Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
File: 5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa (raw, json)
Hash identifier: kz4flz9QcKLW4lKu4ZTAUbA4BWH4X7X7mCPQ1FF7c50=
Subject key identifier: 27:97:C2:0B:2A:B9:BC:59:BB:D4:74:67:43:83:5E:7B:E7:7F:BA:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F159BF8DDF9EE34260F0F09AA8897C4DCA5B8DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:15:9b:f8:dd:f9:ee:34:26:0f:0f:09:aa:88:97:c4:dc:a5:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=45ac8b140c3ccb03c414c532ffff14cba761ce1e5c5eb8778b39f3fab2bbbf66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:7d:76:5d:d3:9c:01:7b:7a:a5:c8:78:39:
be:c3:ec:4b:29:59:95:f7:fe:00:6d:d5:2e:45:89:
c9:36:06:8f:47:25:f8:f4:a6:01:3d:6d:17:67:1e:
ac:6c:e0:40:f4:36:9f:5b:87:fa:3e:bb:42:6b:7d:
7c:f4:f9:2f:63:f6:dd:76:f9:e4:be:90:00:03:11:
4a:97:8a:2d:f2:43:46:cd:47:73:69:2f:b7:0a:b4:
35:c9:95:19:5c:17:c7:ee:24:15:d9:61:8b:61:19:
97:a6:a4:95:e8:04:bf:1e:d1:a9:8d:5a:b0:bf:eb:
9f:d4:6a:4c:49:aa:4e:f6:1f:7f:e3:64:9b:63:b3:
1d:18:55:22:f0:05:52:8f:a8:4a:ab:32:30:32:77:
f7:8f:05:04:e8:78:ff:6e:1d:27:1e:ea:f1:df:50:
0e:ca:25:a0:55:21:0a:6c:82:43:a7:72:35:28:4b:
26:4a:18:58:d4:7c:98:60:7e:77:7f:08:ef:a9:0f:
0e:2c:9e:32:45:3c:75:e4:b6:cc:9b:47:57:72:74:
f1:0c:89:34:93:ac:65:68:e3:27:93:5c:ce:20:56:
01:1e:a1:a0:70:10:e7:8f:12:6e:01:01:7d:67:90:
bd:9c:08:5a:75:10:15:c2:34:c4:cb:d9:06:a4:a8:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:97:C2:0B:2A:B9:BC:59:BB:D4:74:67:43:83:5E:7B:E7:7F:BA:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8000::/40
Signature Algorithm: sha256WithRSAEncryption
80:f2:f7:38:f7:f9:7e:49:ad:ed:0d:9b:7b:0f:6d:74:56:8b:
a2:04:a9:28:01:31:21:57:dc:e1:44:60:da:96:ca:87:a6:2f:
6f:3b:fc:c8:87:b4:b3:6a:59:09:8d:05:51:01:38:0c:3f:9d:
7e:20:22:db:ff:8e:b6:86:b2:07:89:d5:ac:d6:15:05:b1:02:
74:e3:ae:e8:da:27:42:71:71:2a:e9:09:41:81:8b:66:e8:51:
f3:d6:4e:39:a6:32:c4:dc:8f:a5:3e:4a:10:1d:12:24:76:f1:
cc:5c:ab:ac:5b:5d:76:fb:25:2d:46:6e:50:8a:18:f2:88:34:
b9:8e:ed:c8:e3:46:de:ff:9b:1e:54:48:f9:08:32:53:f1:7c:
7f:32:04:54:98:50:74:ae:11:3d:11:1d:3b:64:a9:e7:1b:51:
f2:93:75:57:47:b4:77:5c:2a:0a:09:81:4f:07:95:3e:23:5a:
52:9c:50:e9:4f:bd:83:31:66:51:04:e2:8c:9c:8e:5e:8f:40:
6b:12:a3:bf:01:1f:d2:47:6d:30:a4:af:32:b8:06:f4:cb:c9:
8a:a7:be:99:ff:2c:7e:18:2c:e9:6c:6a:d6:35:64:68:1f:aa:
09:55:86:46:ff:37:a4:2b:06:e9:e2:2d:24:24:cc:b6:c1:f1:
0b:d1:58:94
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDxWb+N357jQmDw8JqoiXxNyluN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTAwMDAwMDBaFw0yNTAyMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1YWM4YjE0MGMzY2NiMDNjNDE0YzUzMmZmZmYxNGNiYTc2MWNlMWU1YzVl
Yjg3NzhiMzlmM2ZhYjJiYmJmNjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJzfXZd05wBe3qlyHg5vsPsSylZlff+AG3VLkWJyTYGj0cl+PSmAT1tF2ce
rGzgQPQ2n1uH+j67Qmt9fPT5L2P23Xb55L6QAAMRSpeKLfJDRs1Hc2kvtwq0NcmV
GVwXx+4kFdlhi2EZl6aklegEvx7RqY1asL/rn9RqTEmqTvYff+Nkm2OzHRhVIvAF
Uo+oSqsyMDJ3948FBOh4/24dJx7q8d9QDsoloFUhCmyCQ6dyNShLJkoYWNR8mGB+
d38I76kPDiyeMkU8deS2zJtHV3J08QyJNJOsZWjjJ5NcziBWAR6hoHAQ548SbgEB
fWeQvZwIWnUQFcI0xMvZBqSo1+0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQnl8IL
Krm8WbvUdGdDg15753+6CjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWYzMDU0YjgtNTRlZS00YjhiLWFmYzgtNTMxZjI0ZDU5ZmE3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DSA
MA0GCSqGSIb3DQEBCwUAA4IBAQCA8vc49/l+Sa3tDZt7D210VouiBKkoATEhV9zh
RGDalsqHpi9vO/zIh7SzalkJjQVRATgMP51+ICLb/462hrIHidWs1hUFsQJ0467o
2idCcXEq6QlBgYtm6FHz1k45pjLE3I+lPkoQHRIkdvHMXKusW112+yUtRm5Qihjy
iDS5ju3I40be/5seVEj5CDJT8Xx/MgRUmFB0rhE9ER07ZKnnG1Hyk3VXR7R3XCoK
CYFPB5U+I1pSnFDpT72DMWZRBOKMnI5ej0BrEqO/AR/SR20wpK8yuAb0y8mKp76Z
/yx+GCzpbGrWNWRoH6oJVYZG/zekKwbp4i0kJMy2wfEL0ViU
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:47 2025 by rpki-client