Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
File: 6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa (raw, json)
Hash identifier: X6uPubXIUHMaU28f0AiL1TeOyPImtSy9TLB4xSFP7T4=
Subject key identifier: B3:98:E6:DF:68:49:F4:2B:A4:13:7A:16:2C:DA:7A:2A:9D:7D:57:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1139893517605F0973A8FE9BFFA9EAC05857EDC4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:39:89:35:17:60:5f:09:73:a8:fe:9b:ff:a9:ea:c0:58:57:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=aca43a2c9f65d6a664163f53064ce769e2fef05f0c6aee05e4d14e6895f2b68d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:33:05:00:94:9c:5e:1f:ef:1a:a3:d6:72:
5b:af:07:f2:29:0d:b3:a5:43:18:e7:d2:2b:83:2c:
dd:0a:62:d4:8e:a5:a9:0a:67:f7:5a:9d:48:fa:ea:
07:61:6b:26:30:21:35:08:28:a6:85:a7:dd:06:c6:
67:9f:b8:a7:b2:9e:ff:67:db:50:66:56:56:56:d0:
d2:43:f1:46:6d:58:f4:62:ae:57:20:36:53:88:23:
28:d0:0a:37:af:72:40:22:69:a7:1a:e1:5c:a8:b7:
38:4b:22:fa:b4:ad:45:ee:cb:d2:d8:c6:6b:8b:e3:
03:e4:64:80:5c:b0:6e:60:52:4b:38:a1:5c:72:89:
82:82:b4:3e:1e:ee:ec:5c:db:4b:b3:0e:85:71:26:
f6:ef:de:2e:b4:d1:9c:73:5a:69:08:38:9b:1d:4d:
bc:02:56:2e:d3:db:08:b9:c8:6c:1c:2c:82:d5:7d:
bf:6f:75:fd:c4:25:d1:6a:cf:53:8f:75:34:8e:26:
f7:86:4d:f7:b9:58:5d:e4:9d:d2:56:a9:d3:9b:ce:
b6:9c:b1:57:e3:3e:a3:7a:d3:c1:85:65:f7:d0:92:
f3:8e:e3:74:67:ba:b9:3b:56:e3:6e:0f:d5:78:b3:
5e:32:2f:00:41:8a:54:d1:9a:e5:d2:66:99:14:9c:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:E6:DF:68:49:F4:2B:A4:13:7A:16:2C:DA:7A:2A:9D:7D:57:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:41:be:e2:09:d1:b5:42:5b:d5:ef:a5:82:33:20:d2:3d:2f:
fe:a7:32:a5:16:59:7a:05:74:f9:b1:36:2a:48:9b:b8:1b:3f:
ce:0d:9c:ad:75:40:1f:b6:9c:9f:de:7c:b8:fc:6f:f9:4a:4e:
33:98:19:a3:c5:7b:1f:83:2c:ce:b8:c6:67:6d:77:07:bc:ab:
53:4a:20:9d:d8:ec:99:5d:87:30:de:86:28:47:79:6b:d7:66:
88:2a:40:98:bb:be:39:cc:b6:a1:a0:ef:9e:84:4f:0b:97:4c:
53:0c:c3:a1:bd:5d:ba:4b:94:d9:4e:b5:e6:69:8f:b4:77:d1:
94:1a:4e:de:95:e9:71:47:9f:f6:3f:64:81:35:14:60:c5:aa:
aa:f7:fb:05:63:b3:d8:ed:f3:8d:a5:19:4c:dd:c2:e1:e7:43:
f1:b0:6c:f6:97:e4:36:74:27:6d:fc:fa:8d:a3:b4:63:d8:35:
83:c2:4d:77:7b:7e:50:5d:c3:60:38:bb:78:4f:57:84:15:3e:
cb:bc:3b:a6:d6:9f:14:3c:e6:af:dc:07:7e:18:62:d4:e3:05:
01:a4:07:70:b8:ad:2d:32:fa:79:fa:24:d0:9c:53:04:76:43:
5c:d1:46:a4:f1:15:af:8a:5a:b6:02:76:64:08:31:53:5f:cc:
5f:cd:ac:9f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUETmJNRdgXwlzqP6b/6nqwFhX7cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjYTQzYTJjOWY2NWQ2YTY2NDE2M2Y1MzA2NGNlNzY5ZTJmZWYwNWYwYzZh
ZWUwNWU0ZDE0ZTY4OTVmMmI2OGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKA/MwUAlJxeH+8ao9ZyW68H8ikNs6VDGOfSK4Ms3Qpi1I6lqQpn91qdSPrq
B2FrJjAhNQgopoWn3QbGZ5+4p7Ke/2fbUGZWVlbQ0kPxRm1Y9GKuVyA2U4gjKNAK
N69yQCJppxrhXKi3OEsi+rStRe7L0tjGa4vjA+RkgFywbmBSSzihXHKJgoK0Ph7u
7FzbS7MOhXEm9u/eLrTRnHNaaQg4mx1NvAJWLtPbCLnIbBwsgtV9v291/cQl0WrP
U491NI4m94ZN97lYXeSd0lap05vOtpyxV+M+o3rTwYVl99CS847jdGe6uTtW424P
1XizXjIvAEGKVNGa5dJmmRScNHkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSzmObf
aEn0K6QTehYs2noqnX1XNTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmUzZGQwMGEtZjQ5ZC00NmE2LWI5N2QtZDE0ZmYxMTk3ZjZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hvg
MA0GCSqGSIb3DQEBCwUAA4IBAQAOQb7iCdG1QlvV76WCMyDSPS/+pzKlFll6BXT5
sTYqSJu4Gz/ODZytdUAftpyf3ny4/G/5Sk4zmBmjxXsfgyzOuMZnbXcHvKtTSiCd
2OyZXYcw3oYoR3lr12aIKkCYu745zLahoO+ehE8Ll0xTDMOhvV26S5TZTrXmaY+0
d9GUGk7elelxR5/2P2SBNRRgxaqq9/sFY7PY7fONpRlM3cLh50PxsGz2l+Q2dCdt
/PqNo7Rj2DWDwk13e35QXcNgOLt4T1eEFT7LvDum1p8UPOav3Ad+GGLU4wUBpAdw
uK0tMvp5+iTQnFMEdkNc0Uak8RWvilq2AnZkCDFTX8xfzayf
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:30 2025 by rpki-client