Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
File: 59e99882-7041-4e7e-9291-f73c065a106e.roa (raw, json)
Hash identifier: QlAooHr0HDAHuFiSfXSVoSR3E3IvWMEcOji8iV7+NXw=
Subject key identifier: 21:94:18:C4:F9:A5:FC:4A:3A:B7:D1:74:D2:0E:D9:DC:88:B3:32:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 489E89F7143441AF2C32EA9288EC7D254B91D819
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d027::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9e:89:f7:14:34:41:af:2c:32:ea:92:88:ec:7d:25:4b:91:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=01c1b7053595a26eaddf83077e0bd8f7c7671436d2895b1e7415a1ae13015713, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:53:92:aa:9b:be:fc:8a:9b:16:43:f3:34:
23:64:b4:8b:9c:90:3b:cb:2c:35:00:85:a9:1f:ff:
ca:c5:f6:cf:1f:58:20:c1:d8:fe:65:29:ee:55:da:
13:f4:f2:b0:35:42:e8:bf:1e:54:1c:aa:b4:55:03:
65:38:22:ac:70:3f:a4:c9:88:ce:21:63:14:c3:6f:
b2:19:83:cf:c1:f4:ea:0f:86:ad:6f:5b:e9:16:2e:
93:c9:65:3f:e4:a5:8c:5d:27:23:63:db:8f:cf:46:
38:8b:6d:d3:04:36:63:a3:3f:e6:fe:2a:5f:bd:21:
c9:92:c3:c1:ec:87:9f:20:2b:c3:89:c9:b7:f6:07:
54:1b:8a:91:40:f9:74:84:10:4d:c8:9e:57:d9:57:
06:7e:fc:78:ce:3c:cd:8b:7c:3b:3e:ff:41:35:24:
0f:63:ed:05:16:d5:ff:0a:55:76:a4:7f:86:7a:1c:
ad:91:5a:29:ae:a3:5b:c6:8a:a1:09:bb:a3:11:08:
d2:a2:27:54:a6:86:67:e1:4e:b4:09:b4:dd:d4:74:
3e:d4:08:0d:1a:b5:52:ef:fc:80:05:2a:5c:75:65:
93:14:25:68:eb:b8:9a:0f:90:9e:e0:45:ca:58:65:
af:76:b9:5e:25:3e:37:eb:d7:ac:c5:7b:d8:e0:2f:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:18:C4:F9:A5:FC:4A:3A:B7:D1:74:D2:0E:D9:DC:88:B3:32:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d027::/37
Signature Algorithm: sha256WithRSAEncryption
88:52:3e:24:83:9d:4e:44:20:97:60:18:25:41:6f:ae:17:5a:
88:65:9e:36:33:ec:cf:24:7e:2e:bf:69:23:22:9b:75:52:84:
13:be:a4:68:2d:39:e6:30:08:69:0f:53:75:82:07:77:d2:8d:
e5:0b:82:bd:65:26:6f:23:88:85:ca:7a:e6:8c:b7:13:f4:33:
f6:7e:dd:c0:d7:68:ec:ca:76:85:cd:b1:4a:f4:33:44:85:94:
b2:78:e6:18:29:71:e2:8a:5e:72:39:f7:e1:74:64:99:13:9c:
28:69:28:96:93:69:62:e4:a5:5c:7f:96:06:c8:1c:14:01:8f:
4a:e8:1e:b6:32:83:9d:1d:02:7b:1e:c9:b8:42:9a:91:c7:d7:
36:6d:86:88:19:96:f3:4f:cb:f3:7b:58:eb:a9:8d:af:65:1a:
e9:fd:35:2c:59:33:4c:f7:8a:4d:34:00:06:2d:84:18:03:51:
f7:9a:de:fc:65:d2:17:d8:17:7c:59:df:27:06:bd:90:8c:a2:
c0:5c:c7:f0:51:0c:66:fa:0f:c2:57:b1:2f:a6:bf:46:f8:c9:
f0:41:49:fa:a1:fe:e6:25:58:81:bf:dd:43:38:de:4b:86:2f:
6a:7e:aa:53:c8:76:32:86:6b:a0:0c:79:cc:27:31:0b:92:ab:
70:e4:68:c1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSJ6J9xQ0Qa8sMuqSiOx9JUuR2BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDAxYzFiNzA1MzU5NWEyNmVhZGRmODMwNzdlMGJkOGY3Yzc2NzE0MzZkMjg5
NWIxZTc0MTVhMWFlMTMwMTU3MTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWdU5Kqm778ipsWQ/M0I2S0i5yQO8ssNQCFqR//ysX2zx9YIMHY/mUp7lXa
E/TysDVC6L8eVByqtFUDZTgirHA/pMmIziFjFMNvshmDz8H06g+GrW9b6RYuk8ll
P+SljF0nI2Pbj89GOItt0wQ2Y6M/5v4qX70hyZLDweyHnyArw4nJt/YHVBuKkUD5
dIQQTcieV9lXBn78eM48zYt8Oz7/QTUkD2PtBRbV/wpVdqR/hnocrZFaKa6jW8aK
oQm7oxEI0qInVKaGZ+FOtAm03dR0PtQIDRq1Uu/8gAUqXHVlkxQlaOu4mg+QnuBF
ylhlr3a5XiU+N+vXrMV72OAvbzECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhlBjE
+aX8Sjq30XTSDtnciLMykDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTllOTk4ODItNzA0MS00ZTdlLTkyOTEtZjczYzA2NWExMDZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0CcA
MA0GCSqGSIb3DQEBCwUAA4IBAQCIUj4kg51ORCCXYBglQW+uF1qIZZ42M+zPJH4u
v2kjIpt1UoQTvqRoLTnmMAhpD1N1ggd30o3lC4K9ZSZvI4iFynrmjLcT9DP2ft3A
12jsynaFzbFK9DNEhZSyeOYYKXHiil5yOffhdGSZE5woaSiWk2li5KVcf5YGyBwU
AY9K6B62MoOdHQJ7Hsm4QpqRx9c2bYaIGZbzT8vze1jrqY2vZRrp/TUsWTNM94pN
NAAGLYQYA1H3mt78ZdIX2Bd8Wd8nBr2QjKLAXMfwUQxm+g/CV7Evpr9G+MnwQUn6
of7mJViBv91DON5Lhi9qfqpTyHYyhmugDHnMJzELkqtw5GjB
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:44 2025 by rpki-client