Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
File: 57c971db-5779-4af6-9c2f-2c7cd904e742.roa (raw, json)
Hash identifier: JUxyb+gUH5JDPVM4BZBWp5u3CLKBy6fVZaFIprf0gxs=
Subject key identifier: DF:15:51:A3:95:87:B3:EA:24:38:00:DD:2F:85:9C:A4:D4:BC:42:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45CDDC7EB943EAF7CF8E595C8A6322D62A0D2889
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:cd:dc:7e:b9:43:ea:f7:cf:8e:59:5c:8a:63:22:d6:2a:0d:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7e831a013542ed5b36b349b92ce2e28a852ce48750cd22849f79732ea4211e72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:90:ee:55:8a:11:9b:9d:51:98:87:bc:bf:
ae:12:06:00:a7:5f:40:da:26:34:71:ec:ee:82:aa:
1b:79:98:b5:29:8e:c9:98:d2:7e:e6:45:21:b2:85:
a0:d1:f0:8c:ab:49:84:56:0a:dd:62:91:aa:14:42:
b4:12:06:a5:a8:5a:6d:cc:d6:0c:f2:ad:59:29:07:
ef:da:83:62:cd:19:0c:1f:8c:27:ec:ff:58:9d:57:
77:bd:66:fa:19:f6:a8:18:a2:33:8f:c3:5e:9b:8e:
1b:5f:e9:44:7c:5f:f1:d9:ad:7a:66:ea:02:1b:47:
5f:de:9d:3e:45:fe:1d:99:2f:15:5e:5d:21:be:1d:
be:c0:50:d1:9f:d1:b1:eb:5e:c2:73:9e:59:ec:21:
1c:48:c8:0e:11:60:0d:84:f7:1c:83:11:97:cf:15:
9c:7a:46:34:cc:7b:18:90:e8:15:8d:22:6e:9f:0f:
6a:5c:d3:91:40:4f:bf:04:98:72:c3:5f:89:ea:dd:
a5:82:4a:e9:0f:d2:bf:57:b8:74:8b:ae:23:68:82:
a0:e1:91:96:a5:07:0c:50:77:fc:47:23:50:b1:1c:
55:19:1b:ab:b6:09:7a:a9:2f:1e:0d:ec:a0:e7:25:
68:76:77:87:5a:a4:e8:a5:e2:3e:9f:31:b7:34:24:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:51:A3:95:87:B3:EA:24:38:00:DD:2F:85:9C:A4:D4:BC:42:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:c000::/48
Signature Algorithm: sha256WithRSAEncryption
9d:36:67:9e:05:c5:43:13:6c:46:5f:3e:3b:fb:3c:b3:cc:80:
e0:09:da:96:da:ee:35:ac:97:1b:c0:22:1c:52:81:80:6d:dd:
1b:dc:c5:3b:b1:0e:d2:6d:7e:7d:57:b4:a4:df:20:58:d2:0f:
c5:a7:d3:07:b0:33:92:87:4e:7b:59:e8:83:b5:b2:01:e8:0e:
42:cb:f1:45:dd:b8:61:9e:61:1b:89:7d:ee:a7:10:a9:ed:03:
28:f4:7b:95:ae:29:e3:4e:ac:e7:df:38:e6:82:a3:26:36:42:
f4:61:9a:07:72:57:e8:d7:37:df:9a:72:44:16:93:a0:c1:99:
57:59:4d:da:87:01:64:b4:b1:3c:0e:2c:1e:b9:48:6f:fc:62:
af:6a:86:31:74:cd:8f:34:b6:59:64:93:5a:0a:19:d4:8c:ad:
9f:f2:bd:9f:00:9f:ab:5d:5b:38:23:41:6d:9d:b9:94:9d:4b:
7f:77:05:e3:02:4d:79:26:39:57:5c:53:a0:fb:cd:ab:25:85:
2e:71:c1:14:db:0a:9e:d2:8e:f3:1f:0a:0d:e0:f9:f9:30:b2:
4a:bb:7b:d1:3e:01:0a:3b:66:5f:db:d3:79:b1:ec:76:9f:f0:
2a:a6:e5:5c:fe:e3:67:cb:43:c2:b3:81:6e:26:ad:be:7e:d9:
23:73:99:ff
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIURc3cfrlD6vfPjllcimMi1ioNKIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDdlODMxYTAxMzU0MmVkNWIzNmIzNDliOTJjZTJlMjhhODUyY2U0ODc1MGNk
MjI4NDlmNzk3MzJlYTQyMTFlNzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMngkO5VihGbnVGYh7y/rhIGAKdfQNomNHHs7oKqG3mYtSmOyZjSfuZFIbKF
oNHwjKtJhFYK3WKRqhRCtBIGpahabczWDPKtWSkH79qDYs0ZDB+MJ+z/WJ1Xd71m
+hn2qBiiM4/DXpuOG1/pRHxf8dmtembqAhtHX96dPkX+HZkvFV5dIb4dvsBQ0Z/R
setewnOeWewhHEjIDhFgDYT3HIMRl88VnHpGNMx7GJDoFY0ibp8PalzTkUBPvwSY
csNfierdpYJK6Q/Sv1e4dIuuI2iCoOGRlqUHDFB3/EcjULEcVRkbq7YJeqkvHg3s
oOclaHZ3h1qk6KXiPp8xtzQkaO0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTfFVGj
lYez6iQ4AN0vhZyk1LxClzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTdjOTcxZGItNTc3OS00YWY2LTljMmYtMmM3Y2Q5MDRlNzQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HbA
ADANBgkqhkiG9w0BAQsFAAOCAQEAnTZnngXFQxNsRl8+O/s8s8yA4AnaltruNayX
G8AiHFKBgG3dG9zFO7EO0m1+fVe0pN8gWNIPxafTB7AzkodOe1nog7WyAegOQsvx
Rd24YZ5hG4l97qcQqe0DKPR7la4p406s59845oKjJjZC9GGaB3JX6Nc335pyRBaT
oMGZV1lN2ocBZLSxPA4sHrlIb/xir2qGMXTNjzS2WWSTWgoZ1Iytn/K9nwCfq11b
OCNBbZ25lJ1Lf3cF4wJNeSY5V1xToPvNqyWFLnHBFNsKntKO8x8KDeD5+TCySrt7
0T4BCjtmX9vTebHsdp/wKqblXP7jZ8tDwrOBbiatvn7ZI3OZ/w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:07 2025 by rpki-client