Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
File: 55ba2d71-c4db-41f1-a648-b39b354abfa6.roa (raw, json)
Hash identifier: J16aB4izd5rvJCvACT6sGPSO7mfqKieCNsVt0kHh75E=
Subject key identifier: FB:68:A4:FA:FE:3E:B5:49:A0:06:9F:D0:03:3C:93:D9:3B:B9:34:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FC9068828486C9551AC9CD447B79DFED92583CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c9:06:88:28:48:6c:95:51:ac:9c:d4:47:b7:9d:fe:d9:25:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=5f6b586089d95989d822aed7655bde3f6fdcd84c2f8206581e7124cb66182359, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:a4:2c:b9:84:74:78:d5:46:8c:f6:88:d2:
96:b3:a1:f0:bf:56:1a:31:60:52:f7:c1:96:8d:75:
69:ee:db:a5:2d:cb:bd:c2:b8:2f:e4:64:20:47:88:
ef:9b:d2:40:2d:2f:4e:d5:fa:ce:c1:57:b4:0e:1e:
a9:5f:2d:9a:14:a0:60:7e:35:ea:d8:1d:2d:83:a4:
49:7a:de:0d:21:90:8c:e8:bc:b7:c6:14:98:b0:26:
1e:f0:01:5d:0b:5f:55:fd:b0:d5:19:02:42:59:59:
f1:e7:fa:fd:2b:ae:57:98:a5:3d:de:ee:25:ec:b2:
e4:71:62:6f:00:dd:a1:3c:85:0c:61:e2:e4:9c:6c:
63:78:c9:ed:26:fc:79:5e:19:8d:6a:3b:8a:8c:f1:
bd:fe:6b:2f:42:1f:ed:9e:fe:0e:2e:23:13:d8:74:
f2:f3:9f:fe:b9:e0:45:e1:73:74:05:aa:03:4a:f7:
0e:b0:0f:09:23:78:c3:9f:0c:d1:ae:db:1d:60:12:
e7:7b:bc:8d:42:d9:c4:8b:bb:c6:ed:85:41:83:ed:
0a:21:01:c0:03:63:38:ce:17:c5:d8:99:2e:69:3e:
a3:fa:c3:bc:ce:a8:f0:d9:bb:a2:c2:21:8f:d7:f3:
5c:8d:d9:19:19:d6:4a:5f:c6:66:f8:44:1c:19:e0:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:A4:FA:FE:3E:B5:49:A0:06:9F:D0:03:3C:93:D9:3B:B9:34:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:69:57:a7:72:32:88:bc:73:3a:46:81:93:c2:f8:0a:73:fe:
8c:1a:f2:a8:70:69:0f:a5:e5:2b:d7:fb:45:22:24:5b:af:9a:
c8:b5:4c:a5:cf:15:c1:ff:dd:e5:52:be:87:ba:24:c3:b3:3b:
57:c8:c7:9f:b2:df:9b:6d:0c:9c:f6:fd:b6:b2:77:1c:60:5e:
4a:b7:9d:ca:5a:92:cf:c8:f4:e5:60:e6:68:7d:91:38:2e:18:
4c:f9:28:91:56:d3:14:c2:4b:50:49:c7:41:f8:83:18:c9:c9:
bd:01:71:23:50:78:d4:9c:de:16:a7:14:d8:0c:9b:62:e9:08:
c7:ea:e6:6d:c9:ea:1a:f4:bc:08:3c:df:4f:6d:53:13:fb:91:
e4:65:f0:f7:bd:1f:b3:6a:0a:e9:11:13:57:3f:3b:7d:fa:f9:
43:04:f3:c3:99:bb:3b:9b:77:f1:69:5a:e2:22:64:43:7c:70:
ff:fd:72:68:0e:5e:8b:35:de:b3:14:ef:cb:73:24:3e:45:f6:
de:60:c3:b7:fa:f7:67:da:3f:23:0f:e5:4a:56:33:d7:68:00:
70:6a:29:e3:57:e9:e8:99:e0:bb:1d:dd:75:c8:cb:6b:9a:36:
e6:01:41:99:05:9a:ca:8f:63:b4:c1:2a:55:a2:09:52:1f:d4:
11:46:4d:08
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUf8kGiChIbJVRrJzUR7ed/tklg8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDYwMDAwMDBaFw0yNTAyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDVmNmI1ODYwODlkOTU5ODlkODIyYWVkNzY1NWJkZTNmNmZkY2Q4NGMyZjgy
MDY1ODFlNzEyNGNiNjYxODIzNTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUcpCy5hHR41UaM9ojSlrOh8L9WGjFgUvfBlo11ae7bpS3LvcK4L+RkIEeI
75vSQC0vTtX6zsFXtA4eqV8tmhSgYH416tgdLYOkSXreDSGQjOi8t8YUmLAmHvAB
XQtfVf2w1RkCQllZ8ef6/SuuV5ilPd7uJeyy5HFibwDdoTyFDGHi5JxsY3jJ7Sb8
eV4ZjWo7iozxvf5rL0If7Z7+Di4jE9h08vOf/rngReFzdAWqA0r3DrAPCSN4w58M
0a7bHWAS53u8jULZxIu7xu2FQYPtCiEBwANjOM4XxdiZLmk+o/rDvM6o8Nm7osIh
j9fzXI3ZGRnWSl/GZvhEHBngzv8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT7aKT6
/j61SaAGn9ADPJPZO7k0zDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTViYTJkNzEtYzRkYi00MWYxLWE2NDgtYjM5YjM1NGFiZmE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FiA
MA0GCSqGSIb3DQEBCwUAA4IBAQBKaVencjKIvHM6RoGTwvgKc/6MGvKocGkPpeUr
1/tFIiRbr5rItUylzxXB/93lUr6HuiTDsztXyMefst+bbQyc9v22snccYF5Kt53K
WpLPyPTlYOZofZE4LhhM+SiRVtMUwktQScdB+IMYycm9AXEjUHjUnN4WpxTYDJti
6QjH6uZtyeoa9LwIPN9PbVMT+5HkZfD3vR+zagrpERNXPzt9+vlDBPPDmbs7m3fx
aVriImRDfHD//XJoDl6LNd6zFO/LcyQ+RfbeYMO3+vdn2j8jD+VKVjPXaABwainj
V+nomeC7Hd11yMtrmjbmAUGZBZrKj2O0wSpVoglSH9QRRk0I
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:03 2025 by rpki-client