Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
File: bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa (raw, json)
Hash identifier: eh/fmbEUXUYVJSUAXBMK17XEen9SUycFodlPPHDrkDo=
Subject key identifier: EC:60:EA:80:7E:9B:66:F0:24:C2:29:BF:1A:EA:3A:3F:41:6B:08:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6502EB271297F1C129D7E70220CC43CD425A356C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:02:eb:27:12:97:f1:c1:29:d7:e7:02:20:cc:43:cd:42:5a:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=cfbe4682596aa601a317533b3388178f60a680fdf9f880970ce13b9dc357b40a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:78:a4:05:df:c5:4f:c0:4d:9c:3d:f9:ca:
75:af:16:f6:80:91:23:5c:6a:79:47:98:09:ed:5c:
f2:65:29:27:34:aa:b7:fa:97:d9:b5:21:47:96:a5:
fa:ec:fa:cb:7a:aa:4f:50:e6:8b:84:e1:e1:a9:a5:
4d:dc:a5:c4:f3:7b:3b:74:60:01:68:14:fc:e9:52:
d7:8d:4f:35:2d:38:53:74:a4:13:fa:a5:7d:dd:71:
fe:91:74:be:8d:20:22:7e:0d:b0:8e:c3:14:b8:5a:
c6:7f:4f:59:6d:77:d1:55:7c:df:08:34:23:6e:4d:
8b:15:b0:0f:b1:90:f8:e7:30:fa:2f:95:9e:44:09:
e7:68:bf:d5:1a:0d:eb:32:c3:02:14:30:2f:5d:61:
36:27:4b:a9:42:a3:a1:e9:bb:d2:a1:0b:17:bf:7c:
ba:9f:56:55:7d:9e:7d:ff:9a:3f:6b:18:e5:23:ca:
3e:b7:71:8d:7a:37:03:f5:00:65:2e:48:52:c9:35:
29:f8:c2:70:8f:fe:5a:1e:4e:95:78:8f:50:86:aa:
8e:44:a2:07:eb:15:53:37:0a:8e:20:cf:2c:4f:c4:
fc:ed:18:a1:66:0e:69:68:f7:bb:69:c6:ab:78:dd:
44:e3:9f:0a:89:cc:5b:c8:ac:22:3c:7b:13:7a:01:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:EA:80:7E:9B:66:F0:24:C2:29:BF:1A:EA:3A:3F:41:6B:08:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8000::/40
Signature Algorithm: sha256WithRSAEncryption
45:8d:f3:e3:4e:cc:cd:eb:b3:a1:d6:4b:95:92:54:c6:33:32:
52:98:ac:38:b8:82:97:55:78:db:84:34:fb:8f:6b:1f:c0:f3:
23:06:16:ce:c7:f0:41:fc:b4:08:6e:ac:9c:ac:88:00:67:47:
13:6b:a7:31:1c:04:f3:50:32:64:c2:c0:30:44:58:3b:e7:16:
0a:42:bc:b4:6f:bf:26:7c:f5:96:14:9a:bb:42:00:02:3c:b7:
5a:f0:27:31:2d:16:0e:ac:6c:28:61:d0:3e:0f:e6:ff:49:46:
b9:77:2b:a6:68:05:6c:15:4c:ea:06:2f:fa:14:a2:16:2f:03:
86:2b:9c:84:2b:41:a7:56:f0:d1:e8:d2:e4:0f:e4:2c:e1:be:
66:50:11:41:c6:4f:3a:d8:af:d8:87:2f:17:59:7d:4d:24:98:
c3:cb:5f:69:45:ef:26:a2:18:64:06:f6:ac:03:af:cb:14:c6:
8e:1a:3a:db:eb:cd:e9:87:62:0d:a4:8d:a0:82:be:b3:0f:07:
39:23:0e:8e:42:58:31:ea:11:2e:a2:34:b1:d2:f1:e2:40:fe:
50:37:44:d7:f6:2d:cc:7a:83:43:15:eb:8b:13:ac:05:c2:c4:
3e:f4:ab:f3:19:94:af:80:b4:61:69:3c:31:e7:ae:68:42:b9:
59:22:c7:72
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZQLrJxKX8cEp1+cCIMxDzUJaNWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGNmYmU0NjgyNTk2YWE2MDFhMzE3NTMzYjMzODgxNzhmNjBhNjgwZmRmOWY4
ODA5NzBjZTEzYjlkYzM1N2I0MGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANrFeKQF38VPwE2cPfnKda8W9oCRI1xqeUeYCe1c8mUpJzSqt/qX2bUhR5al
+uz6y3qqT1Dmi4Th4amlTdylxPN7O3RgAWgU/OlS141PNS04U3SkE/qlfd1x/pF0
vo0gIn4NsI7DFLhaxn9PWW130VV83wg0I25NixWwD7GQ+Ocw+i+VnkQJ52i/1RoN
6zLDAhQwL11hNidLqUKjoem70qELF798up9WVX2eff+aP2sY5SPKPrdxjXo3A/UA
ZS5IUsk1KfjCcI/+Wh5OlXiPUIaqjkSiB+sVUzcKjiDPLE/E/O0YoWYOaWj3u2nG
q3jdROOfConMW8isIjx7E3oBlAUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTsYOqA
fptm8CTCKb8a6jo/QWsIZDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRkZjNkNmYtMzdiMC00YjZjLTkzZmEtMjc1M2Q4NzAwYjk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HeA
MA0GCSqGSIb3DQEBCwUAA4IBAQBFjfPjTszN67Oh1kuVklTGMzJSmKw4uIKXVXjb
hDT7j2sfwPMjBhbOx/BB/LQIbqycrIgAZ0cTa6cxHATzUDJkwsAwRFg75xYKQry0
b78mfPWWFJq7QgACPLda8CcxLRYOrGwoYdA+D+b/SUa5dyumaAVsFUzqBi/6FKIW
LwOGK5yEK0GnVvDR6NLkD+Qs4b5mUBFBxk862K/Yhy8XWX1NJJjDy19pRe8mohhk
BvasA6/LFMaOGjrb683ph2INpI2ggr6zDwc5Iw6OQlgx6hEuojSx0vHiQP5QN0TX
9i3MeoNDFeuLE6wFwsQ+9KvzGZSvgLRhaTwx565oQrlZIsdy
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:52 2025 by rpki-client