Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier: 8nwHHfFy815R8DhnPs4M72cf4bE2o4riaXhEWQEfNAM=
Subject key identifier: 5B:3B:F4:85:12:99:BB:A4:08:14:75:09:42:29:A7:8D:BB:B1:2B:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C9B6E6BD9A9794ABEC030F12C1B9779D2D203C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9b:6e:6b:d9:a9:79:4a:be:c0:30:f1:2c:1b:97:79:d2:d2:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a3e6aa8d51b80e1d26d67bf5e0b90b4e7c7d3a41230187af24bde647d0a82249, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:72:74:c0:27:61:16:e0:c9:78:8a:9e:af:
0c:f1:d0:03:84:88:d3:97:06:ec:ab:aa:a6:45:09:
12:33:b8:69:3c:5c:90:6e:cb:dd:f3:b2:00:b8:c2:
bf:f5:bb:58:6c:d2:51:d6:e3:cd:72:7b:22:cb:ac:
af:e1:4a:d4:29:5a:04:85:95:b6:22:d2:4f:f5:f4:
a3:12:8f:fa:28:7d:23:8d:ab:55:d2:77:0b:22:e5:
71:36:e3:f8:11:09:28:a8:5e:9b:bf:4d:de:3d:87:
49:25:81:9d:4f:db:d5:91:57:8a:7c:78:b2:7a:44:
4d:cd:21:3f:f5:98:d2:77:a7:23:e0:46:ae:33:9d:
33:d3:32:34:91:0e:fb:1a:1c:2c:2d:3f:ee:41:88:
97:39:aa:fc:9e:d7:93:bf:3a:f3:9a:c5:56:0a:e9:
f2:9c:62:d5:04:23:b9:25:80:9b:84:e0:64:d0:9f:
1d:3b:9f:17:ad:d6:85:cd:f1:02:17:67:de:32:dc:
3e:4a:f5:ae:f7:ca:65:92:4c:e4:d8:6c:18:8e:e4:
0e:0d:e6:26:78:46:f0:ea:f1:65:4e:1d:bb:8f:37:
8c:2c:b4:c5:9b:b5:46:72:c9:99:74:f5:f3:40:94:
1d:9d:63:89:11:4e:23:1b:53:cc:31:9a:48:bc:25:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:F4:85:12:99:BB:A4:08:14:75:09:42:29:A7:8D:BB:B1:2B:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a080::/48
Signature Algorithm: sha256WithRSAEncryption
31:25:9c:a0:90:7a:e6:38:4c:d0:4d:52:bb:40:49:5d:a1:d0:
97:77:a1:45:c0:b4:79:9a:aa:0e:b8:92:30:1a:8f:e0:82:d4:
12:27:fe:1b:cf:85:4c:03:70:fe:7a:69:db:16:71:26:96:00:
09:a9:61:f3:3b:bc:de:bd:32:e5:12:6d:38:29:04:5e:74:81:
c9:44:60:d9:10:53:45:f6:0f:14:eb:df:52:81:10:56:75:7d:
be:ee:b4:87:30:4e:e7:df:a1:a3:f1:35:9b:6e:e0:5e:3e:8a:
d6:ba:b8:be:1d:14:2a:04:0d:53:8d:f7:a7:b3:32:e1:38:c3:
ea:c9:79:5f:b2:4b:ea:be:85:6f:51:28:30:27:5d:b4:c0:30:
a4:15:c0:89:2b:8c:cf:5c:29:3a:4f:f0:12:3c:1f:6b:61:4a:
64:3a:be:ab:1f:b4:2f:e8:95:f6:78:aa:40:dc:75:cd:fb:2d:
63:d3:64:37:ec:95:b6:18:e0:d4:4d:e7:3f:f4:68:94:8f:45:
1a:c3:b3:f0:ad:df:1c:6d:09:db:14:22:fc:6a:b7:42:14:b7:
aa:c8:6d:6d:17:60:9d:1d:33:d6:a4:fc:43:57:2d:b1:92:8f:
b8:24:93:74:2c:63:d3:09:19:d9:90:14:e2:b1:c0:df:f0:ca:
c1:5e:71:70
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULJtua9mpeUq+wDDxLBuXedLSA8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGEzZTZhYThkNTFiODBlMWQyNmQ2N2JmNWUwYjkwYjRlN2M3ZDNhNDEyMzAx
ODdhZjI0YmRlNjQ3ZDBhODIyNDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN1pcnTAJ2EW4Ml4ip6vDPHQA4SI05cG7KuqpkUJEjO4aTxckG7L3fOyALjC
v/W7WGzSUdbjzXJ7Isusr+FK1ClaBIWVtiLST/X0oxKP+ih9I42rVdJ3CyLlcTbj
+BEJKKhem79N3j2HSSWBnU/b1ZFXinx4snpETc0hP/WY0nenI+BGrjOdM9MyNJEO
+xocLC0/7kGIlzmq/J7Xk78685rFVgrp8pxi1QQjuSWAm4TgZNCfHTufF63Whc3x
Ahdn3jLcPkr1rvfKZZJM5NhsGI7kDg3mJnhG8OrxZU4du483jCy0xZu1RnLJmXT1
80CUHZ1jiRFOIxtTzDGaSLwlXpMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRbO/SF
Epm7pAgUdQlCKaeNu7Er0zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDA3OGNmZjYtOWIzNC00ZjE2LTkwM2YtYzc4MTdkODZiZjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g
gDANBgkqhkiG9w0BAQsFAAOCAQEAMSWcoJB65jhM0E1Su0BJXaHQl3ehRcC0eZqq
DriSMBqP4ILUEif+G8+FTANw/npp2xZxJpYACalh8zu83r0y5RJtOCkEXnSByURg
2RBTRfYPFOvfUoEQVnV9vu60hzBO59+ho/E1m27gXj6K1rq4vh0UKgQNU433p7My
4TjD6sl5X7JL6r6Fb1EoMCddtMAwpBXAiSuMz1wpOk/wEjwfa2FKZDq+qx+0L+iV
9niqQNx1zfstY9NkN+yVthjg1E3nP/RolI9FGsOz8K3fHG0J2xQi/Gq3QhS3qsht
bRdgnR0z1qT8Q1ctsZKPuCSTdCxj0wkZ2ZAU4rHA3/DKwV5xcA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:08 2025 by rpki-client