Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
File: 9963ca7c-f411-4aae-ac61-2c650f8269e0.roa (raw, json)
Hash identifier: dDP2KLEGzHv06EyNqc/8TsuqW6mBe7ZWDrNJgDqG0FU=
Subject key identifier: A5:FA:9E:B1:C8:54:E6:26:E0:B6:9D:75:40:7E:19:95:AC:D1:B0:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1080E77E6731365C2725F791C49B434126996ABF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:80:e7:7e:67:31:36:5c:27:25:f7:91:c4:9b:43:41:26:99:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e6a1447e22f0cbfa75208d6b2c3695cde10a2896fa7a7df3aa61c6a6a862c443, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:c0:24:ef:51:0d:fa:9e:64:87:50:a5:1e:
80:17:f0:72:38:6e:d6:86:b7:80:ff:78:ba:cc:ea:
b1:c6:04:ea:ce:d9:21:e3:cd:17:49:6f:12:1e:0e:
e0:73:a1:de:73:45:1b:57:2a:7b:d1:a7:77:38:9d:
b5:b9:cc:a3:7e:8e:c8:07:76:90:17:51:ab:c2:36:
20:47:37:2c:fc:97:9a:cf:9a:00:94:b1:28:04:5e:
5a:73:e0:64:b2:73:b2:c8:09:d4:1e:88:2c:55:a9:
74:de:c9:9f:ae:4e:41:0b:24:2f:31:00:c5:b3:5a:
b2:a3:96:39:0f:7b:98:56:5b:3b:9d:f4:07:aa:75:
87:bb:39:08:f0:d9:cd:64:54:02:e5:08:0a:e4:38:
e1:85:2b:e9:04:6b:50:1d:2b:09:aa:f2:71:1c:94:
ce:09:a3:ed:aa:3c:28:1e:83:85:93:86:c4:05:d2:
56:5a:f8:e9:82:de:37:1c:d3:81:4c:09:35:c9:e9:
bf:1e:0d:47:98:95:33:92:72:53:22:b8:f0:5f:53:
4c:f0:3a:8f:28:7e:3c:b3:fe:cc:d4:f3:5f:b5:45:
4f:4b:86:49:94:76:4c:36:36:d3:ea:59:fd:30:9f:
60:58:d6:4d:58:50:a6:9a:7f:5f:5f:7c:eb:6d:7b:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:9E:B1:C8:54:E6:26:E0:B6:9D:75:40:7E:19:95:AC:D1:B0:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:400::/38
Signature Algorithm: sha256WithRSAEncryption
3e:af:2d:b2:f6:99:d6:d1:41:7e:37:e6:4a:0b:32:f9:70:13:
b4:96:aa:ee:af:af:e5:16:ae:52:1b:f2:34:2b:77:cb:ff:25:
94:bc:d8:f4:99:bc:60:29:f7:cf:3d:e7:c3:d0:91:fd:4f:11:
03:9e:04:32:b9:0b:a4:d4:17:aa:e0:98:22:7b:2f:78:a9:69:
0a:4b:e0:2d:78:74:16:bd:2d:61:94:33:7f:cd:46:e3:ac:24:
bc:36:d4:b5:65:62:3a:44:20:fb:50:7a:e3:a1:77:aa:ca:f0:
5f:93:2b:86:34:c1:64:76:81:3d:d2:99:71:33:1b:ac:40:f6:
d1:2a:5b:4c:43:b4:81:e9:b6:8f:58:b2:15:4d:1a:2a:4b:59:
93:2e:4f:a6:18:2b:9d:b2:58:b1:8e:81:6c:d6:9f:ee:07:ae:
4e:83:58:3a:5d:bd:d3:66:74:64:96:22:0e:ad:e0:1d:67:2c:
e5:cb:a3:e3:9f:b3:05:5f:33:78:d9:be:05:a5:48:4b:31:4c:
b1:24:22:86:cd:aa:ba:19:b6:8c:b9:21:b1:c3:88:af:9c:f3:
14:ca:16:b1:b4:e9:b0:53:f7:69:5f:5f:9c:92:55:fb:a1:ac:
bc:6b:cf:96:44:42:6c:fb:db:c2:d0:83:a8:c2:9f:17:bd:e7:
d1:ed:6f:09
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEIDnfmcxNlwnJfeRxJtDQSaZar8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGU2YTE0NDdlMjJmMGNiZmE3NTIwOGQ2YjJjMzY5NWNkZTEwYTI4OTZmYTdh
N2RmM2FhNjFjNmE2YTg2MmM0NDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALacwCTvUQ36nmSHUKUegBfwcjhu1oa3gP94uszqscYE6s7ZIePNF0lvEh4O
4HOh3nNFG1cqe9GndzidtbnMo36OyAd2kBdRq8I2IEc3LPyXms+aAJSxKAReWnPg
ZLJzssgJ1B6ILFWpdN7Jn65OQQskLzEAxbNasqOWOQ97mFZbO530B6p1h7s5CPDZ
zWRUAuUICuQ44YUr6QRrUB0rCarycRyUzgmj7ao8KB6DhZOGxAXSVlr46YLeNxzT
gUwJNcnpvx4NR5iVM5JyUyK48F9TTPA6jyh+PLP+zNTzX7VFT0uGSZR2TDY20+pZ
/TCfYFjWTVhQppp/X19862178QUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSl+p6x
yFTmJuC2nXVAfhmVrNGwGzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTk2M2NhN2MtZjQxMS00YWFlLWFjNjEtMmM2NTBmODI2OWUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BEE
MA0GCSqGSIb3DQEBCwUAA4IBAQA+ry2y9pnW0UF+N+ZKCzL5cBO0lqrur6/lFq5S
G/I0K3fL/yWUvNj0mbxgKffPPefD0JH9TxEDngQyuQuk1Beq4Jgiey94qWkKS+At
eHQWvS1hlDN/zUbjrCS8NtS1ZWI6RCD7UHrjoXeqyvBfkyuGNMFkdoE90plxMxus
QPbRKltMQ7SB6baPWLIVTRoqS1mTLk+mGCudslixjoFs1p/uB65Og1g6Xb3TZnRk
liIOreAdZyzly6Pjn7MFXzN42b4FpUhLMUyxJCKGzaq6GbaMuSGxw4ivnPMUyhax
tOmwU/dpX1+cklX7oay8a8+WREJs+9vC0IOowp8XvefR7W8J
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:23 2025 by rpki-client