Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
File: ac551e9a-50f2-4eff-9247-e71429bd9c80.roa (raw, json)
Hash identifier: OH0sucImNxcTY1zdSieQ1wHHcqH7qwyFbDQXt+T5wao=
Subject key identifier: 14:63:9B:48:1C:1A:D7:39:A2:26:55:B3:36:F9:9F:76:2D:32:BC:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78CB28DCEBBF1B82A04DDBFB53AF12D6B599C133
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cb:28:dc:eb:bf:1b:82:a0:4d:db:fb:53:af:12:d6:b5:99:c1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=a0a50ac36cbae4bbaa66e445d932922d879d41b750640c0cfe7b91a1fe6a622f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:dd:52:c7:2c:f0:bf:de:7e:b1:58:3f:ff:
09:9f:8b:8d:da:5a:fb:36:81:60:47:c0:02:3b:9a:
37:f3:59:3a:ab:06:65:27:3b:3a:fb:45:21:02:55:
38:59:90:3e:bb:72:71:6b:26:cd:79:33:c3:77:01:
c0:34:b9:d3:2c:1c:ee:a3:5f:b3:91:cd:30:32:dd:
42:b9:46:89:1d:fb:90:b4:70:9b:90:ca:c9:50:13:
19:8a:eb:54:37:aa:4b:6d:e0:16:e2:f0:ba:8d:f8:
96:cd:70:5d:8b:4d:7e:8b:a0:4d:ba:b9:48:61:b5:
63:5b:ec:f9:10:ed:21:d9:e5:f6:4e:89:27:7b:bf:
5e:e7:c1:cb:d9:f4:db:24:9c:5e:39:56:35:61:7a:
9c:42:a5:0f:89:ae:47:48:25:f6:bc:0f:65:82:e0:
bd:89:ba:e9:da:ba:77:53:b3:69:38:52:c2:1a:54:
eb:3f:3e:be:19:fd:13:f1:e7:e7:cf:a7:1a:52:00:
a6:86:f4:c1:05:b3:c2:5e:1f:8e:5a:2e:3a:24:e1:
2c:f5:7b:d0:7e:96:ba:b3:f0:6d:6e:8a:79:89:69:
8b:b0:d0:c4:5f:e6:7d:c6:c2:f0:e9:86:7d:3a:e9:
d3:a0:54:a7:46:d9:ec:6b:f1:01:9d:74:9c:5f:19:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:9B:48:1C:1A:D7:39:A2:26:55:B3:36:F9:9F:76:2D:32:BC:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b080::/48
Signature Algorithm: sha256WithRSAEncryption
6b:04:86:17:0e:a9:56:5b:7b:21:62:7d:a7:10:15:14:8f:a5:
4d:11:a7:a7:4b:d3:c4:c7:7f:ba:11:fd:b1:c2:53:d1:b1:94:
83:db:7c:ed:f8:12:a1:b2:9c:b5:86:f1:f8:cf:50:a3:c5:98:
90:fb:d8:10:88:80:84:26:d2:9a:80:c3:58:3f:0b:b7:92:3d:
14:b9:e6:5b:d8:ea:6b:b2:e7:0d:4e:cf:c3:eb:fc:8a:59:23:
4b:c5:0d:6b:42:94:af:a5:a3:c6:9c:48:83:86:d8:c2:88:ce:
d9:ee:37:1b:fe:bc:d9:c2:82:c1:bc:a7:1f:27:a6:c5:30:9a:
63:4d:40:09:22:a8:0d:92:61:02:92:33:66:a1:6a:89:54:fb:
48:44:d9:68:25:c0:b2:43:d7:4b:48:3d:4d:58:0f:5d:a2:99:
41:97:30:3b:49:5a:4c:bf:f8:ab:7b:8b:b8:69:52:78:ba:ed:
26:8b:47:a0:89:22:43:ec:19:14:10:a5:4d:cf:ef:3f:90:50:
c6:a0:fa:94:3b:8a:66:4a:aa:49:b9:ee:80:79:fd:3f:c6:40:
79:81:f5:f3:a8:e5:27:71:40:e4:4e:9c:8d:0d:c3:8a:4a:b6:
2a:96:59:70:c6:53:12:4a:04:97:cc:f0:d9:dd:d4:42:03:3d:
e1:a5:36:7e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUeMso3Ou/G4KgTdv7U68S1rWZwTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGEwYTUwYWMzNmNiYWU0YmJhYTY2ZTQ0NWQ5MzI5MjJkODc5ZDQxYjc1MDY0
MGMwY2ZlN2I5MWExZmU2YTYyMmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxU3VLHLPC/3n6xWD//CZ+Ljdpa+zaBYEfAAjuaN/NZOqsGZSc7OvtFIQJV
OFmQPrtycWsmzXkzw3cBwDS50ywc7qNfs5HNMDLdQrlGiR37kLRwm5DKyVATGYrr
VDeqS23gFuLwuo34ls1wXYtNfougTbq5SGG1Y1vs+RDtIdnl9k6JJ3u/XufBy9n0
2yScXjlWNWF6nEKlD4muR0gl9rwPZYLgvYm66dq6d1OzaThSwhpU6z8+vhn9E/Hn
58+nGlIApob0wQWzwl4fjlouOiThLPV70H6WurPwbW6KeYlpi7DQxF/mfcbC8OmG
fTrp06BUp0bZ7GvxAZ10nF8Z5acCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQUY5tI
HBrXOaImVbM2+Z92LTK8szAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWM1NTFlOWEtNTBmMi00ZWZmLTkyNDctZTcxNDI5YmQ5YzgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HSw
gDANBgkqhkiG9w0BAQsFAAOCAQEAawSGFw6pVlt7IWJ9pxAVFI+lTRGnp0vTxMd/
uhH9scJT0bGUg9t87fgSobKctYbx+M9Qo8WYkPvYEIiAhCbSmoDDWD8Lt5I9FLnm
W9jqa7LnDU7Pw+v8ilkjS8UNa0KUr6WjxpxIg4bYwojO2e43G/682cKCwbynHyem
xTCaY01ACSKoDZJhApIzZqFqiVT7SETZaCXAskPXS0g9TVgPXaKZQZcwO0laTL/4
q3uLuGlSeLrtJotHoIkiQ+wZFBClTc/vP5BQxqD6lDuKZkqqSbnugHn9P8ZAeYH1
86jlJ3FA5E6cjQ3Dikq2KpZZcMZTEkoEl8zw2d3UQgM94aU2fg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:39 2025 by rpki-client