Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4471b4d2-62e1-4876-baf7-b5951493a774.roa
File: 4471b4d2-62e1-4876-baf7-b5951493a774.roa (raw, json)
Hash identifier: lGa6kJMbRu2pdvmK9StpopkyjUpXSO9Vrl5+1PHA50E=
Subject key identifier: E6:A4:DE:C5:71:C0:6C:F4:DA:CE:5F:1D:1B:E9:FF:90:63:7B:4D:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AA74F8AC888D7C3437C99136512030598E4B439
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4471b4d2-62e1-4876-baf7-b5951493a774.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:60c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a7:4f:8a:c8:88:d7:c3:43:7c:99:13:65:12:03:05:98:e4:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5e76f47ec8c2a874728be63b857abda70441631251aab27bbb79456f1d1bccf2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:1f:4f:c9:17:b4:00:00:61:1f:2e:55:1c:
2a:c2:f5:26:e8:95:fe:3d:97:c0:9c:15:b1:65:b3:
7e:35:d1:14:dd:37:61:27:ce:be:1e:47:02:fa:86:
65:fa:9b:19:e8:0f:fa:05:bd:0f:cd:fe:4b:1f:53:
b3:ff:e0:a8:57:28:02:d9:f8:18:03:f8:b8:48:27:
09:62:e4:69:4e:2b:76:02:f5:86:77:95:cb:01:87:
6e:e0:9a:76:83:3f:43:f7:37:3c:52:b3:f8:4e:f5:
a6:0f:e6:ad:5b:45:38:3e:84:b8:ac:59:6d:bf:58:
d5:3d:b2:a9:de:3a:41:b8:d3:25:5c:d9:2b:e8:5b:
b1:54:58:53:9e:95:82:57:33:3a:33:36:e4:0a:19:
60:26:96:8b:3a:17:be:41:29:71:7f:4f:eb:e8:b1:
87:b7:9b:7a:6f:da:e3:60:64:3a:0c:48:49:1b:12:
0c:da:e9:25:4a:4a:08:c9:32:2c:c2:bd:10:55:1f:
10:64:db:67:03:fb:4e:06:9b:25:6a:4a:dd:7b:1a:
33:28:24:8a:74:3d:1c:2a:ca:5c:61:60:e6:84:1a:
4e:3a:d9:c2:20:d2:24:0c:76:a5:3e:1d:6b:38:e3:
11:f2:c5:2d:f2:4e:4a:28:e9:4b:d2:86:21:70:24:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:DE:C5:71:C0:6C:F4:DA:CE:5F:1D:1B:E9:FF:90:63:7B:4D:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4471b4d2-62e1-4876-baf7-b5951493a774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
1c:01:84:6d:14:1f:90:76:52:7a:3c:44:8a:1f:4e:fb:3d:a6:
39:30:d9:57:de:8b:c9:bf:10:78:11:23:d2:74:3c:32:a3:69:
15:cb:2a:07:5d:09:ed:e9:1a:0e:98:05:e7:21:ea:0d:9a:c4:
18:50:82:89:9f:3b:bd:71:13:0d:d2:6a:a2:9b:d3:4a:c6:ab:
b3:89:07:5c:fb:34:20:4b:20:8c:8e:79:a3:e7:d4:c4:95:58:
fe:af:60:7f:38:f6:0d:aa:a1:bd:99:62:3f:07:97:77:c4:91:
84:f9:1b:88:0c:05:fa:4f:7d:0e:81:83:8a:9a:ce:fb:1d:0a:
44:08:1d:08:6f:a8:55:4b:0b:64:5e:74:dc:47:4b:fa:c5:de:
5a:04:64:ae:d0:a3:46:62:e7:d5:69:75:f2:59:ce:c0:f1:0e:
78:a0:84:54:c1:4c:e0:fd:d8:18:3d:ca:2e:e5:30:5d:24:e0:
f4:53:d0:09:be:a5:9d:bb:4b:fd:f9:d7:cd:f5:7f:8a:e4:1b:
e3:67:ef:4c:bf:4b:9d:12:fc:8c:2d:b4:10:0c:5b:80:fb:5d:
ac:b7:c3:8a:e2:61:fa:e1:73:17:23:9d:9a:da:91:7a:e5:72:
02:55:b1:77:88:fe:64:0a:97:28:60:64:87:78:ef:50:58:b1:
16:1e:3a:41
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWqdPisiI18NDfJkTZRIDBZjktDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDVlNzZmNDdlYzhjMmE4NzQ3MjhiZTYzYjg1N2FiZGE3MDQ0MTYzMTI1MWFh
YjI3YmJiNzk0NTZmMWQxYmNjZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZrH0/JF7QAAGEfLlUcKsL1JuiV/j2XwJwVsWWzfjXRFN03YSfOvh5HAvqG
ZfqbGegP+gW9D83+Sx9Ts//gqFcoAtn4GAP4uEgnCWLkaU4rdgL1hneVywGHbuCa
doM/Q/c3PFKz+E71pg/mrVtFOD6EuKxZbb9Y1T2yqd46QbjTJVzZK+hbsVRYU56V
glczOjM25AoZYCaWizoXvkEpcX9P6+ixh7ebem/a42BkOgxISRsSDNrpJUpKCMky
LMK9EFUfEGTbZwP7TgabJWpK3XsaMygkinQ9HCrKXGFg5oQaTjrZwiDSJAx2pT4d
azjjEfLFLfJOSijpS9KGIXAk4AMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTmpN7F
ccBs9NrOXx0b6f+QY3tNUTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDQ3MWI0ZDItNjJlMS00ODc2LWJhZjctYjU5NTE0OTNhNzc0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DVg
wDANBgkqhkiG9w0BAQsFAAOCAQEAHAGEbRQfkHZSejxEih9O+z2mOTDZV96Lyb8Q
eBEj0nQ8MqNpFcsqB10J7ekaDpgF5yHqDZrEGFCCiZ87vXETDdJqopvTSsars4kH
XPs0IEsgjI55o+fUxJVY/q9gfzj2DaqhvZliPweXd8SRhPkbiAwF+k99DoGDiprO
+x0KRAgdCG+oVUsLZF503EdL+sXeWgRkrtCjRmLn1Wl18lnOwPEOeKCEVMFM4P3Y
GD3KLuUwXSTg9FPQCb6lnbtL/fnXzfV/iuQb42fvTL9LnRL8jC20EAxbgPtdrLfD
iuJh+uFzFyOdmtqReuVyAlWxd4j+ZAqXKGBkh3jvUFixFh46QQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:40 2025 by rpki-client