Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
File: 543bc67d-08f9-4a99-bf5e-68100e034395.roa (raw, json)
Hash identifier: 0+MomGhO08OvM3RXCZQDO9y0+rZfh8hyc12+uGFQ6TY=
Subject key identifier: FA:43:CD:A3:7B:F3:4C:E5:34:3C:60:04:CF:7D:B1:6A:69:E6:5D:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F51016A1ECF5D706D5ACDE9232617266323F843
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:51:01:6a:1e:cf:5d:70:6d:5a:cd:e9:23:26:17:26:63:23:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5255b7d51dd483c67ce76556a94a345779148fb17cf531a4b05d1a9c050632d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:58:c4:ec:5f:57:c8:d6:fc:0a:94:d8:2a:
9f:0b:53:9f:93:4a:5d:cd:79:7a:61:d1:a4:cd:43:
3e:d0:c4:43:c4:71:fc:63:30:23:67:be:ed:7b:da:
64:7d:1d:db:83:38:96:20:59:fa:f9:f7:e4:22:84:
9d:6c:00:5e:74:b2:5f:7a:7a:6b:4b:5f:84:22:4d:
a0:11:32:41:29:80:63:04:57:f7:1a:bf:fa:ed:0a:
f7:db:0d:be:72:34:28:7e:bf:0a:6f:90:62:c6:3c:
96:2c:6d:08:48:b0:15:53:60:05:f8:50:47:21:da:
bb:32:eb:e9:87:37:e7:7a:bb:31:b0:1a:bf:06:5f:
e4:f4:3d:bf:5a:97:cb:fe:e1:ea:3a:8e:ed:32:12:
03:5f:26:e1:30:c8:52:22:21:fc:53:d3:96:dc:51:
95:fe:59:21:56:04:20:19:d2:11:b8:e0:b8:70:51:
10:92:c9:4e:1a:c7:e9:92:07:e8:1c:7f:d2:bc:4c:
12:4a:71:b8:e9:e8:94:9a:60:0a:3b:1f:31:8f:80:
81:61:08:c6:1f:09:0f:93:d9:46:bd:e4:6e:7c:2c:
01:dc:d3:bf:2d:1b:38:8e:80:7e:74:6d:bc:7a:e3:
db:18:8a:27:bb:1c:fe:5a:48:86:30:a4:77:e5:02:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:CD:A3:7B:F3:4C:E5:34:3C:60:04:CF:7D:B1:6A:69:E6:5D:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4080::/48
Signature Algorithm: sha256WithRSAEncryption
24:6a:ba:b6:61:05:90:64:f3:87:8e:48:0b:7a:87:b7:12:c0:
29:57:ab:22:59:fa:ba:f9:4a:e9:11:73:79:9b:2c:fe:c9:0d:
67:51:84:27:86:2e:78:63:7d:8e:a8:a8:05:ee:b8:54:07:2c:
a6:4a:11:37:49:07:6a:09:60:7c:27:0a:54:19:97:37:3f:d7:
fa:95:6c:bf:9d:b6:9c:86:3f:75:e0:95:18:c1:c4:84:f8:a8:
db:72:a9:36:4e:b4:2c:64:d2:43:d7:f5:e0:06:f1:5c:56:3c:
4f:8a:94:e5:bf:a4:3d:a5:d8:cc:da:82:fe:c0:f0:97:b5:47:
ad:83:04:73:6e:ba:f2:4c:75:85:37:10:74:59:4b:2f:01:e8:
5b:ad:4b:d1:f9:d5:02:a6:88:86:a1:3b:fe:a0:23:32:23:f8:
18:1d:55:1c:00:e7:29:e9:4f:8c:e5:0c:f7:59:a1:43:19:a6:
46:a3:03:3a:a7:57:17:8b:a8:46:91:f1:14:8b:bf:80:aa:15:
fc:a0:bc:2b:9d:3b:42:34:a3:cd:b5:44:36:6c:64:65:1d:2a:
7a:5d:fd:a6:16:58:89:b8:f7:f0:2e:26:2a:c4:08:15:af:5d:
62:2f:c4:cd:e0:50:29:db:cc:07:d8:42:79:27:05:24:d0:69:
95:00:95:8f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUP1EBah7PXXBtWs3pIyYXJmMj+EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDUyNTViN2Q1MWRkNDgzYzY3Y2U3NjU1NmE5NGEzNDU3NzkxNDhmYjE3Y2Y1
MzFhNGIwNWQxYTljMDUwNjMyZDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDZWMTsX1fI1vwKlNgqnwtTn5NKXc15emHRpM1DPtDEQ8Rx/GMwI2e+7Xva
ZH0d24M4liBZ+vn35CKEnWwAXnSyX3p6a0tfhCJNoBEyQSmAYwRX9xq/+u0K99sN
vnI0KH6/Cm+QYsY8lixtCEiwFVNgBfhQRyHauzLr6Yc353q7MbAavwZf5PQ9v1qX
y/7h6jqO7TISA18m4TDIUiIh/FPTltxRlf5ZIVYEIBnSEbjguHBREJLJThrH6ZIH
6Bx/0rxMEkpxuOnolJpgCjsfMY+AgWEIxh8JD5PZRr3kbnwsAdzTvy0bOI6AfnRt
vHrj2xiKJ7sc/lpIhjCkd+UCXd0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT6Q82j
e/NM5TQ8YATPfbFqaeZdhjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQzYmM2N2QtMDhmOS00YTk5LWJmNWUtNjgxMDBlMDM0Mzk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJA
gDANBgkqhkiG9w0BAQsFAAOCAQEAJGq6tmEFkGTzh45IC3qHtxLAKVerIln6uvlK
6RFzeZss/skNZ1GEJ4YueGN9jqioBe64VAcspkoRN0kHaglgfCcKVBmXNz/X+pVs
v522nIY/deCVGMHEhPio23KpNk60LGTSQ9f14AbxXFY8T4qU5b+kPaXYzNqC/sDw
l7VHrYMEc2668kx1hTcQdFlLLwHoW61L0fnVAqaIhqE7/qAjMiP4GB1VHADnKelP
jOUM91mhQxmmRqMDOqdXF4uoRpHxFIu/gKoV/KC8K507QjSjzbVENmxkZR0qel39
phZYibj38C4mKsQIFa9dYi/EzeBQKdvMB9hCeScFJNBplQCVjw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:39 2025 by rpki-client