Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
File: a6ca14a4-0087-442a-b673-75cc23375cdf.roa (raw, json)
Hash identifier: VBD+N2PPFsTKC6eEI8aRSu1DUYSJxeY2DL0XocmTL1I=
Subject key identifier: 2D:69:23:E6:CD:99:73:58:66:F9:54:D3:6A:A8:B9:C7:7E:37:99:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A9E0EAD3A5E3D69584209C1FDF95FD86594864C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:9080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9e:0e:ad:3a:5e:3d:69:58:42:09:c1:fd:f9:5f:d8:65:94:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fc5f5aa98d93e381aba542eea8bbae22af97824e9d9da18533fd022d8500dd5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:64:6c:5d:6e:c8:d0:ba:e5:98:cc:c4:2c:
ef:a1:35:c5:47:05:2c:4e:fd:9d:69:45:17:b3:43:
2d:e7:76:75:15:a8:53:54:9d:4c:70:57:5e:07:0a:
02:cb:4b:b4:af:7c:c9:dc:76:00:80:f5:a6:9b:bb:
4b:0a:7f:24:27:73:f4:d7:98:54:3a:72:e5:84:70:
66:f6:e7:62:cb:77:62:db:c1:89:5f:47:a1:a6:33:
fc:fd:1f:71:4b:fc:7a:ef:b0:10:be:05:a0:a3:18:
d6:1b:8f:cf:e7:d0:7c:6c:be:e5:3b:03:b8:4c:01:
57:c8:a1:b2:dc:23:61:e8:f3:42:83:8d:74:fb:72:
b1:23:f0:0d:f4:08:21:fe:9c:86:ac:95:63:ba:ae:
88:65:b3:8d:21:2f:37:84:02:1c:d3:20:99:1c:ab:
af:92:cc:f7:49:3f:96:5b:11:5b:a0:21:75:5e:4a:
cd:ef:24:33:e2:30:c7:83:b7:46:44:4f:8e:fc:61:
2a:e0:e5:33:5c:5d:56:3f:4f:4d:d5:be:25:43:3d:
d7:5e:cf:f1:6d:f1:ec:9a:60:6c:8a:cf:d1:55:ba:
4d:e4:8f:b8:dc:88:54:f2:35:c1:a9:ba:0d:06:2a:
51:6d:8d:ef:96:68:10:d6:bb:24:ed:be:7b:5e:ed:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:23:E6:CD:99:73:58:66:F9:54:D3:6A:A8:B9:C7:7E:37:99:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:9080::/46
Signature Algorithm: sha256WithRSAEncryption
a7:65:1e:85:57:a6:8c:07:ca:93:e5:f1:5c:5a:50:76:9a:5f:
95:74:d4:26:3e:56:0d:61:ed:dd:75:9e:57:ae:85:1a:bc:8d:
49:08:f8:2b:27:78:1e:06:84:13:ce:e5:2b:00:b1:b3:2c:96:
e8:be:e2:fa:85:55:84:28:0e:ea:5b:b7:81:c7:e5:f7:10:e0:
58:68:d5:7c:ef:8d:5b:76:d9:31:ce:af:12:ca:24:c9:ee:70:
a1:dd:e8:ec:4f:30:7d:e6:71:05:b1:2f:29:ea:47:14:29:39:
dd:1f:30:d1:83:2a:ad:ac:7c:98:67:d3:5e:12:75:b1:dc:56:
3b:72:14:b9:96:42:09:c2:70:cb:73:30:ff:e7:ee:f6:11:a7:
77:7a:8d:c4:c9:b8:b1:8d:5d:9c:e2:ba:a0:3d:60:99:20:a2:
c8:07:ee:52:8d:fb:e1:7a:0d:00:96:74:75:ba:61:e9:e0:1a:
42:80:b1:98:96:b0:d1:fe:a6:7c:40:da:9c:0b:23:95:43:64:
26:83:51:dc:3c:b5:98:ed:83:ae:6d:4e:f2:20:4f:66:0c:c4:
54:32:f5:54:99:cf:b8:0f:db:ce:07:dd:ab:98:56:41:51:d4:
8a:bd:7d:29:89:20:0d:2b:21:ab:7c:29:0a:87:46:3c:8e:b0:
6e:78:c1:0e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKp4OrTpePWlYQgnB/flf2GWUhkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGZjNWY1YWE5OGQ5M2UzODFhYmE1NDJlZWE4YmJhZTIyYWY5NzgyNGU5ZDlk
YTE4NTMzZmQwMjJkODUwMGRkNWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMZiZGxdbsjQuuWYzMQs76E1xUcFLE79nWlFF7NDLed2dRWoU1SdTHBXXgcK
AstLtK98ydx2AID1ppu7Swp/JCdz9NeYVDpy5YRwZvbnYst3YtvBiV9HoaYz/P0f
cUv8eu+wEL4FoKMY1huPz+fQfGy+5TsDuEwBV8ihstwjYejzQoONdPtysSPwDfQI
If6chqyVY7quiGWzjSEvN4QCHNMgmRyrr5LM90k/llsRW6AhdV5Kze8kM+Iwx4O3
RkRPjvxhKuDlM1xdVj9PTdW+JUM9117P8W3x7JpgbIrP0VW6TeSPuNyIVPI1wam6
DQYqUW2N75ZoENa7JO2+e17t1AkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQtaSPm
zZlzWGb5VNNqqLnHfjeZRDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZjYTE0YTQtMDA4Ny00NDJhLWI2NzMtNzVjYzIzMzc1Y2RmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HeQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAp2UehVemjAfKk+XxXFpQdppflXTUJj5WDWHt
3XWeV66FGryNSQj4Kyd4HgaEE87lKwCxsyyW6L7i+oVVhCgO6lu3gcfl9xDgWGjV
fO+NW3bZMc6vEsokye5wod3o7E8wfeZxBbEvKepHFCk53R8w0YMqrax8mGfTXhJ1
sdxWO3IUuZZCCcJwy3Mw/+fu9hGnd3qNxMm4sY1dnOK6oD1gmSCiyAfuUo374XoN
AJZ0dbph6eAaQoCxmJaw0f6mfEDanAsjlUNkJoNR3Dy1mO2Drm1O8iBPZgzEVDL1
VJnPuA/bzgfdq5hWQVHUir19KYkgDSshq3wpCodGPI6wbnjBDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:41 2025 by rpki-client