Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
File: b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa (raw, json)
Hash identifier: BTuBrEZv5GWFvmAA7NNrhXd9cL/UFwFNDISBGQ4wS/4=
Subject key identifier: 4C:1C:41:18:0A:35:E9:BA:AF:35:35:5B:5B:1A:D4:CD:DA:68:99:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 759093956B4DB73D45616148B1EB2A45A9D4FF60
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:90:93:95:6b:4d:b7:3d:45:61:61:48:b1:eb:2a:45:a9:d4:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=e7c0a3c17ce1dc5ca311855c98846f412062af1671f149a8b66008c82a5408ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:c1:e6:e9:ba:9b:e8:26:bf:94:d9:b6:41:
ce:2d:65:b0:a2:89:a5:30:7f:b0:46:9e:d7:71:75:
94:5a:f2:21:98:27:3c:d4:d9:13:76:42:c2:a3:b7:
32:7b:97:e5:92:2f:56:66:1e:6a:1e:d0:18:66:d3:
c3:82:70:30:53:f3:15:f0:ba:91:5c:b1:04:d7:eb:
59:2c:67:36:30:20:71:06:f5:ff:3a:fc:6f:5f:45:
af:d2:a7:49:5b:10:d1:4c:f0:61:0e:96:f9:0a:fd:
05:f7:9b:62:ce:38:53:f2:f1:b3:81:32:ed:88:c0:
bd:fe:aa:aa:d0:a0:55:ff:89:e2:6b:48:17:6f:c0:
77:69:c7:b3:2a:52:ad:e1:f4:92:fc:6b:9c:bf:24:
8f:a3:ed:c3:ab:6f:1e:f7:97:86:b5:fb:77:ee:6c:
83:06:c4:ca:fb:1c:4a:da:24:0c:3e:cc:c6:00:39:
19:34:f6:8c:dc:bc:0f:ee:9d:80:b7:93:15:83:49:
9d:20:f4:1a:f7:f8:13:01:1f:3b:d5:63:74:22:76:
58:73:d3:cd:f8:79:91:6f:b4:90:44:c6:fc:29:99:
ed:a3:8c:57:08:e1:4b:8d:dd:7e:1b:73:12:ef:5c:
31:4a:ab:47:cd:8a:f1:11:0a:0e:50:76:ed:7a:da:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:41:18:0A:35:E9:BA:AF:35:35:5B:5B:1A:D4:CD:DA:68:99:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
64:c8:87:b9:8c:60:71:04:d7:6c:24:9f:f2:97:05:d6:bd:c9:
fc:74:d6:cd:14:e0:96:59:07:3a:af:3c:ea:6c:d2:ff:5b:59:
56:37:c6:34:b4:1a:a6:8c:f6:9b:d3:8d:f4:18:8e:54:c4:b0:
4d:50:ab:d8:eb:73:09:c6:0f:c9:b6:45:1e:ca:2f:3d:b3:e3:
e4:63:5f:48:ab:70:5e:24:d6:51:e1:c8:c7:c3:81:03:19:65:
fa:a7:5d:53:c7:ca:b3:cd:53:5c:0d:ac:6b:04:ed:e6:10:c2:
c7:17:ba:92:d7:02:1b:26:cb:cd:7e:42:21:05:73:a1:5f:d9:
a0:7f:19:bd:dc:43:c3:07:2e:69:d9:a5:7d:8b:db:4f:10:d8:
04:ba:e7:cd:3f:d7:ad:23:94:fd:a5:ab:a6:5d:a8:85:7d:64:
bb:ce:fd:20:6b:1c:88:cf:80:cd:b1:87:e9:a0:fc:0d:f8:c9:
23:f1:b0:08:1d:22:f6:c8:1c:c6:e3:63:ca:c0:62:09:ec:21:
19:a8:cb:87:ce:1b:bf:06:0b:51:71:2f:b5:86:dd:9a:13:7b:
f0:0f:73:4a:57:87:44:ff:b8:52:ee:29:f7:75:2f:f6:2d:20:
ae:a1:f0:b1:51:66:03:ba:3b:21:50:c5:aa:19:ed:5d:a9:bd:
e7:5a:0b:d2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdZCTlWtNtz1FYWFIsesqRanU/2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGU3YzBhM2MxN2NlMWRjNWNhMzExODU1Yzk4ODQ2ZjQxMjA2MmFmMTY3MWYx
NDlhOGI2NjAwOGM4MmE1NDA4ZmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN/QwebpupvoJr+U2bZBzi1lsKKJpTB/sEae13F1lFryIZgnPNTZE3ZCwqO3
MnuX5ZIvVmYeah7QGGbTw4JwMFPzFfC6kVyxBNfrWSxnNjAgcQb1/zr8b19Fr9Kn
SVsQ0UzwYQ6W+Qr9BfebYs44U/Lxs4Ey7YjAvf6qqtCgVf+J4mtIF2/Ad2nHsypS
reH0kvxrnL8kj6Ptw6tvHveXhrX7d+5sgwbEyvscStokDD7MxgA5GTT2jNy8D+6d
gLeTFYNJnSD0Gvf4EwEfO9VjdCJ2WHPTzfh5kW+0kETG/CmZ7aOMVwjhS43dfhtz
Eu9cMUqrR82K8REKDlB27XrafqMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRMHEEY
CjXpuq81NVtbGtTN2miZnzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjhkNThjYTYtNjAzZS00MmJiLWEwYTktN2ZiMTA2YmI0ZGUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBkyIe5jGBxBNdsJJ/ylwXWvcn8dNbNFOCWWQc6
rzzqbNL/W1lWN8Y0tBqmjPab0430GI5UxLBNUKvY63MJxg/JtkUeyi89s+PkY19I
q3BeJNZR4cjHw4EDGWX6p11Tx8qzzVNcDaxrBO3mEMLHF7qS1wIbJsvNfkIhBXOh
X9mgfxm93EPDBy5p2aV9i9tPENgEuufNP9etI5T9paumXaiFfWS7zv0gaxyIz4DN
sYfpoPwN+Mkj8bAIHSL2yBzG42PKwGIJ7CEZqMuHzhu/BgtRcS+1ht2aE3vwD3NK
V4dE/7hS7in3dS/2LSCuofCxUWYDujshUMWqGe1dqb3nWgvS
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:15 2025 by rpki-client