8c:b6:
44:3b:0b:50:0c:97:55:0d:80:5d:21:b4:4c:db:95:3f:f3:9c:
b2:37:9f:b4:48:87:b1:1f:c2:92:8e:a6:b4:a7:34:7e:af:2f:
57:0a:9b:13:46:eb:18:0d:14:ee:61:35:6f:17:08:92:ed:7c:
e8:aa:d1:f6:b8:15:71:4b:52:f4:7a:90:0c:8c:d2:76:7e:8b:
d3:f7:74:7b:13:68:d0:f5:cd:7f:80:cb:a4:2e:1a:12:22:e4:
fe:87:75:0b:58:da:c4:06:20:bc:78:c3:b1:af:57:bf:83:da:
1b:6f:54:f8:3b:5e:cc:e9:5a:54:ed:9e:ff:65:ae:97:98:d6:
ae:42:f1:04
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUR4ZTtQWhvdFu2j2yi19onM/lIBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDdhNTllM2RmM2M4ZWUyZDQxYWIxMDA4ZjVhMzFiZDNhZDhkN2E3NTM4ZTU0
MTY3NzNkMWJlZDhkNTY5MWUzNDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6PrcpCdRxIP37QlCVvCDnOF2DklaEUnCwnaMFfMlUh0C3I+PCzJVBEJI++
vBLxrhuGPSXF8Q10Uj1ABLSuwOZ+rOaM/uFD9v9XRXgi+AhK2DmJb7P5bWMfeuav
laG8mgIdCXe/muk+RhEN6WbPJ6e+avrTpjOJTtypod7+cx0zUpizqSudHPcGFif1
WXgmh1ttwEH6+XuRwQGwgMdBo/NU7EVZQHt7yBDVRoBZS82fshdXatsX6LkVHifU
92xnE5HmTFbu3HRh3fPHGchUFvpRXRF9eo1+Y42kp+Akf+v94inO8k8EGe4dR9rX
e3iD2rTN7DoOZxW16jE54qLhiNkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTf2hA4
XInPpecmrSOWNv8bQbCiIDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQCIEFGfcUD75z1dF95A+ter7ICIu6W1/sO1/GBG
GhrdmiXqaKM6uYywdT31R87uftwOYSm+Gosgq8fgU6sX+XlNDpuOooT4OJYaknoO
ve8fPIgcnoWRm/2wH0HPWggRQlx9ldmchJPKnQi5/tMMZoiGNapfUR/DbVJ/hdws
jLZEOwtQDJdVDYBdIbRM25U/85yyN5+0SIexH8KSjqa0pzR+ry9XCpsTRusYDRTu
YTVvFwiS7XzoqtH2uBVxS1L0epAMjNJ2fovT93R7E2jQ9c1/gMukLhoSIuT+h3UL
WNrEBiC8eMOxr1e/g9obb1T4O17M6VpU7Z7/Za6XmNauQvEE
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:55 2025 by rpki-client