Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
File: bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa (raw, json)
Hash identifier: 3nSqI3xwKxohthdkYgrfuoCF+LpCsBnRhnSg+BlUhpU=
Subject key identifier: C9:7E:70:62:B6:10:67:14:6C:E2:F2:38:BB:76:4B:98:B1:A1:BD:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46D325AC8F26460DDD6603C650FBC52555B9715B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d3:25:ac:8f:26:46:0d:dd:66:03:c6:50:fb:c5:25:55:b9:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=87a704f01e86a6d802fa13f501378a4e8e41a89638752980bcee4eaabee37338, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:ed:6d:bc:47:78:e3:4b:f2:89:af:a1:91:
0c:f6:00:ea:77:b9:26:97:d5:56:05:aa:4b:39:ae:
b8:6c:ac:a9:7b:e0:6b:53:46:7c:f8:f0:ef:d7:27:
98:90:9a:64:d2:20:a4:f4:bc:25:93:a8:3f:63:ac:
c1:40:f0:a7:18:25:d0:f5:44:6b:79:fc:22:3d:76:
ae:b1:4b:90:ce:ab:f0:dd:f6:2a:32:a3:d9:32:fe:
c6:76:71:25:14:09:65:ab:95:8b:0c:b7:09:a0:fa:
a0:61:3a:36:a4:c8:0d:61:fc:82:f2:96:e0:de:fe:
fb:3a:a0:d9:79:31:b5:3e:ec:60:32:5b:4c:5c:cd:
9b:33:6e:83:3f:f4:ff:33:ac:47:9d:03:87:dc:1c:
13:63:07:14:d3:61:62:71:88:3d:a8:0c:79:f5:9a:
b4:f9:04:3e:67:6b:99:39:93:46:d2:34:22:03:a1:
90:fa:c9:74:57:e7:68:e7:92:0d:60:21:41:1b:82:
9b:69:27:5f:d0:fe:41:00:33:68:ad:6a:f9:6c:42:
3c:f3:a9:d1:f2:b7:d7:5b:20:99:4c:7a:a3:7a:1c:
06:f9:dd:ee:56:df:5c:d2:aa:80:9c:8b:57:b0:b8:
56:42:e7:75:8c:5c:5c:2c:3e:25:7d:71:43:8e:5a:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:70:62:B6:10:67:14:6C:E2:F2:38:BB:76:4B:98:B1:A1:BD:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:5000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:d5:c9:6c:47:b2:b6:da:df:00:d5:33:ee:84:ad:d3:95:2c:
e6:a2:e9:0f:09:8b:78:89:ff:58:4a:c0:6a:ac:ec:c6:6c:b7:
3f:16:cd:71:f0:33:96:8d:0e:87:ac:5e:58:f7:e7:47:68:c7:
f0:bf:2c:b7:e1:52:4e:a2:a9:0e:3d:cf:b9:2d:eb:13:bf:ce:
4d:2e:b5:d1:7c:48:87:c3:99:d0:43:e3:ff:c9:eb:65:1a:38:
f6:a5:21:42:6d:0e:6f:7e:33:00:40:ca:8b:8c:d0:22:c5:fe:
02:f2:c2:9f:f1:5d:48:4b:12:2c:b3:a2:20:89:9b:ca:1e:c0:
4a:3e:1a:36:23:ee:f7:bd:20:c6:ad:ab:b5:9b:dc:bd:c3:1f:
c1:db:08:86:54:51:19:4f:80:b3:09:8e:ce:fd:9d:0d:35:48:
10:35:48:1d:29:49:8b:c8:3c:85:b3:78:24:27:4a:5d:85:b1:
58:05:00:5c:44:ff:9f:e2:f8:81:00:d5:85:a8:3f:21:ca:4b:
c2:36:76:a6:f9:5c:44:97:90:2b:f2:87:05:d4:d2:e3:32:90:
d0:54:39:df:7b:38:f6:68:e0:fb:9d:5d:a7:bc:40:8b:87:44:
26:6d:9a:35:0b:50:c4:55:bf:93:1b:f8:8c:eb:0d:3c:c4:77:
1d:65:f2:36
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURtMlrI8mRg3dZgPGUPvFJVW5cVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTAwMDAwMDBaFw0yNTAyMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDg3YTcwNGYwMWU4NmE2ZDgwMmZhMTNmNTAxMzc4YTRlOGU0MWE4OTYzODc1
Mjk4MGJjZWU0ZWFhYmVlMzczMzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKT27W28R3jjS/KJr6GRDPYA6ne5JpfVVgWqSzmuuGysqXvga1NGfPjw79cn
mJCaZNIgpPS8JZOoP2OswUDwpxgl0PVEa3n8Ij12rrFLkM6r8N32KjKj2TL+xnZx
JRQJZauViwy3CaD6oGE6NqTIDWH8gvKW4N7++zqg2XkxtT7sYDJbTFzNmzNugz/0
/zOsR50Dh9wcE2MHFNNhYnGIPagMefWatPkEPmdrmTmTRtI0IgOhkPrJdFfnaOeS
DWAhQRuCm2knX9D+QQAzaK1q+WxCPPOp0fK311sgmUx6o3ocBvnd7lbfXNKqgJyL
V7C4VkLndYxcXCw+JX1xQ45aoO8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTJfnBi
thBnFGzi8ji7dkuYsaG9ZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmM2OWY4ZjYtMDNjOC00NDY4LWE5OGEtZjIzZmU0MGVlYWVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAc1clsR7K22t8A1TPuhK3TlSzmoukPCYt4if9Y
SsBqrOzGbLc/Fs1x8DOWjQ6HrF5Y9+dHaMfwvyy34VJOoqkOPc+5LesTv85NLrXR
fEiHw5nQQ+P/yetlGjj2pSFCbQ5vfjMAQMqLjNAixf4C8sKf8V1ISxIss6IgiZvK
HsBKPho2I+73vSDGrau1m9y9wx/B2wiGVFEZT4CzCY7O/Z0NNUgQNUgdKUmLyDyF
s3gkJ0pdhbFYBQBcRP+f4viBANWFqD8hykvCNnam+VxEl5Ar8ocF1NLjMpDQVDnf
ezj2aOD7nV2nvECLh0QmbZo1C1DEVb+TG/iM6w08xHcdZfI2
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:26 2025 by rpki-client