Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa
File: a6286624-a8d0-448e-926b-93a90bc30580.roa (raw, json)
Hash identifier: A1m1QvYg+lfvCLoDMo7w9BGdycy8CrnD9EIr6Rxu1W0=
Subject key identifier: 94:A2:42:56:7B:71:CB:83:92:A3:5C:9B:D8:08:77:A3:FE:B0:F0:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 798FC69122846A4C4A700DA4B2226AF0E219A81F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8f:c6:91:22:84:6a:4c:4a:70:0d:a4:b2:22:6a:f0:e2:19:a8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=04406f01f1382628fe0b24a120a6d211904178cd4b54757db0bf16cb2ab90e78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:ec:0d:49:c7:2a:bb:1a:47:32:ad:8b:92:
36:2c:22:3c:70:c2:e1:b2:50:7b:ab:7c:95:85:68:
ac:5d:8a:53:8d:f7:53:c7:d3:aa:49:ba:e3:50:4b:
bf:5b:16:ba:45:36:ec:5d:8f:4a:77:f1:c0:6e:59:
a5:c9:11:d1:bf:36:2c:ac:e0:33:83:cd:30:99:30:
a1:96:8f:59:e0:57:16:a7:66:ed:c8:37:a1:69:de:
d4:ae:72:67:37:5e:d5:d5:40:a0:22:26:18:1c:f4:
36:73:2c:e7:2e:f6:29:83:34:9d:93:c9:a3:7c:e2:
6b:ea:f1:4c:32:74:9f:8f:54:2c:59:65:1c:d6:94:
1b:e6:37:56:41:c9:66:4e:86:ee:42:43:9c:89:7a:
1b:6e:f0:42:d1:98:c1:d9:9e:6d:c0:fd:55:2c:96:
71:95:e2:a6:cf:99:3a:79:fe:dc:34:6e:d5:a5:78:
56:21:19:25:be:27:49:97:38:5f:ee:73:c0:2a:ed:
15:49:9e:b5:0c:22:e3:a0:bb:c0:b4:9b:2c:88:82:
93:f9:94:3e:8b:26:78:41:0a:f5:dc:ba:45:57:49:
d8:52:99:bf:73:59:c7:4e:85:71:cb:44:6b:00:4e:
82:da:71:6e:c6:47:72:6d:9f:0f:b0:9d:cb:47:25:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:42:56:7B:71:CB:83:92:A3:5C:9B:D8:08:77:A3:FE:B0:F0:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
45:32:11:a2:a0:9b:34:67:ac:95:cb:2d:49:cd:e1:4f:0f:f9:
3d:c1:c5:8e:07:91:84:3c:03:f3:8b:8b:95:c3:20:fe:c6:b1:
80:78:0b:f5:b5:d1:8f:f3:14:ef:63:eb:01:64:9f:b1:78:9e:
de:79:5e:bd:c9:1a:97:70:01:f0:b5:be:b3:07:f4:75:7c:fa:
a4:e6:e8:61:02:65:9d:a9:45:e5:0d:59:b3:5e:d5:98:32:4a:
e6:b4:9c:76:3f:11:56:f9:8b:c7:7a:ae:e5:2e:60:6e:4c:c0:
60:43:41:5e:20:da:65:b1:99:e1:ff:61:85:7b:53:cb:a2:e1:
18:cd:10:72:33:46:56:a0:1b:d4:5a:19:9c:ce:77:5b:fa:64:
6a:0b:0f:15:2c:9f:82:8f:9c:5b:3e:17:2f:b1:34:c6:9f:ea:
84:f8:cb:85:fa:88:64:8d:c6:37:1e:88:14:75:ff:df:d3:a0:
73:a0:38:64:b5:40:9b:58:ce:58:8f:91:cb:ee:36:f9:27:64:
fb:c9:ad:a2:58:c1:18:ae:04:ec:d7:6a:88:de:dc:f7:92:eb:
75:10:e9:0e:e7:57:cf:9e:aa:27:ad:02:0c:da:17:3d:8e:34:
2a:dc:1a:ba:37:98:6e:c0:b3:0b:70:3f:d5:8d:1e:78:30:32:
1b:ce:8f:d2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeY/GkSKEakxKcA2ksiJq8OIZqB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDA0NDA2ZjAxZjEzODI2MjhmZTBiMjRhMTIwYTZkMjExOTA0MTc4Y2Q0YjU0
NzU3ZGIwYmYxNmNiMmFiOTBlNzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0q7A1Jxyq7GkcyrYuSNiwiPHDC4bJQe6t8lYVorF2KU433U8fTqkm641BL
v1sWukU27F2PSnfxwG5ZpckR0b82LKzgM4PNMJkwoZaPWeBXFqdm7cg3oWne1K5y
Zzde1dVAoCImGBz0NnMs5y72KYM0nZPJo3zia+rxTDJ0n49ULFllHNaUG+Y3VkHJ
Zk6G7kJDnIl6G27wQtGYwdmebcD9VSyWcZXips+ZOnn+3DRu1aV4ViEZJb4nSZc4
X+5zwCrtFUmetQwi46C7wLSbLIiCk/mUPosmeEEK9dy6RVdJ2FKZv3NZx06FcctE
awBOgtpxbsZHcm2fD7Cdy0clzf0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSUokJW
e3HLg5KjXJvYCHej/rDwBjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTYyODY2MjQtYThkMC00NDhlLTkyNmItOTNhOTBiYzMwNTgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FlQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBFMhGioJs0Z6yVyy1JzeFPD/k9wcWOB5GEPAPz
i4uVwyD+xrGAeAv1tdGP8xTvY+sBZJ+xeJ7eeV69yRqXcAHwtb6zB/R1fPqk5uhh
AmWdqUXlDVmzXtWYMkrmtJx2PxFW+YvHeq7lLmBuTMBgQ0FeINplsZnh/2GFe1PL
ouEYzRByM0ZWoBvUWhmczndb+mRqCw8VLJ+Cj5xbPhcvsTTGn+qE+MuF+ohkjcY3
HogUdf/f06BzoDhktUCbWM5Yj5HL7jb5J2T7ya2iWMEYrgTs12qI3tz3kut1EOkO
51fPnqonrQIM2hc9jjQq3Bq6N5huwLMLcD/VjR54MDIbzo/S
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:26 2025 by rpki-client