Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
File: 8e4adf38-a007-4c0e-8621-1e65a160ad12.roa (raw, json)
Hash identifier: HOhJO3lOV/rEcgSuWkos7xHKHwQRhPXh55JDkg5cgro=
Subject key identifier: 65:2C:B1:63:F2:8B:23:73:AB:18:9E:DD:D4:C3:13:C6:BA:C7:AC:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FAA1831826F4230888699DAA5F84614E8CE2A71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:aa:18:31:82:6f:42:30:88:86:99:da:a5:f8:46:14:e8:ce:2a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=21ff2f64e8d164a858e8a05abacb2d051b6aa0e49e962c23abce7e1f358c0769, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:2a:81:ec:4c:13:df:ca:eb:42:d6:b9:f9:
5f:26:fa:fc:85:75:23:8e:0f:65:7e:e2:68:59:2a:
a2:38:51:aa:75:64:e1:1d:65:4c:dd:a2:dd:c6:ce:
25:ed:a6:8c:5b:e6:44:ab:e1:f3:17:84:b7:48:cf:
6b:02:aa:ac:86:28:4c:65:34:86:67:55:82:97:6b:
f0:27:44:c2:27:4d:1b:6d:21:c1:b2:ef:0f:bf:db:
58:12:ce:45:73:a5:9a:aa:f6:bd:f9:f9:5d:a5:a9:
b3:cc:68:9a:11:5b:00:9a:89:63:59:ae:90:ce:a9:
8d:d9:5b:a2:70:6e:99:fa:81:bc:e4:51:70:90:be:
04:50:1a:ce:bf:b9:e6:80:fc:1a:2a:23:3a:0b:76:
fa:18:22:34:0a:21:47:9d:0b:c4:f1:7c:0b:b4:65:
45:de:da:72:b9:60:70:a6:c5:d5:44:06:55:41:96:
ab:0f:17:9a:38:4c:54:bd:d9:50:dd:de:ad:ed:4f:
0c:9b:49:a6:10:fd:6b:0f:23:d9:e7:14:ae:1b:98:
e0:e7:99:6d:67:05:fc:ff:8b:24:11:4b:0e:78:2c:
57:0c:a8:af:43:37:98:8f:da:52:43:6d:1c:60:89:
74:1f:8f:7b:49:67:44:b9:9a:47:36:da:47:53:e0:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:B1:63:F2:8B:23:73:AB:18:9E:DD:D4:C3:13:C6:BA:C7:AC:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e4adf38-a007-4c0e-8621-1e65a160ad12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
64:6b:ed:95:fa:f2:64:24:82:4f:ab:09:45:25:c2:24:12:05:
b2:7c:01:c7:cb:7e:6a:a8:e7:70:1f:70:df:d1:7d:0b:3e:f9:
ab:8d:7f:0b:81:9b:76:a7:a2:7f:9f:f9:cc:44:4c:f6:de:76:
b4:dd:6a:9c:a4:7c:e2:5a:98:4f:69:30:fb:4a:f0:37:a4:ec:
45:7d:97:ac:79:b1:aa:d5:0e:2d:c2:50:e4:b4:fb:52:12:1c:
54:b5:18:ad:31:9b:6a:1c:9d:ab:3b:b7:7c:6c:a1:e0:57:08:
c7:d1:2a:40:b7:44:dc:ad:83:66:34:b8:7a:75:b1:77:9c:0a:
89:4e:a4:ad:86:4b:fd:6b:ed:c7:fd:65:f0:72:76:1f:fd:dc:
d2:3f:ae:e8:86:26:f2:bc:06:21:43:ce:e7:4a:74:d3:08:cc:
b5:9e:84:f6:d6:89:95:5f:4a:82:fe:18:13:50:03:e6:de:cd:
5f:4a:4c:ec:1d:bd:52:68:4a:50:b4:70:e7:9b:6b:43:67:4f:
1e:bb:07:d3:ad:ec:8a:08:1c:91:1a:64:6f:8b:ae:92:b8:bc:
7b:21:65:27:4f:a9:92:0e:6c:64:59:6f:15:bc:f0:a1:74:61:
3a:fc:3f:af:74:df:80:6e:10:16:1e:a6:93:15:46:94:88:5c:
1b:c2:b4:2c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL6oYMYJvQjCIhpnapfhGFOjOKnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDIxZmYyZjY0ZThkMTY0YTg1OGU4YTA1YWJhY2IyZDA1MWI2YWEwZTQ5ZTk2
MmMyM2FiY2U3ZTFmMzU4YzA3NjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVuKoHsTBPfyutC1rn5Xyb6/IV1I44PZX7iaFkqojhRqnVk4R1lTN2i3cbO
Je2mjFvmRKvh8xeEt0jPawKqrIYoTGU0hmdVgpdr8CdEwidNG20hwbLvD7/bWBLO
RXOlmqr2vfn5XaWps8xomhFbAJqJY1mukM6pjdlbonBumfqBvORRcJC+BFAazr+5
5oD8GiojOgt2+hgiNAohR50LxPF8C7RlRd7acrlgcKbF1UQGVUGWqw8XmjhMVL3Z
UN3ere1PDJtJphD9aw8j2ecUrhuY4OeZbWcF/P+LJBFLDngsVwyor0M3mI/aUkNt
HGCJdB+Pe0lnRLmaRzbaR1PgcdMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlLLFj
8osjc6sYnt3UwxPGusesBDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGU0YWRmMzgtYTAwNy00YzBlLTg2MjEtMWU2NWExNjBhZDEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H8g
MA0GCSqGSIb3DQEBCwUAA4IBAQBka+2V+vJkJIJPqwlFJcIkEgWyfAHHy35qqOdw
H3Df0X0LPvmrjX8LgZt2p6J/n/nMREz23na03WqcpHziWphPaTD7SvA3pOxFfZes
ebGq1Q4twlDktPtSEhxUtRitMZtqHJ2rO7d8bKHgVwjH0SpAt0TcrYNmNLh6dbF3
nAqJTqSthkv9a+3H/WXwcnYf/dzSP67ohibyvAYhQ87nSnTTCMy1noT21omVX0qC
/hgTUAPm3s1fSkzsHb1SaEpQtHDnm2tDZ08euwfTreyKCByRGmRvi66SuLx7IWUn
T6mSDmxkWW8VvPChdGE6/D+vdN+AbhAWHqaTFUaUiFwbwrQs
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:37 2025 by rpki-client