Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
File: 50b60672-d484-48a0-9016-474bafea8912.roa (raw, json)
Hash identifier: A9XUEm6Ooo4bRhoie1rhO/5b2QKsOC8vSwVVONOHm1g=
Subject key identifier: 2C:06:4C:46:C3:2C:40:A1:FB:E6:E1:61:1C:02:E4:B7:A9:D2:B8:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F8EB96F322E881547EFBE02A8EF7B4EC0A6E4FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8e:b9:6f:32:2e:88:15:47:ef:be:02:a8:ef:7b:4e:c0:a6:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=75d6a6e93bd4318bc11a6cc349c8f476573c88d89da7b6fd46ce97bfe103dd70, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:8c:3b:7d:a9:b2:63:12:f4:a8:5a:d4:38:
84:ac:72:7f:2d:01:9b:15:56:65:1e:2b:85:f6:73:
fd:74:f9:fa:ee:7d:9b:64:7f:34:3a:5d:4f:39:d4:
c6:7a:90:26:94:87:8a:1d:91:a6:2e:70:76:68:f2:
ac:72:61:78:c8:8c:23:32:d4:fa:a4:7f:44:4e:3d:
2d:3a:dc:1d:ad:64:ce:2a:68:90:25:5e:13:43:d0:
fc:66:c8:c4:b9:e8:d1:64:a6:e5:3b:da:80:f8:3e:
c4:2f:e9:06:1e:1c:d1:98:e1:e3:05:49:58:a3:21:
bf:d8:c8:80:34:01:1e:4a:e8:c5:d3:56:aa:9a:2d:
17:1c:d1:47:aa:1c:ca:fb:4c:e6:80:4e:6f:b1:ae:
23:91:62:b3:dc:3a:48:52:3c:c5:7c:20:09:99:93:
7c:b6:b7:00:7a:8a:59:7d:84:97:c0:2e:de:9d:1b:
83:26:37:f2:f9:e0:52:c9:38:79:5b:a8:98:2d:a3:
34:f3:93:fd:26:78:8d:26:41:30:3a:b8:ca:f9:9a:
82:3b:ae:ef:3f:96:67:50:ad:80:15:b1:09:be:58:
5b:34:5b:41:56:b7:a5:f3:7d:a8:36:76:45:b6:e6:
bc:d2:50:72:5c:94:7c:ad:dc:bd:e3:4b:df:e8:6a:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:4C:46:C3:2C:40:A1:FB:E6:E1:61:1C:02:E4:B7:A9:D2:B8:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016::/36
Signature Algorithm: sha256WithRSAEncryption
14:c6:f7:04:bd:0f:42:fa:f1:77:99:a2:b2:8b:d1:f5:91:fd:
9f:f5:b2:d6:e8:93:c8:8b:e9:0b:05:ea:f7:67:7c:99:57:be:
92:2a:9b:bf:2f:4f:92:03:43:9e:a2:22:37:7c:fe:27:55:c5:
aa:33:1e:e2:dd:8f:ba:42:76:fa:1f:2d:a9:ed:5b:e0:f7:a1:
fb:8e:f2:ad:fe:d2:83:79:de:bc:6e:a5:03:cf:b3:9c:68:76:
8e:1e:2e:c3:1a:07:5a:1a:dd:3c:79:67:01:cc:7d:7f:05:97:
55:93:ab:fa:fc:d0:47:6d:37:97:26:53:69:47:7b:55:80:d6:
17:94:46:d6:37:4a:23:e4:4f:db:79:44:08:8c:0c:5c:27:ba:
a9:82:10:d2:b5:28:80:79:03:93:56:6e:f4:50:fb:ee:6b:f2:
42:4b:91:76:88:4f:49:dc:ff:1c:2a:e2:ee:e6:de:a7:0f:1e:
2a:23:52:44:66:41:10:32:ca:82:2a:d0:90:1f:48:51:ce:cf:
cc:b5:c5:c0:45:b8:d7:bd:3b:c0:8b:10:fd:2f:45:77:3f:46:
1a:d2:a1:37:ee:76:90:04:32:f7:1c:ce:e2:ba:5a:84:c1:3c:
36:30:39:2c:5c:36:04:1f:77:ab:b4:3b:1b:3b:8b:c2:b7:f9:
78:b7:69:85
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUb465bzIuiBVH774CqO97TsCm5P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDc1ZDZhNmU5M2JkNDMxOGJjMTFhNmNjMzQ5YzhmNDc2NTczYzg4ZDg5ZGE3
YjZmZDQ2Y2U5N2JmZTEwM2RkNzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdxjDt9qbJjEvSoWtQ4hKxyfy0BmxVWZR4rhfZz/XT5+u59m2R/NDpdTznU
xnqQJpSHih2Rpi5wdmjyrHJheMiMIzLU+qR/RE49LTrcHa1kzipokCVeE0PQ/GbI
xLno0WSm5TvagPg+xC/pBh4c0Zjh4wVJWKMhv9jIgDQBHkroxdNWqpotFxzRR6oc
yvtM5oBOb7GuI5Fis9w6SFI8xXwgCZmTfLa3AHqKWX2El8Au3p0bgyY38vngUsk4
eVuomC2jNPOT/SZ4jSZBMDq4yvmagjuu7z+WZ1CtgBWxCb5YWzRbQVa3pfN9qDZ2
RbbmvNJQclyUfK3cveNL3+hq5U0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQsBkxG
wyxAofvm4WEcAuS3qdK4QDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTBiNjA2NzItZDQ4NC00OGEwLTkwMTYtNDc0YmFmZWE4OTEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BYA
MA0GCSqGSIb3DQEBCwUAA4IBAQAUxvcEvQ9C+vF3maKyi9H1kf2f9bLW6JPIi+kL
Ber3Z3yZV76SKpu/L0+SA0OeoiI3fP4nVcWqMx7i3Y+6Qnb6Hy2p7Vvg96H7jvKt
/tKDed68bqUDz7OcaHaOHi7DGgdaGt08eWcBzH1/BZdVk6v6/NBHbTeXJlNpR3tV
gNYXlEbWN0oj5E/beUQIjAxcJ7qpghDStSiAeQOTVm70UPvua/JCS5F2iE9J3P8c
KuLu5t6nDx4qI1JEZkEQMsqCKtCQH0hRzs/MtcXARbjXvTvAixD9L0V3P0Ya0qE3
7naQBDL3HM7iulqEwTw2MDksXDYEH3ertDsbO4vCt/l4t2mF
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:36 2025 by rpki-client