Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
File: 42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa (raw, json)
Hash identifier: 6r7PzQVFPPzUQ3/b+1TU41eqD/eCFVRWYI9V93WD0EE=
Subject key identifier: F2:66:B7:C8:81:28:79:DF:B6:F5:F2:96:61:3B:2C:24:5F:B9:7E:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 413BAD3AB9E974DED7D34E739A00B0A71D2FCEFD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3b:ad:3a:b9:e9:74:de:d7:d3:4e:73:9a:00:b0:a7:1d:2f:ce:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=1356e8287cb278202e20cb0968e76f224d6933c9e2150d1c22cbfec2345d62ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:a3:8f:59:29:23:5c:03:74:0b:a7:24:9f:
d8:a9:52:b9:8f:c3:fc:0d:59:77:04:6e:80:58:be:
b3:8a:09:41:e2:9d:3c:aa:b5:5d:91:6f:0c:75:de:
d7:15:d4:ae:85:66:fa:fa:2e:c7:be:54:ae:c2:19:
d3:56:8d:f1:b4:ac:72:2c:79:f3:2a:c1:75:15:66:
1f:72:2b:e8:e3:75:65:0d:1e:1b:2b:55:21:69:59:
fc:8f:56:76:e1:d3:63:c9:cb:de:c7:df:65:9e:e6:
90:f5:d3:c1:df:ca:ef:8f:fd:ca:95:06:d2:92:e2:
cd:17:bd:9a:6e:5c:92:cc:31:6d:49:8b:49:74:0f:
c3:05:1e:e8:a6:07:9d:8b:16:05:2a:fb:ff:7b:f0:
e9:e4:ad:56:9b:bb:e5:88:41:d3:0f:31:03:09:03:
cf:67:af:7c:2e:bd:29:d5:ff:f8:b5:66:6b:9b:a2:
a6:d3:38:13:96:7a:65:b8:ba:58:30:c9:26:c8:1a:
f9:57:46:c5:f2:80:80:dc:50:14:6a:73:4b:3c:9c:
95:d2:4c:e0:74:5c:0a:b9:ef:57:83:ee:7d:3a:9f:
dc:05:86:ce:e5:20:a6:41:09:67:89:cb:b6:f5:fb:
94:6d:48:a4:e9:ae:6d:a6:f0:7b:c5:75:76:fa:c3:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:B7:C8:81:28:79:DF:B6:F5:F2:96:61:3B:2C:24:5F:B9:7E:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/48
Signature Algorithm: sha256WithRSAEncryption
43:52:61:d3:df:ea:78:fb:88:3b:bb:58:44:43:b3:92:3f:8a:
f3:8b:5c:1c:c5:be:72:88:85:c2:ad:e1:b9:b4:66:e7:81:d8:
ec:ce:f2:83:fd:1a:5d:37:96:a4:79:6a:5f:7e:e5:2e:72:8f:
e8:bc:76:cf:48:f4:fa:3b:11:94:c7:3e:fc:ed:10:97:ff:e9:
23:b8:7b:e0:1d:d0:71:44:fc:34:1b:6e:59:e9:ed:85:44:bb:
7f:25:33:52:ba:f6:20:da:22:b4:9c:96:dc:8c:03:3d:19:1a:
e3:6d:34:e3:e7:6d:a5:b6:c4:22:84:cb:eb:5b:83:c3:75:17:
c4:95:c5:d6:43:55:ca:a6:e8:d8:c1:99:36:e4:c1:2f:40:70:
25:19:58:23:f0:cd:ac:11:a2:d2:b8:b1:0f:d8:2b:e8:a4:48:
6a:51:37:11:67:9d:39:b6:2a:1c:4e:6a:81:16:b5:9f:95:53:
61:aa:c4:38:7f:76:a3:99:49:57:b5:fa:c2:b8:76:c0:05:58:
c9:c9:c0:dd:ae:72:6a:b1:37:f0:4a:6e:bf:c3:73:c9:68:93:
f7:dc:48:7a:54:f9:4d:e4:b7:24:4b:52:2b:fc:32:55:fe:0d:
30:87:bc:82:79:cb:8e:54:f9:dc:ec:fd:b0:e3:d3:d2:65:83:
8d:6b:cf:f7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQTutOrnpdN7X005zmgCwpx0vzv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMzEwMDAwMDBaFw0yNTAzMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDEzNTZlODI4N2NiMjc4MjAyZTIwY2IwOTY4ZTc2ZjIyNGQ2OTMzYzllMjE1
MGQxYzIyY2JmZWMyMzQ1ZDYyYWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANqgo49ZKSNcA3QLpySf2KlSuY/D/A1ZdwRugFi+s4oJQeKdPKq1XZFvDHXe
1xXUroVm+voux75UrsIZ01aN8bSscix58yrBdRVmH3Ir6ON1ZQ0eGytVIWlZ/I9W
duHTY8nL3sffZZ7mkPXTwd/K74/9ypUG0pLizRe9mm5ckswxbUmLSXQPwwUe6KYH
nYsWBSr7/3vw6eStVpu75YhB0w8xAwkDz2evfC69KdX/+LVma5uiptM4E5Z6Zbi6
WDDJJsga+VdGxfKAgNxQFGpzSzycldJM4HRcCrnvV4PufTqf3AWGzuUgpkEJZ4nL
tvX7lG1IpOmubabwe8V1dvrDlCECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTyZrfI
gSh537b18pZhOywkX7l+mjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJhMmJiYmMtNGJmZC00MTcyLTgwMDQtYjkwYmY5ZDJkZTcyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HaQ
ADANBgkqhkiG9w0BAQsFAAOCAQEAQ1Jh09/qePuIO7tYREOzkj+K84tcHMW+coiF
wq3hubRm54HY7M7yg/0aXTeWpHlqX37lLnKP6Lx2z0j0+jsRlMc+/O0Ql//pI7h7
4B3QcUT8NBtuWenthUS7fyUzUrr2INoitJyW3IwDPRka42004+dtpbbEIoTL61uD
w3UXxJXF1kNVyqbo2MGZNuTBL0BwJRlYI/DNrBGi0rixD9gr6KRIalE3EWedObYq
HE5qgRa1n5VTYarEOH92o5lJV7X6wrh2wAVYycnA3a5yarE38Epuv8NzyWiT99xI
elT5TeS3JEtSK/wyVf4NMIe8gnnLjlT53Oz9sOPT0mWDjWvP9w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:05 2025 by rpki-client