Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
File: 75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa (raw, json)
Hash identifier: zwadPdpdJ71R7Yj5SqoY/fnLHpl1JrIaQDrlLk0zv0w=
Subject key identifier: E5:59:45:76:A0:A4:BE:DB:53:3C:A9:61:DC:E5:FF:5F:97:5B:96:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A57EDDED1704FE8983193CE62B019EB9AD08AD3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:57:ed:de:d1:70:4f:e8:98:31:93:ce:62:b0:19:eb:9a:d0:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f4d600f71dc79f9aee601deb358a766625458c6458532898de2c547ae9cba68e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:ee:f0:40:0c:63:a7:0c:bc:fc:cf:75:4b:
58:fb:d6:32:7b:6c:18:05:4f:ac:91:d7:fa:a5:45:
b5:22:fa:73:7c:b9:00:01:7b:52:4b:d7:8f:7e:c3:
44:1a:12:b9:fb:6f:ec:ca:01:40:40:8c:99:14:65:
ed:20:dd:0e:b1:f2:f8:fd:78:09:11:37:4d:54:6e:
31:5d:54:1e:05:c2:48:92:06:bd:ec:f4:85:68:42:
ea:34:a3:a1:87:8c:d6:70:6e:ed:59:f9:90:35:ae:
ab:86:b7:9f:b0:73:f0:ed:4d:a3:bb:6a:b3:61:9b:
21:41:6b:b4:66:f4:e2:73:09:1b:cc:cc:bb:80:16:
e8:eb:38:fc:d3:ae:de:41:73:aa:35:54:3b:51:ee:
73:cd:c0:0d:3c:f1:3f:9f:46:d5:93:ae:ff:47:b9:
92:3f:ff:dc:b3:0b:b9:9a:89:28:95:01:0d:ec:69:
d8:2e:58:fe:d3:ad:59:1a:79:bf:c8:c5:7a:22:21:
ee:42:c2:98:a7:7d:fe:b9:d3:eb:c0:bf:37:6a:cb:
15:17:19:a9:59:eb:e1:f7:28:21:12:e6:0b:56:46:
f3:50:e7:37:f9:ba:f2:e1:48:78:ac:30:9e:fb:af:
15:3d:d9:04:41:59:a3:99:1c:9e:12:be:bd:b9:57:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:45:76:A0:A4:BE:DB:53:3C:A9:61:DC:E5:FF:5F:97:5B:96:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6040::/48
Signature Algorithm: sha256WithRSAEncryption
7a:31:9b:0e:53:15:37:79:70:74:99:28:6b:9e:08:d2:10:e2:
93:1f:ef:e6:ef:74:11:93:b9:f3:4f:5e:0c:e9:b7:e5:cb:3a:
8f:66:ac:e2:97:c3:8a:4f:48:58:98:34:53:46:5e:59:2a:9c:
19:17:c5:3c:a6:ae:62:2e:7e:27:cb:08:5f:d4:4b:41:17:f2:
1e:cf:eb:de:f7:31:b2:87:ff:4c:7d:b2:1a:aa:8d:67:9b:f3:
d0:df:b3:12:8e:37:5b:18:f1:7d:f5:ef:a0:3f:55:c3:f7:43:
28:d0:6e:36:98:8b:d4:e7:b5:00:e1:7a:e3:7b:17:90:14:da:
54:1f:ec:37:0a:b8:62:a0:af:05:ab:53:67:da:67:c1:8f:a5:
66:a4:95:a8:b9:1a:70:00:78:c4:03:bf:22:3b:09:fb:dc:c6:
07:e0:54:0f:11:ec:48:86:4c:09:57:18:a5:91:91:27:f3:7c:
83:a6:19:6f:ca:a2:4a:70:02:c9:e6:c4:f5:99:a1:27:4a:bb:
b5:da:02:49:8a:a6:41:53:7b:23:6b:ca:a6:4b:71:88:84:86:
67:60:cf:3a:78:6d:e0:07:49:88:3e:1a:44:8c:d7:30:63:f1:
84:b1:b3:4d:f4:d5:1f:aa:7e:8d:8d:b7:cb:97:57:d5:14:b8:
3a:63:45:c2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOlft3tFwT+iYMZPOYrAZ65rQitMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0ZDYwMGY3MWRjNzlmOWFlZTYwMWRlYjM1OGE3NjY2MjU0NThjNjQ1ODUz
Mjg5OGRlMmM1NDdhZTljYmE2OGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwl7vBADGOnDLz8z3VLWPvWMntsGAVPrJHX+qVFtSL6c3y5AAF7UkvXj37D
RBoSuftv7MoBQECMmRRl7SDdDrHy+P14CRE3TVRuMV1UHgXCSJIGvez0hWhC6jSj
oYeM1nBu7Vn5kDWuq4a3n7Bz8O1No7tqs2GbIUFrtGb04nMJG8zMu4AW6Os4/NOu
3kFzqjVUO1Huc83ADTzxP59G1ZOu/0e5kj//3LMLuZqJKJUBDexp2C5Y/tOtWRp5
v8jFeiIh7kLCmKd9/rnT68C/N2rLFRcZqVnr4fcoIRLmC1ZG81DnN/m68uFIeKww
nvuvFT3ZBEFZo5kcnhK+vblXGr8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTlWUV2
oKS+21M8qWHc5f9fl1uWTzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzVkMGI1ZDktMjQ3Ny00ZDM4LWFiN2EtMGM2MGEzM2Q4MjQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFg
QDANBgkqhkiG9w0BAQsFAAOCAQEAejGbDlMVN3lwdJkoa54I0hDikx/v5u90EZO5
809eDOm35cs6j2as4pfDik9IWJg0U0ZeWSqcGRfFPKauYi5+J8sIX9RLQRfyHs/r
3vcxsof/TH2yGqqNZ5vz0N+zEo43WxjxffXvoD9Vw/dDKNBuNpiL1Oe1AOF643sX
kBTaVB/sNwq4YqCvBatTZ9pnwY+lZqSVqLkacAB4xAO/IjsJ+9zGB+BUDxHsSIZM
CVcYpZGRJ/N8g6YZb8qiSnACyebE9ZmhJ0q7tdoCSYqmQVN7I2vKpktxiISGZ2DP
Onht4AdJiD4aRIzXMGPxhLGzTfTVH6p+jY23y5dX1RS4OmNFwg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:56 2025 by rpki-client