Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
File: 6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa (raw, json)
Hash identifier: RNrS6Uws2VIhs+DZBQhRaGhYI6XdmG4d2BCr2JDaaP4=
Subject key identifier: 0E:DC:82:F5:8F:F4:D4:98:66:E0:7B:05:85:2F:E9:61:C4:43:95:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C88486E0709875413708B87A9A1D807BA48B68C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:88:48:6e:07:09:87:54:13:70:8b:87:a9:a1:d8:07:ba:48:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=becc3d55992095ecc3e94facf8558198bb222e0af9c331ed6df76f6f7dcd091c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:17:09:aa:55:0d:ea:b4:69:53:e1:49:e2:
11:ab:4f:d7:fd:36:6a:20:04:c9:ed:54:85:ae:03:
79:5f:4d:b3:76:4b:b6:5c:d4:cc:c8:d6:2d:36:03:
97:08:14:c3:45:83:65:59:93:76:b9:28:44:65:b6:
63:73:98:2b:f3:83:2f:3c:75:7d:49:d7:0b:19:36:
29:4b:24:39:5c:52:77:3e:b9:6c:37:bc:6f:53:e5:
86:49:f8:5e:9b:6f:46:73:71:6c:e8:e3:da:75:d2:
73:fa:57:ae:5a:5a:fa:29:b6:40:12:af:5a:b6:c9:
9c:1d:b3:00:32:45:2f:90:10:3f:38:25:ae:1d:9c:
00:a5:5a:8a:40:15:d1:41:c8:c1:4d:d2:2d:a0:41:
38:14:52:e2:eb:b4:e2:cb:ec:1d:de:97:9a:89:b4:
31:04:90:9e:97:cf:c8:eb:cf:07:b0:2d:2b:b1:f9:
b7:84:58:8a:b1:f1:8c:e4:49:0c:b2:2c:ee:9e:ff:
db:de:c6:a1:a7:c5:eb:84:28:e9:9d:98:64:b8:07:
3d:69:c8:e2:81:29:8e:e2:a8:e6:34:76:92:96:07:
03:ca:b2:d4:48:32:60:5b:5a:ef:84:83:41:07:09:
50:11:3e:20:a5:09:b5:c9:55:37:98:cc:a3:27:1b:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:82:F5:8F:F4:D4:98:66:E0:7B:05:85:2F:E9:61:C4:43:95:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2080::/48
Signature Algorithm: sha256WithRSAEncryption
78:5d:aa:ff:6f:87:e1:82:86:8e:02:cc:63:45:1d:ec:4a:e9:
a5:50:c5:b0:e3:ff:b6:6e:6b:6c:8d:07:d6:a1:45:52:14:df:
76:d2:d5:93:af:d6:d1:b4:35:ff:b1:6c:66:b6:6a:cb:82:f8:
66:85:69:de:17:b2:cf:45:a5:f5:d7:6a:34:5c:5c:3b:b4:bb:
93:b9:c1:25:61:2c:c4:0d:d6:2b:0b:f8:89:10:56:b7:a9:a9:
30:1a:62:dd:76:87:e3:5c:f1:11:c5:ad:90:39:ca:28:7f:8a:
8b:e8:d1:9d:f7:db:a0:d0:78:f1:a7:d6:c2:9e:b7:07:70:aa:
63:c3:4f:ab:f1:43:34:bf:5d:71:c8:0e:1f:5a:f6:26:1b:81:
67:38:0f:53:93:1c:71:e2:cb:04:e7:1a:31:32:90:5b:9e:7d:
77:f0:d6:4f:65:fd:74:37:c3:a0:9d:d4:55:c4:7a:99:78:27:
0f:79:73:82:06:c9:07:64:c5:e8:c5:22:37:05:20:7b:9d:87:
54:72:f4:14:bf:ed:e2:86:db:8d:a1:69:d1:a1:08:92:ba:1a:
d4:58:00:ab:43:42:d4:73:ff:18:79:e4:41:70:81:76:84:bf:
bf:32:14:2c:bf:e3:09:86:c1:8b:25:f6:28:59:75:a8:e1:ae:
e4:34:7d:ae
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPIhIbgcJh1QTcIuHqaHYB7pItowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlY2MzZDU1OTkyMDk1ZWNjM2U5NGZhY2Y4NTU4MTk4YmIyMjJlMGFmOWMz
MzFlZDZkZjc2ZjZmN2RjZDA5MWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALE6FwmqVQ3qtGlT4UniEatP1/02aiAEye1Uha4DeV9Ns3ZLtlzUzMjWLTYD
lwgUw0WDZVmTdrkoRGW2Y3OYK/ODLzx1fUnXCxk2KUskOVxSdz65bDe8b1Plhkn4
XptvRnNxbOjj2nXSc/pXrlpa+im2QBKvWrbJnB2zADJFL5AQPzglrh2cAKVaikAV
0UHIwU3SLaBBOBRS4uu04svsHd6Xmom0MQSQnpfPyOvPB7AtK7H5t4RYirHxjORJ
DLIs7p7/297GoafF64Qo6Z2YZLgHPWnI4oEpjuKo5jR2kpYHA8qy1EgyYFta74SD
QQcJUBE+IKUJtclVN5jMoycbYWECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQO3IL1
j/TUmGbgewWFL+lhxEOVSjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmI0ZjViMDYtZWJkOS00NjczLThkYjEtOGU3MmRmOTljOTk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAg
gDANBgkqhkiG9w0BAQsFAAOCAQEAeF2q/2+H4YKGjgLMY0Ud7ErppVDFsOP/tm5r
bI0H1qFFUhTfdtLVk6/W0bQ1/7FsZrZqy4L4ZoVp3heyz0Wl9ddqNFxcO7S7k7nB
JWEsxA3WKwv4iRBWt6mpMBpi3XaH41zxEcWtkDnKKH+Ki+jRnffboNB48afWwp63
B3CqY8NPq/FDNL9dccgOH1r2JhuBZzgPU5McceLLBOcaMTKQW559d/DWT2X9dDfD
oJ3UVcR6mXgnD3lzggbJB2TF6MUiNwUge52HVHL0FL/t4obbjaFp0aEIkroa1FgA
q0NC1HP/GHnkQXCBdoS/vzIULL/jCYbBiyX2KFl1qOGu5DR9rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:25 2025 by rpki-client