Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
File: c575b6fa-c023-458f-85c8-9694aa053e43.roa (raw, json)
Hash identifier: TWXukdBE35OhU+2dVf60rOWDgsg0ZxY6kqLhLI3VfOo=
Subject key identifier: 97:47:74:50:91:72:17:9E:FC:A8:74:F0:2B:9B:59:34:44:28:C1:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C30F8C458B6948A0C7648C646073DE2D92AEE20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:30:f8:c4:58:b6:94:8a:0c:76:48:c6:46:07:3d:e2:d9:2a:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=f0f4ed8941de5b699a4d31eec08420e9120b63602d95497c31de9cbe621928a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:78:c9:7e:a4:a0:bc:6d:c9:e9:51:25:26:
2b:cf:df:24:53:ef:22:c9:f1:98:60:87:64:58:e8:
1c:71:a1:b1:2f:7f:d3:60:8e:52:bb:9e:89:4c:10:
77:34:88:c9:39:06:30:3b:d1:66:ca:c8:fa:ff:67:
20:d9:1c:2c:6b:c2:13:5a:c9:f8:be:50:72:9e:b3:
33:c1:51:55:ce:22:e7:04:7f:45:aa:5a:0a:2f:c9:
f7:3c:70:fc:23:fe:a9:61:6b:ef:45:be:be:b8:b7:
90:33:80:af:3c:b4:cf:f8:85:d0:ea:f7:29:b4:06:
11:11:1d:72:3e:f5:82:cb:ca:0b:03:68:82:02:e7:
23:e4:97:dc:70:19:a0:ea:71:3b:68:f4:00:d5:95:
70:02:66:de:96:df:05:29:17:39:44:d7:26:10:9b:
5a:39:cc:47:01:48:94:08:29:a4:6e:77:14:da:04:
a5:e5:80:f1:2d:0b:c2:58:90:7d:3c:f8:bc:15:af:
51:e6:be:cc:9b:3a:46:34:be:04:a4:14:30:25:cd:
ee:b7:8d:af:52:ac:6d:e7:54:90:2d:8f:13:48:db:
cb:cf:91:fe:4a:b0:b9:aa:36:6f:fa:72:ad:60:66:
12:85:e7:23:b0:4b:6f:01:6b:1b:15:8d:8c:a2:c4:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:74:50:91:72:17:9E:FC:A8:74:F0:2B:9B:59:34:44:28:C1:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4080::/48
Signature Algorithm: sha256WithRSAEncryption
08:9b:71:1b:9a:cc:c6:ec:ce:83:d4:c0:06:39:64:62:cb:18:
da:88:1e:4d:47:5a:6c:93:43:d3:0b:08:4f:62:b8:53:32:e4:
ce:83:f4:fe:ae:d2:52:cd:38:c4:9a:82:ce:bb:fe:0d:f6:84:
6b:e2:55:d6:6f:24:0e:a1:f4:10:23:ac:3f:d8:b6:80:fd:dc:
88:41:ac:ac:b5:6e:80:c4:36:48:0b:3b:bc:59:4a:80:b2:8b:
00:f7:11:37:43:c5:84:d1:71:f6:8d:12:6f:19:ef:28:bc:9e:
0c:44:dd:0f:d7:bf:43:fc:6d:91:56:3b:1c:cb:ce:58:78:4e:
25:9b:84:12:de:fb:9b:a7:08:4b:ee:1a:92:d0:e7:27:4b:fe:
59:9f:ed:9a:96:ff:a1:ea:c0:bd:3f:85:5c:22:df:47:ae:23:
af:9e:a1:75:f1:9c:16:d0:7f:d8:c7:1c:36:6f:a2:f1:bd:48:
d3:86:c6:d3:70:30:ff:6a:f4:4d:6b:07:bf:57:a8:ad:71:04:
60:18:98:e9:64:c0:03:f6:62:11:b5:70:b5:c3:86:3e:f6:b2:
21:ea:fa:17:81:17:0c:9e:cb:60:ac:9e:bd:be:40:46:de:50:
04:11:01:dc:33:1f:a0:08:08:93:5e:93:e0:49:68:f7:8f:eb:
4b:36:68:2e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbDD4xFi2lIoMdkjGRgc94tkq7iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwZjRlZDg5NDFkZTViNjk5YTRkMzFlZWMwODQyMGU5MTIwYjYzNjAyZDk1
NDk3YzMxZGU5Y2JlNjIxOTI4YTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJxveMl+pKC8bcnpUSUmK8/fJFPvIsnxmGCHZFjoHHGhsS9/02COUrueiUwQ
dzSIyTkGMDvRZsrI+v9nINkcLGvCE1rJ+L5Qcp6zM8FRVc4i5wR/RapaCi/J9zxw
/CP+qWFr70W+vri3kDOArzy0z/iF0Or3KbQGEREdcj71gsvKCwNoggLnI+SX3HAZ
oOpxO2j0ANWVcAJm3pbfBSkXOUTXJhCbWjnMRwFIlAgppG53FNoEpeWA8S0LwliQ
fTz4vBWvUea+zJs6RjS+BKQUMCXN7reNr1KsbedUkC2PE0jby8+R/kqwuao2b/py
rWBmEoXnI7BLbwFrGxWNjKLEUq8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSXR3RQ
kXIXnvyodPArm1k0RCjBeTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzU3NWI2ZmEtYzAyMy00NThmLTg1YzgtOTY5NGFhMDUzZTQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFA
gDANBgkqhkiG9w0BAQsFAAOCAQEACJtxG5rMxuzOg9TABjlkYssY2ogeTUdabJND
0wsIT2K4UzLkzoP0/q7SUs04xJqCzrv+DfaEa+JV1m8kDqH0ECOsP9i2gP3ciEGs
rLVugMQ2SAs7vFlKgLKLAPcRN0PFhNFx9o0SbxnvKLyeDETdD9e/Q/xtkVY7HMvO
WHhOJZuEEt77m6cIS+4aktDnJ0v+WZ/tmpb/oerAvT+FXCLfR64jr56hdfGcFtB/
2MccNm+i8b1I04bG03Aw/2r0TWsHv1eorXEEYBiY6WTAA/ZiEbVwtcOGPvayIer6
F4EXDJ7LYKyevb5ARt5QBBEB3DMfoAgIk16T4Elo94/rSzZoLg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:46 2025 by rpki-client