Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
File: 4aa6172c-f263-4645-8d7a-40a15aee233f.roa (raw, json)
Hash identifier: cc1uH62hvKb3mgz9uO/et/mWGaeg/vYI7amosG/8ckg=
Subject key identifier: 32:90:19:D2:6A:4C:AF:AE:54:D4:9D:8F:B9:92:3F:F7:EF:76:1F:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 206324DDBA2294D3259AAEC45763E06AC4CAE3DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:63:24:dd:ba:22:94:d3:25:9a:ae:c4:57:63:e0:6a:c4:ca:e3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=d1fcce79c74bdc0f2a106829f18416904b2e2768dfdc409e7ec7e746bcfe4d21, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:0f:87:80:0f:7e:e3:a8:9b:5a:3b:b3:22:
33:ff:8c:44:d3:39:5c:7e:ad:e1:72:d2:45:e0:43:
5a:1e:5f:89:f4:fe:bd:a5:6e:96:46:48:b9:21:f7:
a3:d7:76:3e:ee:64:28:3e:7b:dc:9e:37:7b:cc:26:
b7:b9:5e:4c:20:41:ef:2f:fa:c8:c9:14:f2:6c:83:
af:67:0f:cd:f1:cf:78:1c:97:0b:fd:af:8c:ad:d2:
41:d0:a1:90:26:94:6c:e6:20:fa:46:59:93:e0:61:
03:3a:7b:fc:1e:41:79:81:59:b1:1b:ac:7e:17:07:
28:8c:fb:7f:0c:b1:59:a7:bb:0b:98:32:b3:e4:d1:
d4:79:7a:a7:d0:81:54:90:b2:80:22:ab:5d:44:02:
4a:8c:ea:52:89:4e:a7:08:c8:d5:79:62:ea:2b:f8:
d5:89:4a:1c:c7:d5:86:bd:e1:a9:95:86:cf:73:b5:
b0:86:50:26:34:19:94:ed:20:d4:b9:cd:35:6b:39:
05:88:17:ad:94:03:10:5f:39:4a:d3:ae:c0:92:ba:
78:be:61:fe:6e:84:03:b0:6f:20:72:a9:05:df:38:
44:b2:f1:e3:82:b3:03:6d:d3:79:9e:78:28:fe:4c:
ce:70:aa:c0:e2:84:f6:3f:57:ca:c9:70:b8:7a:b4:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:19:D2:6A:4C:AF:AE:54:D4:9D:8F:B9:92:3F:F7:EF:76:1F:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:8000::/40
Signature Algorithm: sha256WithRSAEncryption
32:8e:28:4d:fe:63:69:30:1f:ef:4c:f6:32:9a:4a:35:5b:8e:
bb:dc:3b:41:2c:64:95:31:dc:54:c4:8a:96:dd:15:4a:78:16:
6e:49:e7:d7:44:1c:18:b4:a9:a1:48:98:ab:3e:b6:dc:7c:8a:
17:d3:29:d2:4e:54:cb:1f:20:ce:d6:e6:c3:10:5c:02:1a:e7:
5c:fd:fe:9a:f1:90:27:57:15:1a:fc:83:1d:43:e8:6c:c9:de:
a6:93:e7:c4:b2:33:79:bf:53:dc:58:ae:13:fb:21:45:e2:cd:
fc:f0:f0:a6:5f:f2:f5:1c:29:77:2d:5e:2f:49:cd:64:be:dc:
da:4d:0c:1e:c6:52:42:27:64:c1:56:de:8d:14:b3:8e:10:0b:
f2:38:44:cf:67:db:78:86:83:45:b6:43:ae:89:63:87:ca:dc:
a6:4c:a3:4a:de:be:42:db:f5:f2:d5:80:71:2b:b6:31:01:3e:
5e:0a:ee:72:42:1a:48:52:e7:5e:4b:ad:b6:87:c1:df:68:0d:
ff:25:15:7a:41:d2:aa:43:b3:fb:03:99:9b:96:e3:a8:26:4a:
df:af:44:af:ba:d0:0f:cc:61:65:2d:64:60:f6:75:8d:e3:01:
c6:28:f4:6a:ef:58:ac:39:3d:f7:c1:4b:eb:d9:2c:2f:ea:bf:
41:39:9c:23
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIGMk3boilNMlmq7EV2PgasTK490wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTAwMDAwMDBaFw0yNTAyMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQxZmNjZTc5Yzc0YmRjMGYyYTEwNjgyOWYxODQxNjkwNGIyZTI3NjhkZmRj
NDA5ZTdlYzdlNzQ2YmNmZTRkMjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALaUD4eAD37jqJtaO7MiM/+MRNM5XH6t4XLSReBDWh5fifT+vaVulkZIuSH3
o9d2Pu5kKD573J43e8wmt7leTCBB7y/6yMkU8myDr2cPzfHPeByXC/2vjK3SQdCh
kCaUbOYg+kZZk+BhAzp7/B5BeYFZsRusfhcHKIz7fwyxWae7C5gys+TR1Hl6p9CB
VJCygCKrXUQCSozqUolOpwjI1Xli6iv41YlKHMfVhr3hqZWGz3O1sIZQJjQZlO0g
1LnNNWs5BYgXrZQDEF85StOuwJK6eL5h/m6EA7BvIHKpBd84RLLx44KzA23TeZ54
KP5MznCqwOKE9j9XyslwuHq0WAkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQykBnS
akyvrlTUnY+5kj/373Yf6TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGFhNjE3MmMtZjI2My00NjQ1LThkN2EtNDBhMTVhZWUyMzNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HGA
MA0GCSqGSIb3DQEBCwUAA4IBAQAyjihN/mNpMB/vTPYymko1W4673DtBLGSVMdxU
xIqW3RVKeBZuSefXRBwYtKmhSJirPrbcfIoX0ynSTlTLHyDO1ubDEFwCGudc/f6a
8ZAnVxUa/IMdQ+hsyd6mk+fEsjN5v1PcWK4T+yFF4s388PCmX/L1HCl3LV4vSc1k
vtzaTQwexlJCJ2TBVt6NFLOOEAvyOETPZ9t4hoNFtkOuiWOHytymTKNK3r5C2/Xy
1YBxK7YxAT5eCu5yQhpIUudeS622h8HfaA3/JRV6QdKqQ7P7A5mbluOoJkrfr0Sv
utAPzGFlLWRg9nWN4wHGKPRq71isOT33wUvr2Swv6r9BOZwj
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:27 2025 by rpki-client