Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
File: becace4c-6c39-4717-a2f1-594859d36d53.roa (raw, json)
Hash identifier: UMRmeSGn+01Br1tj33/zL/uCe2Wdo+6+tgR9VCRo31A=
Subject key identifier: 0B:F4:4E:E7:9D:30:8B:CE:83:D5:9F:21:62:BA:E9:27:06:6A:12:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3224FEFD17F5A09A0515D8E126BD2ECEE148C4E4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:10c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:24:fe:fd:17:f5:a0:9a:05:15:d8:e1:26:bd:2e:ce:e1:48:c4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fee3040f3b568ca76c1eed7d86106c8f2aa6841daa7dd990aec78fce6c932a19, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:b0:4b:df:d4:ed:1a:29:af:9d:c8:c2:5c:
5a:51:fe:e0:64:6a:10:54:44:e5:a9:c2:4c:7d:17:
01:48:94:34:b7:ac:34:fb:18:7e:e8:79:04:e7:45:
3e:10:db:4c:d8:6a:35:dc:71:30:ce:1e:80:bd:d3:
fc:6a:f6:8f:a7:9c:e5:03:78:ff:c2:77:63:c0:31:
8c:40:cb:56:7b:d3:fa:5d:8a:4e:b9:0d:e6:af:f0:
c7:f9:97:81:22:fd:86:7a:62:d5:9f:43:a8:c2:73:
03:aa:a9:6b:f1:39:a6:ef:d2:5a:47:f8:cc:95:74:
82:f7:01:5d:d7:1b:e0:4e:48:fd:cf:6e:43:d9:43:
8c:8e:80:21:af:1a:01:61:a4:9e:6e:1f:de:5d:98:
77:3a:d2:8c:a2:e1:95:82:f7:c4:c0:cd:0d:3f:7e:
be:c0:6e:76:2c:27:59:db:b2:ea:91:dc:59:0b:ab:
d1:38:9b:22:da:4c:49:f9:be:47:a6:f7:36:c0:8c:
3c:62:1a:bb:07:53:41:86:48:31:30:67:dd:c7:d2:
93:5f:7c:3c:ce:ad:f3:e0:c1:b3:f9:ba:b7:2b:ea:
32:f1:e0:84:71:4e:c6:8a:ad:c1:be:f7:b0:76:f2:
cc:42:06:f0:40:fd:70:c8:ef:fc:84:33:3a:46:37:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:4E:E7:9D:30:8B:CE:83:D5:9F:21:62:BA:E9:27:06:6A:12:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
ab:ad:52:79:2c:f6:3d:b4:a2:ec:37:4c:1e:fa:14:b6:4e:1a:
4a:6c:65:c5:72:7d:3d:56:ad:b6:29:b3:1f:1c:34:26:7d:78:
91:13:98:d3:4a:ec:04:16:99:1c:17:6e:43:8b:d1:04:7e:c1:
d6:24:85:9d:c8:f5:cf:ac:59:43:dd:91:a4:15:f8:50:b8:01:
b3:69:36:b4:93:64:69:52:44:ff:17:b2:9c:56:d7:f8:fe:34:
e1:b4:27:55:4c:6c:97:69:d0:d9:68:26:05:c7:0b:db:ad:8c:
03:18:18:35:3c:04:6a:8e:02:5b:4d:d2:90:83:d1:cc:65:42:
27:5b:03:21:1f:15:be:47:cb:43:2c:b8:a2:d6:ce:16:0d:b3:
8b:0b:7a:1b:ba:17:b0:29:35:70:6d:1f:5b:ed:2a:25:26:da:
2f:21:6b:fe:76:43:48:a9:be:76:5a:dc:ba:5a:92:33:0a:b6:
9d:b9:3b:ea:75:fd:e7:f3:8e:bb:54:ba:43:8a:15:90:e1:8b:
ce:dc:c0:03:c0:02:47:fd:f9:7f:30:33:64:fd:74:93:29:4c:
56:1a:44:f2:c3:9d:6c:17:8c:f8:91:27:e8:10:c5:db:4b:5a:
a1:d6:c5:fd:69:9e:b1:d0:1a:20:c2:88:4d:1b:61:c9:25:41:
e1:5a:1a:0c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMiT+/Rf1oJoFFdjhJr0uzuFIxOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGZlZTMwNDBmM2I1NjhjYTc2YzFlZWQ3ZDg2MTA2YzhmMmFhNjg0MWRhYTdk
ZDk5MGFlYzc4ZmNlNmM5MzJhMTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI8UsEvf1O0aKa+dyMJcWlH+4GRqEFRE5anCTH0XAUiUNLesNPsYfuh5BOdF
PhDbTNhqNdxxMM4egL3T/Gr2j6ec5QN4/8J3Y8AxjEDLVnvT+l2KTrkN5q/wx/mX
gSL9hnpi1Z9DqMJzA6qpa/E5pu/SWkf4zJV0gvcBXdcb4E5I/c9uQ9lDjI6AIa8a
AWGknm4f3l2YdzrSjKLhlYL3xMDNDT9+vsBudiwnWduy6pHcWQur0TibItpMSfm+
R6b3NsCMPGIauwdTQYZIMTBn3cfSk198PM6t8+DBs/m6tyvqMvHghHFOxoqtwb73
sHbyzEIG8ED9cMjv/IQzOkY3WYcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQL9E7n
nTCLzoPVnyFiuuknBmoSwjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmVjYWNlNGMtNmMzOS00NzE3LWEyZjEtNTk0ODU5ZDM2ZDUzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HcQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAq61SeSz2PbSi7DdMHvoUtk4aSmxlxXJ9PVat
timzHxw0Jn14kROY00rsBBaZHBduQ4vRBH7B1iSFncj1z6xZQ92RpBX4ULgBs2k2
tJNkaVJE/xeynFbX+P404bQnVUxsl2nQ2WgmBccL262MAxgYNTwEao4CW03SkIPR
zGVCJ1sDIR8VvkfLQyy4otbOFg2ziwt6G7oXsCk1cG0fW+0qJSbaLyFr/nZDSKm+
dlrculqSMwq2nbk76nX95/OOu1S6Q4oVkOGLztzAA8ACR/35fzAzZP10kylMVhpE
8sOdbBeM+JEn6BDF20taodbF/WmesdAaIMKITRthySVB4VoaDA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:59 2025 by rpki-client