Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
File: 898dbcab-881e-4370-98c6-9b1ac5214cd0.roa (raw, json)
Hash identifier: 7J9TL30igaGV31byaRc7LODmTDD5D+4DCfA15E5aGMU=
Subject key identifier: 00:1D:CD:DF:6A:15:10:6E:DD:5B:B2:56:01:58:AD:F8:F9:3D:D4:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DBD9B4856CFAC8FCABE5A7B3C44818E1AA2BA9F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bd:9b:48:56:cf:ac:8f:ca:be:5a:7b:3c:44:81:8e:1a:a2:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=171ae0199060a8b8fb6164935dd157b00e7e4c5264e78ef2b1f382d2a49fe95e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:9b:b8:8d:21:18:29:b8:5c:47:ca:87:6c:
9a:a2:91:23:97:0e:7d:cf:5f:1a:93:e5:19:0b:ee:
8a:77:6d:df:e3:78:ce:ce:8c:d4:36:b8:fe:fd:c1:
ca:42:26:a3:c5:64:34:f0:12:66:f1:b3:28:e3:41:
c5:32:90:a2:54:0b:d0:b7:a6:7b:8a:c7:63:20:49:
f4:76:26:82:d1:6d:8a:b7:9c:e3:a2:d4:d1:f0:de:
cd:5a:8a:43:f3:9b:4f:cd:f2:25:74:b5:1d:fe:2c:
07:cf:18:02:a5:48:ac:b0:fa:bd:d6:93:cf:1b:2e:
a6:3e:9a:46:d2:40:fc:9b:57:64:4a:b9:62:db:cd:
0e:15:01:c8:d4:8e:21:35:4c:fa:22:e4:38:79:cc:
53:72:e2:0c:f3:f5:ad:76:43:84:39:21:14:5b:55:
2d:33:0d:37:49:0b:37:d3:6a:33:0b:7e:db:cd:36:
7f:9a:5d:50:bc:67:27:3f:9b:d7:10:9b:ee:f8:67:
a7:d1:99:0d:19:66:2b:23:ef:13:6e:24:69:8b:5a:
54:e0:fd:3f:b5:00:be:5f:0c:b6:46:dc:9d:7e:5c:
71:20:29:dd:c5:84:dd:ee:6c:b6:88:2f:11:df:f9:
e2:83:8f:85:d3:a0:50:4d:80:42:0d:83:e9:5b:97:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:CD:DF:6A:15:10:6E:DD:5B:B2:56:01:58:AD:F8:F9:3D:D4:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e040::/46
Signature Algorithm: sha256WithRSAEncryption
1f:ed:0e:50:14:47:9c:e9:49:81:04:b1:78:af:ed:2e:6e:0f:
31:cf:c8:cd:68:4a:e2:00:de:93:c5:46:5b:96:25:a6:bf:41:
5e:35:7b:55:e4:39:1c:b0:d7:61:df:38:91:dd:1a:55:b0:ab:
f5:6c:f5:b2:e2:d3:65:fa:8e:f1:09:10:e2:e2:c1:a4:0d:92:
79:2f:f6:ec:de:4c:4b:80:19:91:07:07:97:0e:25:bb:26:55:
3b:37:12:88:49:07:66:a8:ed:0f:77:d0:07:21:08:a3:b3:59:
ef:49:3c:07:eb:0c:e6:5e:87:dd:9f:62:e1:68:b9:a8:a4:aa:
fc:f6:98:f9:d0:7e:eb:f4:d1:86:25:0c:cb:6a:72:91:85:9a:
0e:60:c8:77:29:7e:fb:4a:32:b4:bb:31:1d:1d:db:a2:5e:2f:
0f:11:8f:75:99:ef:22:b8:a0:28:57:d3:b9:eb:2d:b7:92:d4:
7c:06:1c:98:05:57:88:5a:52:85:21:41:f6:98:9f:84:f7:c9:
1b:a6:91:ea:ab:72:37:34:66:de:88:f3:10:e6:ea:64:b6:e8:
c5:9c:30:0d:93:f7:a7:62:bc:df:fb:a4:b4:02:78:24:bd:cf:
61:24:6f:be:a3:4a:f4:25:e7:df:55:02:0c:7d:12:39:cd:e7:
59:60:d9:a2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHb2bSFbPrI/Kvlp7PESBjhqiup8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDE3MWFlMDE5OTA2MGE4YjhmYjYxNjQ5MzVkZDE1N2IwMGU3ZTRjNTI2NGU3
OGVmMmIxZjM4MmQyYTQ5ZmU5NWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIMm7iNIRgpuFxHyodsmqKRI5cOfc9fGpPlGQvuindt3+N4zs6M1Da4/v3B
ykImo8VkNPASZvGzKONBxTKQolQL0Leme4rHYyBJ9HYmgtFtirec46LU0fDezVqK
Q/ObT83yJXS1Hf4sB88YAqVIrLD6vdaTzxsupj6aRtJA/JtXZEq5YtvNDhUByNSO
ITVM+iLkOHnMU3LiDPP1rXZDhDkhFFtVLTMNN0kLN9NqMwt+2802f5pdULxnJz+b
1xCb7vhnp9GZDRlmKyPvE24kaYtaVOD9P7UAvl8MtkbcnX5ccSAp3cWE3e5stogv
Ed/54oOPhdOgUE2AQg2D6VuXoq0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQAHc3f
ahUQbt1bslYBWK34+T3UFTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODk4ZGJjYWItODgxZS00MzcwLTk4YzYtOWIxYWM1MjE0Y2QwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hvg
QDANBgkqhkiG9w0BAQsFAAOCAQEAH+0OUBRHnOlJgQSxeK/tLm4PMc/IzWhK4gDe
k8VGW5Ylpr9BXjV7VeQ5HLDXYd84kd0aVbCr9Wz1suLTZfqO8QkQ4uLBpA2SeS/2
7N5MS4AZkQcHlw4luyZVOzcSiEkHZqjtD3fQByEIo7NZ70k8B+sM5l6H3Z9i4Wi5
qKSq/PaY+dB+6/TRhiUMy2pykYWaDmDIdyl++0oytLsxHR3bol4vDxGPdZnvIrig
KFfTuestt5LUfAYcmAVXiFpShSFB9pifhPfJG6aR6qtyNzRm3ojzEObqZLboxZww
DZP3p2K83/uktAJ4JL3PYSRvvqNK9CXn31UCDH0SOc3nWWDZog==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:48 2025 by rpki-client