Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
File: b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa (raw, json)
Hash identifier: tSRrn0L0cE/dv9V6FcAGisdntdQVD/Xu/gxcMJZqAkg=
Subject key identifier: 70:AB:03:73:E8:58:A6:38:BA:BA:12:D7:41:94:19:72:73:A9:59:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5346615AF5F0F61CEFFD3B78464D65EB9D7EE452
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:46:61:5a:f5:f0:f6:1c:ef:fd:3b:78:46:4d:65:eb:9d:7e:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4c48991082141e44ccd0ef5fa58c1bbf78670d496076f146457fceb3c1bdc74b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:4d:cd:6e:94:61:45:98:b9:8f:0c:32:9f:
a3:d7:b1:b1:cd:27:31:a4:bb:2d:76:28:1c:22:d7:
64:fc:5a:4a:89:df:5e:f2:aa:7f:9a:2c:02:e8:d0:
4b:22:72:b5:3b:d8:0d:a3:ae:ff:ee:f5:16:f6:ca:
d6:99:85:cf:cc:4a:7e:5e:ad:96:a0:49:7c:51:32:
c1:6a:e9:ed:54:b5:70:7f:de:02:f8:f0:8c:2a:a0:
ad:4d:89:27:4d:b3:5d:74:20:e3:e7:11:28:a6:b4:
86:3e:4e:06:81:ce:a0:ef:3e:be:ba:4a:28:1a:a8:
b9:0a:a0:2a:01:27:d7:61:19:a0:ee:b0:87:8a:e1:
4c:1d:39:a4:ff:b4:4e:eb:97:4c:a4:cf:ef:2c:f1:
7d:bb:98:ed:bf:71:ba:77:99:6e:f8:bd:70:47:c3:
56:23:7a:5e:ea:e6:d2:1f:13:ef:16:db:69:55:97:
52:35:78:b7:db:61:0f:db:68:ea:e6:aa:44:f0:62:
dd:11:60:ce:c8:b7:4a:9f:57:4a:53:e1:b2:a5:6b:
89:78:10:62:a2:96:24:93:90:a0:b0:98:0c:1d:2e:
f4:c9:72:99:72:f2:36:51:a8:8d:c3:e2:32:72:6f:
03:52:8c:6b:09:fc:04:a1:51:9e:bc:4e:9a:fd:ac:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:03:73:E8:58:A6:38:BA:BA:12:D7:41:94:19:72:73:A9:59:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e:800::/38
Signature Algorithm: sha256WithRSAEncryption
4c:0d:7f:46:df:62:33:28:bd:64:b9:48:d8:2d:ea:d6:c8:a3:
e9:b8:ce:83:ee:f5:cc:52:41:9c:f2:aa:62:9d:d6:9e:21:f8:
7e:66:2d:6b:d7:0b:b8:16:b8:ee:36:a2:18:bf:47:79:cb:86:
d3:71:cc:31:d1:31:e9:01:85:ae:4f:63:a4:a0:ca:1a:da:f7:
3f:86:f3:b7:12:46:58:07:9b:d1:07:92:86:e1:45:ca:93:8c:
5d:43:90:a1:92:c4:8d:76:e0:4f:b7:c0:b8:0c:1e:84:24:86:
4c:46:9b:37:59:09:af:26:23:e6:c9:6f:c0:42:e2:31:4a:79:
ee:b9:6a:6f:1e:bf:56:a5:12:6b:b7:b9:c7:ee:14:e3:fc:ca:
d0:4d:75:ed:b0:04:4b:d8:35:14:2a:c8:9a:08:50:44:4d:41:
72:5b:32:bc:4f:01:a0:92:ac:8f:45:d6:9c:4f:9e:d9:43:64:
d7:d0:c0:cb:06:ed:cb:1d:ed:b8:5d:8f:92:e5:3f:d1:9f:62:
05:7a:93:a5:1a:58:f2:5b:3e:00:65:e1:ff:e0:3b:19:2a:59:
e2:14:23:81:2c:48:25:74:88:28:07:c2:2d:48:aa:e5:e1:ca:
e1:a3:43:5d:1c:2c:fd:02:ee:67:2f:76:9a:c3:86:20:7c:1d:
cb:a9:6e:40
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUU0ZhWvXw9hzv/Tt4Rk1l651+5FIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDRjNDg5OTEwODIxNDFlNDRjY2QwZWY1ZmE1OGMxYmJmNzg2NzBkNDk2MDc2
ZjE0NjQ1N2ZjZWIzYzFiZGM3NGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdXTc1ulGFFmLmPDDKfo9exsc0nMaS7LXYoHCLXZPxaSonfXvKqf5osAujQ
SyJytTvYDaOu/+71FvbK1pmFz8xKfl6tlqBJfFEywWrp7VS1cH/eAvjwjCqgrU2J
J02zXXQg4+cRKKa0hj5OBoHOoO8+vrpKKBqouQqgKgEn12EZoO6wh4rhTB05pP+0
TuuXTKTP7yzxfbuY7b9xuneZbvi9cEfDViN6Xurm0h8T7xbbaVWXUjV4t9thD9to
6uaqRPBi3RFgzsi3Sp9XSlPhsqVriXgQYqKWJJOQoLCYDB0u9MlymXLyNlGojcPi
MnJvA1KMawn8BKFRnrxOmv2sPVECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRwqwNz
6FimOLq6EtdBlBlyc6lZ9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yjc2NjgzZmItZDQxZi00YmZkLWJhNzgtYjRiMjQ5MmFjZDFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0B4I
MA0GCSqGSIb3DQEBCwUAA4IBAQBMDX9G32IzKL1kuUjYLerWyKPpuM6D7vXMUkGc
8qpindaeIfh+Zi1r1wu4FrjuNqIYv0d5y4bTccwx0THpAYWuT2OkoMoa2vc/hvO3
EkZYB5vRB5KG4UXKk4xdQ5ChksSNduBPt8C4DB6EJIZMRps3WQmvJiPmyW/AQuIx
SnnuuWpvHr9WpRJrt7nH7hTj/MrQTXXtsARL2DUUKsiaCFBETUFyWzK8TwGgkqyP
RdacT57ZQ2TX0MDLBu3LHe24XY+S5T/Rn2IFepOlGljyWz4AZeH/4DsZKlniFCOB
LEgldIgoB8ItSKrl4crho0NdHCz9Au5nL3aaw4YgfB3LqW5A
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:51 2025 by rpki-client