Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
File: a6d14d01-1a1b-448e-bb4a-73279a06c540.roa (raw, json)
Hash identifier: uAe7XYXEJT7gMPx3D1JDsPYD0rTrPiMlPwVI0GBCI8w=
Subject key identifier: 34:67:23:21:91:4F:06:6D:38:67:CD:1D:85:DA:7A:35:A3:38:27:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11E2A5168744279B62A1988D10DC9AAD81CB0C77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e2:a5:16:87:44:27:9b:62:a1:98:8d:10:dc:9a:ad:81:cb:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ba0e2c52012a6ebe0e43d06edb2b1625efee624bb7ff2fe7b5c5f6ed5b662502, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:b1:1f:a1:10:66:06:14:bf:9b:b2:2b:f4:
94:66:34:9d:39:d2:90:2e:ec:90:f5:c4:09:2c:6b:
18:89:c4:b1:aa:e0:94:59:00:d1:8e:f5:ed:3e:19:
e8:7e:65:20:a6:5e:96:b0:e4:1a:ea:1a:72:41:ca:
89:3e:91:e8:0b:ca:e5:c6:c6:24:ac:98:31:57:7d:
53:13:0c:bd:84:6b:c5:5f:49:b1:dc:e2:d2:41:8e:
ef:49:43:17:01:d6:b5:1f:be:6b:b3:c6:25:b2:6c:
8b:07:b4:4f:29:9a:3c:94:b5:b4:d9:8a:a9:9c:94:
2d:06:8c:95:a7:01:21:2f:cb:68:22:31:49:90:45:
87:de:de:c0:13:c0:7f:69:82:20:56:24:60:89:2d:
17:2d:e7:8c:cc:42:a9:dd:63:94:50:19:21:fd:c1:
45:c8:35:c1:92:75:0b:4c:a9:e5:0e:63:d0:6d:19:
f1:a1:60:b4:4e:b1:4d:fd:e7:1a:d9:78:a1:82:a7:
ae:da:25:3b:98:ac:31:75:91:0c:43:58:54:56:66:
cf:61:fb:f1:db:3f:49:ad:7f:e9:3b:fe:70:4f:8c:
14:4e:2c:2f:ad:fa:45:00:85:eb:af:0f:6a:36:e3:
56:28:eb:20:9e:22:95:1f:77:0b:a0:02:6b:e2:9c:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:23:21:91:4F:06:6D:38:67:CD:1D:85:DA:7A:35:A3:38:27:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5040::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e6:24:a6:d5:1e:37:98:9d:a2:dd:11:d6:2e:09:f3:e3:56:
cf:42:2e:eb:7e:28:9e:85:b1:19:79:68:5e:f6:fe:4a:86:2f:
02:c0:43:3d:24:8d:01:31:ca:ad:63:1c:8c:9d:be:81:04:b0:
4d:87:9f:64:cc:11:20:a8:70:f3:4a:e2:19:43:a8:f3:56:69:
77:44:20:52:95:2f:51:32:ed:72:d6:37:83:63:4d:d9:e4:c4:
50:12:e4:eb:32:1f:9f:a1:1d:56:a1:bf:87:88:06:21:11:4d:
37:12:15:28:21:f8:01:cd:af:d5:a2:fb:12:39:4e:bb:0e:8f:
04:ec:69:45:d0:40:40:6a:c2:25:43:da:8c:aa:c9:a3:1e:56:
7b:b7:e8:9b:80:a9:f8:8f:96:29:97:34:87:9c:6f:8b:3d:48:
52:dc:94:4d:d8:71:58:6c:ad:09:7b:8c:d0:95:5d:0a:cf:53:
35:08:b6:86:9b:4f:67:6f:ea:8a:bf:35:3a:44:3b:7d:41:78:
8b:41:52:fc:33:01:46:c6:ca:f7:73:bf:2a:b8:b7:e0:d1:1e:
ce:d4:df:d5:b3:24:05:b8:33:49:59:76:75:50:da:60:e0:07:
9e:06:e8:4e:a5:33:04:b0:a5:47:1d:7a:2b:d7:5a:d4:3a:a8:
bd:1b:cd:15
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUEeKlFodEJ5tioZiNENyarYHLDHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhMGUyYzUyMDEyYTZlYmUwZTQzZDA2ZWRiMmIxNjI1ZWZlZTYyNGJiN2Zm
MmZlN2I1YzVmNmVkNWI2NjI1MDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ3tsR+hEGYGFL+bsiv0lGY0nTnSkC7skPXECSxrGInEsarglFkA0Y717T4Z
6H5lIKZelrDkGuoackHKiT6R6AvK5cbGJKyYMVd9UxMMvYRrxV9Jsdzi0kGO70lD
FwHWtR++a7PGJbJsiwe0TymaPJS1tNmKqZyULQaMlacBIS/LaCIxSZBFh97ewBPA
f2mCIFYkYIktFy3njMxCqd1jlFAZIf3BRcg1wZJ1C0yp5Q5j0G0Z8aFgtE6xTf3n
Gtl4oYKnrtolO5isMXWRDENYVFZmz2H78ds/Sa1/6Tv+cE+MFE4sL636RQCF668P
ajbjVijrIJ4ilR93C6ACa+Kc4UECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ0ZyMh
kU8GbThnzR2F2no1ozgn2DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZkMTRkMDEtMWExYi00NDhlLWJiNGEtNzMyNzlhMDZjNTQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAGuYkptUeN5idot0R1i4J8+NWz0Iu634onoWx
GXloXvb+SoYvAsBDPSSNATHKrWMcjJ2+gQSwTYefZMwRIKhw80riGUOo81Zpd0Qg
UpUvUTLtctY3g2NN2eTEUBLk6zIfn6EdVqG/h4gGIRFNNxIVKCH4Ac2v1aL7EjlO
uw6PBOxpRdBAQGrCJUPajKrJox5We7fom4Cp+I+WKZc0h5xviz1IUtyUTdhxWGyt
CXuM0JVdCs9TNQi2hptPZ2/qir81OkQ7fUF4i0FS/DMBRsbK93O/Kri34NEeztTf
1bMkBbgzSVl2dVDaYOAHngboTqUzBLClRx16K9da1DqovRvNFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:52 2025 by rpki-client