Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
File: 6a2f7401-8559-4633-8579-cca77d6fa971.roa (raw, json)
Hash identifier: JLQqL4gRMVygt4yZgsY4DebDQLjge+eSQqKT/QbLfME=
Subject key identifier: 10:10:93:A4:D8:16:E0:BA:8A:2C:F7:2E:AD:23:3A:97:84:0A:68:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 615C0A1BCCF2ABC15887E677FFA931EC1D2A1F19
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:0a:1b:cc:f2:ab:c1:58:87:e6:77:ff:a9:31:ec:1d:2a:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=44ff3ccae0d5690a466f4d67ce7f3b77907d92e0332360614442cddb0a9efabc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:1a:b2:18:20:ca:ca:88:4c:f7:80:d4:e4:
31:26:e9:79:48:82:1a:d3:16:bb:af:33:c7:9f:3b:
f2:b5:13:a1:dc:fa:94:f3:65:38:f2:8f:15:a4:eb:
a8:52:d5:89:96:81:19:25:56:6a:28:2d:c3:58:32:
8d:e8:ea:f9:03:b5:a1:00:f4:09:0b:b1:f1:65:df:
7c:14:ca:9e:2f:24:cb:72:48:41:d8:25:44:8b:59:
63:6a:46:8d:f9:3a:8b:08:59:14:be:c4:e4:17:e5:
17:ff:43:da:e0:f2:16:9a:30:4b:46:73:39:4b:4d:
51:b4:f4:9a:4e:8d:23:36:9e:e7:bc:0a:d2:8b:4b:
b6:e2:d3:50:04:0e:98:99:dd:60:43:5e:cd:5c:31:
00:56:20:43:77:14:41:b5:4f:9c:70:48:25:34:8d:
ec:a1:8a:41:b7:3a:7d:9a:2e:e2:69:3a:de:8f:10:
c2:46:42:12:fe:04:a1:73:39:9a:8c:6a:2b:dd:e7:
d1:b4:fa:a9:fd:3a:20:0c:ed:24:8d:7e:77:7d:a0:
9a:73:ee:70:ce:82:a5:66:30:8c:26:76:74:ce:85:
48:70:41:70:c7:d6:87:04:96:9f:2b:7d:4f:7a:83:
7d:80:f5:1d:00:f4:0e:bc:e1:0b:2c:a1:82:33:ab:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:93:A4:D8:16:E0:BA:8A:2C:F7:2E:AD:23:3A:97:84:0A:68:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/36
Signature Algorithm: sha256WithRSAEncryption
9f:5d:43:44:1c:5a:5d:6e:02:43:0d:c2:68:9d:1e:07:92:d5:
c1:ca:08:80:4b:71:3e:c8:63:a2:c6:64:f1:39:bf:e5:5b:f8:
82:8b:5b:ef:9d:d2:e4:7e:09:90:7e:8b:f7:fa:90:34:73:92:
0c:dc:70:a1:8a:8f:03:60:ee:b3:9c:af:9d:bc:89:50:9f:fa:
c0:65:9c:15:18:a5:9e:0d:2e:43:91:c8:ed:b9:1f:28:32:87:
45:25:13:e5:99:98:f6:8c:d0:40:56:b9:f5:e7:da:6c:fe:7e:
10:c4:b0:92:df:7a:83:ea:b5:4c:ae:e6:cd:30:73:47:78:16:
99:94:0f:df:76:fa:c2:8b:91:7d:9c:f5:a2:ed:b2:00:d6:b4:
be:af:e6:7a:71:b0:b6:e9:b1:4a:bd:3b:c2:4b:cf:2a:6c:59:
9b:7c:c1:27:74:8f:42:71:2e:6f:d8:b9:56:85:be:7c:f3:03:
1b:7b:ed:87:0a:ac:04:a4:96:18:8c:32:d4:a0:4b:aa:ba:dc:
30:b5:b4:cf:85:07:9c:2f:c5:cc:4d:86:84:d9:aa:95:24:47:
00:40:32:0c:ad:5b:88:21:46:12:1c:f0:9c:42:b8:87:60:d9:
2e:47:ac:56:6c:8a:30:54:40:84:48:c7:e8:7c:b7:23:33:e7:
e7:9e:39:39
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYVwKG8zyq8FYh+Z3/6kx7B0qHxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0ZmYzY2NhZTBkNTY5MGE0NjZmNGQ2N2NlN2YzYjc3OTA3ZDkyZTAzMzIz
NjA2MTQ0NDJjZGRiMGE5ZWZhYmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKCGrIYIMrKiEz3gNTkMSbpeUiCGtMWu68zx5878rUTodz6lPNlOPKPFaTr
qFLViZaBGSVWaigtw1gyjejq+QO1oQD0CQux8WXffBTKni8ky3JIQdglRItZY2pG
jfk6iwhZFL7E5BflF/9D2uDyFpowS0ZzOUtNUbT0mk6NIzae57wK0otLtuLTUAQO
mJndYENezVwxAFYgQ3cUQbVPnHBIJTSN7KGKQbc6fZou4mk63o8QwkZCEv4EoXM5
moxqK93n0bT6qf06IAztJI1+d32gmnPucM6CpWYwjCZ2dM6FSHBBcMfWhwSWnyt9
T3qDfYD1HQD0DrzhCyyhgjOrgD8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQQEJOk
2Bbguoos9y6tIzqXhApoJDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmEyZjc0MDEtODU1OS00NjMzLTg1NzktY2NhNzdkNmZhOTcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BoA
MA0GCSqGSIb3DQEBCwUAA4IBAQCfXUNEHFpdbgJDDcJonR4HktXBygiAS3E+yGOi
xmTxOb/lW/iCi1vvndLkfgmQfov3+pA0c5IM3HChio8DYO6znK+dvIlQn/rAZZwV
GKWeDS5DkcjtuR8oModFJRPlmZj2jNBAVrn159ps/n4QxLCS33qD6rVMrubNMHNH
eBaZlA/fdvrCi5F9nPWi7bIA1rS+r+Z6cbC26bFKvTvCS88qbFmbfMEndI9CcS5v
2LlWhb588wMbe+2HCqwEpJYYjDLUoEuqutwwtbTPhQecL8XMTYaE2aqVJEcAQDIM
rVuIIUYSHPCcQriHYNkuR6xWbIowVECESMfofLcjM+fnnjk5
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:52 2025 by rpki-client