Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
File: 5b65b415-a397-41d3-99dc-207c8689d0ee.roa (raw, json)
Hash identifier: 3AtYYOXsYxMcdVBPPm1rNeiuGS6NQlddu1T1HKydz80=
Subject key identifier: 7E:53:94:05:3B:AF:E4:9A:B1:DC:C3:83:09:4A:57:00:BC:BB:6A:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A5FF358ABD40696E62DC032AE3FEEFECFF80467
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5f:f3:58:ab:d4:06:96:e6:2d:c0:32:ae:3f:ee:fe:cf:f8:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=eaee473f7a8f8628fba1e65b00053ce4fc2e90c52773094afbbba6d7b7389895, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:a4:03:df:aa:08:72:e0:e6:27:51:38:6d:
07:22:27:c3:33:f7:7e:59:ca:01:f6:2d:51:71:fd:
e8:37:5a:c5:b8:fe:27:2b:8a:e3:83:f6:b4:ef:ca:
cb:ee:52:1e:24:1a:ea:9c:95:35:5b:c2:ea:fb:22:
d6:92:6b:00:ee:66:fa:75:46:48:f2:a0:f6:a8:fb:
3b:c1:c4:0e:b0:f9:af:21:59:83:31:f5:77:9e:e9:
aa:ec:cd:f7:c0:3c:35:b4:a4:2e:67:3a:16:f8:5d:
d0:96:f3:54:23:cd:78:5e:01:34:50:f0:88:b1:80:
cd:a1:60:ed:08:cb:d5:4f:7a:53:ef:26:05:17:a1:
d6:bf:22:18:9d:a1:63:07:bc:d5:c5:84:97:87:5b:
02:64:0d:51:d1:a7:b0:b3:0d:a7:b0:4b:5e:0f:de:
24:f5:87:50:16:2b:e7:34:4b:de:45:ae:ee:a1:1d:
8c:a5:c2:b0:85:23:54:a7:69:f3:b8:f3:9e:8f:1f:
80:98:15:98:1b:8d:0c:21:69:22:d5:92:ac:f4:b9:
13:b3:cd:09:9a:5c:29:1d:89:dd:bb:53:ee:20:33:
4e:ff:bb:c0:bd:91:50:21:aa:96:5d:27:43:d2:a9:
cc:62:e5:7f:16:35:c9:9b:f3:a9:04:de:35:38:53:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:94:05:3B:AF:E4:9A:B1:DC:C3:83:09:4A:57:00:BC:BB:6A:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/40
Signature Algorithm: sha256WithRSAEncryption
38:04:e6:16:f0:71:c0:f6:a4:d0:46:33:af:d2:39:3c:80:1f:
76:5c:80:3c:3d:40:28:8d:d9:54:db:f8:5d:d7:e5:c4:fb:7a:
cc:1b:f1:b2:cc:42:f5:15:cd:43:86:e0:11:34:67:f0:87:01:
61:b0:99:47:03:db:3e:86:24:eb:92:fa:00:ec:65:5e:e0:f1:
91:26:a9:37:39:af:30:80:ff:66:03:5f:b7:5e:45:ff:da:41:
cd:e7:d8:24:84:25:15:2a:38:57:1b:36:d4:e1:64:9d:e4:88:
da:5c:38:88:f1:09:b7:63:de:59:c0:f6:6d:d2:73:ec:06:e9:
ca:17:cd:79:14:80:ec:64:62:be:68:95:e6:50:be:90:f2:ba:
11:c8:ac:d1:7c:92:f4:a4:cc:32:cf:e0:39:09:a1:1e:6d:df:
8f:8b:68:dc:d3:bc:ce:e4:ce:63:fb:af:ec:3a:03:8f:98:0d:
3a:ce:5b:b8:95:15:d3:46:04:b5:39:4e:7c:7f:7b:55:d2:71:
1c:66:97:64:00:5e:d5:ff:5e:8d:f6:ae:20:ab:63:b4:32:4f:
ee:ff:a8:3d:2c:c7:0d:37:84:12:89:7e:37:6f:74:c3:68:fc:
9c:6e:57:96:91:f0:07:20:68:a6:fe:a9:28:e6:38:05:5e:23:
04:97:90:a3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWl/zWKvUBpbmLcAyrj/u/s/4BGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGVhZWU0NzNmN2E4Zjg2MjhmYmExZTY1YjAwMDUzY2U0ZmMyZTkwYzUyNzcz
MDk0YWZiYmJhNmQ3YjczODk4OTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALlEpAPfqghy4OYnUThtByInwzP3flnKAfYtUXH96Ddaxbj+JyuK44P2tO/K
y+5SHiQa6pyVNVvC6vsi1pJrAO5m+nVGSPKg9qj7O8HEDrD5ryFZgzH1d57pquzN
98A8NbSkLmc6Fvhd0JbzVCPNeF4BNFDwiLGAzaFg7QjL1U96U+8mBReh1r8iGJ2h
Ywe81cWEl4dbAmQNUdGnsLMNp7BLXg/eJPWHUBYr5zRL3kWu7qEdjKXCsIUjVKdp
87jzno8fgJgVmBuNDCFpItWSrPS5E7PNCZpcKR2J3btT7iAzTv+7wL2RUCGqll0n
Q9KpzGLlfxY1yZvzqQTeNThTlv0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR+U5QF
O6/kmrHcw4MJSlcAvLtqyTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWI2NWI0MTUtYTM5Ny00MWQzLTk5ZGMtMjA3Yzg2ODlkMGVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HZg
MA0GCSqGSIb3DQEBCwUAA4IBAQA4BOYW8HHA9qTQRjOv0jk8gB92XIA8PUAojdlU
2/hd1+XE+3rMG/GyzEL1Fc1DhuARNGfwhwFhsJlHA9s+hiTrkvoA7GVe4PGRJqk3
Oa8wgP9mA1+3XkX/2kHN59gkhCUVKjhXGzbU4WSd5IjaXDiI8Qm3Y95ZwPZt0nPs
BunKF815FIDsZGK+aJXmUL6Q8roRyKzRfJL0pMwyz+A5CaEebd+Pi2jc07zO5M5j
+6/sOgOPmA06zlu4lRXTRgS1OU58f3tV0nEcZpdkAF7V/16N9q4gq2O0Mk/u/6g9
LMcNN4QSiX43b3TDaPycbleWkfAHIGim/qko5jgFXiMEl5Cj
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:44 2025 by rpki-client