Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c6c4dd9-ed90-498e-88a4-f116875a7de2.roa
File: 3c6c4dd9-ed90-498e-88a4-f116875a7de2.roa (raw, json)
Hash identifier: qoKoUAq42zNLNC+QaIAzZSRam1tyRKODhx7jWnm8/MQ=
Subject key identifier: F8:49:9D:F8:F7:AE:FC:B0:CD:75:4C:67:DD:41:6C:27:DA:0C:F6:C1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E9D58461BC1F4429BF012F00EA33D8721F277E2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c6c4dd9-ed90-498e-88a4-f116875a7de2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:9d:58:46:1b:c1:f4:42:9b:f0:12:f0:0e:a3:3d:87:21:f2:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=dab25f9360aaaf44e18badcd2c1ac104719ea2177b9f023fa42367270838b1b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:d9:00:b8:56:e5:33:61:d2:84:34:31:61:
41:30:d0:bb:ca:20:e9:12:6c:e3:70:b7:e2:41:2a:
73:14:2d:ca:50:dc:0e:b9:57:2b:92:89:a7:d6:01:
fd:ee:3e:f3:f8:c2:42:7a:19:36:b6:a0:a8:83:46:
d9:08:15:89:d4:64:6b:0f:c8:5e:3f:52:8a:76:74:
78:fb:d3:e5:1e:6e:bf:9d:a0:5e:ed:df:e4:19:78:
93:71:49:ed:d9:92:30:a6:a2:4f:73:02:cb:9d:0f:
b6:99:28:fc:2e:02:d3:b2:f2:1e:5b:bc:55:b0:ef:
ce:5a:16:38:10:0a:6e:14:64:34:04:86:26:e5:aa:
84:a1:f2:f9:79:50:c2:6c:da:ea:00:19:22:dc:f8:
09:97:b5:a7:ce:18:3a:3c:8d:2d:73:8d:88:7d:83:
cb:84:27:19:ea:af:5b:5d:b7:9d:12:c6:82:1f:b4:
4e:04:e9:a6:45:65:dc:fc:79:44:e2:cc:40:05:e5:
11:e0:67:a8:74:07:66:58:e7:55:68:46:8d:f5:01:
5f:e6:66:c2:96:f9:66:57:11:f5:73:c2:68:60:2f:
44:2d:0b:2f:38:bf:85:c0:c9:e0:f5:0f:43:d3:80:
33:a8:33:1c:44:4f:a9:6f:0c:53:79:53:21:f2:d9:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:9D:F8:F7:AE:FC:B0:CD:75:4C:67:DD:41:6C:27:DA:0C:F6:C1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c6c4dd9-ed90-498e-88a4-f116875a7de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6040::/46
Signature Algorithm: sha256WithRSAEncryption
42:45:04:84:c1:c0:77:83:65:cd:7f:ef:d8:a3:c4:b0:89:7d:
ef:3d:db:29:1b:f0:7f:26:ae:4a:57:85:e9:52:9f:7b:ca:9a:
6b:f5:d1:7a:30:90:a3:ab:79:51:ee:ad:04:55:d7:7c:ee:71:
73:b5:ff:dc:44:85:b2:45:82:cc:e7:53:ba:ef:f4:b9:01:fe:
4d:41:54:0c:a2:a4:bf:d1:5f:a4:42:a3:6d:41:d0:d1:0f:29:
a6:80:3b:8e:2a:8c:da:f5:6e:5a:f5:90:da:72:ac:8c:dd:1f:
1a:7e:45:3e:c2:eb:34:43:f7:f9:93:72:4b:3f:12:69:ec:5b:
64:ef:6f:48:a6:40:44:d4:10:06:14:d9:d9:f6:13:4d:43:0b:
7c:3e:f7:39:aa:84:38:f3:64:96:e6:64:a3:4a:78:f4:f6:14:
53:3b:fd:bb:d8:41:56:56:90:75:45:b3:cd:79:de:e4:fe:64:
a7:f8:a4:83:54:a0:5a:27:6f:2a:01:23:14:2f:95:c8:4b:8f:
ba:58:bf:9c:95:04:8b:5e:54:83:65:6c:fc:16:01:d1:0c:0f:
bb:88:6f:37:4e:b1:eb:0f:6f:9e:96:38:ed:7d:2d:73:85:45:
a9:fa:c4:3a:1d:03:8f:d1:a5:cb:de:3f:1e:ef:f8:c4:37:58:
c7:90:3f:c5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPp1YRhvB9EKb8BLwDqM9hyHyd+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGRhYjI1ZjkzNjBhYWFmNDRlMThiYWRjZDJjMWFjMTA0NzE5ZWEyMTc3Yjlm
MDIzZmE0MjM2NzI3MDgzOGIxYjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKM42QC4VuUzYdKENDFhQTDQu8og6RJs43C34kEqcxQtylDcDrlXK5KJp9YB
/e4+8/jCQnoZNragqING2QgVidRkaw/IXj9SinZ0ePvT5R5uv52gXu3f5Bl4k3FJ
7dmSMKaiT3MCy50Ptpko/C4C07LyHlu8VbDvzloWOBAKbhRkNASGJuWqhKHy+XlQ
wmza6gAZItz4CZe1p84YOjyNLXONiH2Dy4QnGeqvW123nRLGgh+0TgTppkVl3Px5
ROLMQAXlEeBnqHQHZljnVWhGjfUBX+Zmwpb5ZlcR9XPCaGAvRC0LLzi/hcDJ4PUP
Q9OAM6gzHERPqW8MU3lTIfLZYB0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4SZ34
9678sM11TGfdQWwn2gz2wTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2M2YzRkZDktZWQ5MC00OThlLTg4YTQtZjExNjg3NWE3ZGUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DVg
QDANBgkqhkiG9w0BAQsFAAOCAQEAQkUEhMHAd4NlzX/v2KPEsIl97z3bKRvwfyau
SleF6VKfe8qaa/XRejCQo6t5Ue6tBFXXfO5xc7X/3ESFskWCzOdTuu/0uQH+TUFU
DKKkv9FfpEKjbUHQ0Q8ppoA7jiqM2vVuWvWQ2nKsjN0fGn5FPsLrNEP3+ZNySz8S
aexbZO9vSKZARNQQBhTZ2fYTTUMLfD73OaqEOPNkluZko0p49PYUUzv9u9hBVlaQ
dUWzzXne5P5kp/ikg1SgWidvKgEjFC+VyEuPuli/nJUEi15Ug2Vs/BYB0QwPu4hv
N06x6w9vnpY47X0tc4VFqfrEOh0Dj9Gly94/Hu/4xDdYx5A/xQ==
-----END CERTIFICATE-----
Generated at Fri May 2 14:59:13 2025 by rpki-client