Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c65e11fa-ec6d-4214-88c5-464a024d8957.roa
File: c65e11fa-ec6d-4214-88c5-464a024d8957.roa (raw, json)
Hash identifier: h36fzpur6Z5RsdGXzsA10ufY1nYXTQnSFA6Ya2iBxo0=
Subject key identifier: 00:BC:88:A4:74:EE:F3:4D:57:D0:14:C9:A8:65:EC:7E:B9:59:4A:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 434E3F44BF9DCF80F9E370AC9957030912812E7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c65e11fa-ec6d-4214-88c5-464a024d8957.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:3f:44:bf:9d:cf:80:f9:e3:70:ac:99:57:03:09:12:81:2e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=3edac7be72dbfb9c72b2382b995326c1a72947868a1281bf48a79dd05d08d919, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:93:af:e4:f6:7f:5e:3d:48:d1:c0:3d:16:
10:42:dc:28:c9:a1:b0:9e:a8:4e:92:96:cc:49:58:
10:8d:87:c1:61:34:c0:e6:6a:0d:81:7e:23:ee:6e:
02:0e:31:72:93:c1:49:e5:cc:92:91:87:59:17:84:
d6:e3:b3:71:97:01:85:b1:60:f6:a7:a5:4a:48:04:
41:38:5c:e3:d6:4a:a1:b1:13:cb:51:5b:44:f7:ac:
04:21:77:46:af:95:b0:0e:e7:c3:fa:49:b0:9b:29:
4d:d6:b6:02:ed:54:27:2e:31:f7:af:14:d0:14:13:
b5:23:84:3f:df:9d:fe:52:3c:16:c8:70:98:ae:ad:
1e:8c:df:a7:60:d5:f6:71:79:e3:c2:ed:42:9e:a3:
59:4d:b7:c1:00:88:6a:8c:6d:56:b1:5c:a5:ad:87:
3f:89:52:74:b3:15:7d:d9:93:7e:87:b9:85:94:c2:
30:3d:8a:05:57:0a:92:c4:36:e5:2e:ee:69:f5:d4:
2e:a7:8f:b4:24:d1:09:01:c1:cd:e9:0a:85:45:c0:
3c:c4:a2:5b:75:12:57:78:3a:c9:76:28:71:a2:de:
cc:b2:83:66:92:9b:f2:2b:ef:ee:43:e9:d9:91:77:
3e:cd:1b:60:c8:ed:8b:77:f8:4c:2c:d7:02:18:eb:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:88:A4:74:EE:F3:4D:57:D0:14:C9:A8:65:EC:7E:B9:59:4A:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c65e11fa-ec6d-4214-88c5-464a024d8957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:8e:e1:b1:9b:2e:d9:d5:1b:b6:16:61:60:83:78:84:ff:a1:
8b:f4:5d:e8:e2:9c:a8:65:b7:ec:1b:1a:2e:5c:7b:a3:e8:62:
a3:8b:81:04:33:6a:68:5b:cc:65:ac:25:d5:95:c2:33:d9:c0:
4d:39:4c:79:f6:1a:90:33:e8:4d:a9:e1:76:95:5f:c3:78:cf:
35:08:f3:35:17:c9:ac:57:6a:96:55:53:e1:af:d9:16:75:46:
85:18:74:d0:9c:23:80:d8:d7:85:ce:37:16:5b:58:01:2a:9d:
18:3f:6a:f4:d8:ee:5c:72:9d:54:5f:16:01:7f:8e:bf:de:1b:
98:9a:73:a8:dc:60:16:58:3d:23:ca:dd:58:ff:8e:2d:a7:62:
95:27:db:bd:ad:46:c3:e1:de:e3:c5:c4:6d:01:23:57:67:27:
b0:26:04:e8:31:c7:aa:5f:7d:2c:68:ef:72:95:a5:8c:65:16:
b4:36:dd:15:dd:e0:9a:c3:c9:54:63:86:78:41:55:8b:bc:00:
47:a9:82:df:5f:a7:9b:9d:b7:6d:e1:cc:bf:19:7a:fe:1d:56:
44:ae:f2:da:74:33:96:38:0b:9a:1c:3e:d1:36:17:96:f0:03:
34:e1:63:24:a2:61:49:95:39:54:ba:a2:66:3c:d1:5e:38:1f:
47:69:51:0a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQ04/RL+dz4D543CsmVcDCRKBLnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNlZGFjN2JlNzJkYmZiOWM3MmIyMzgyYjk5NTMyNmMxYTcyOTQ3ODY4YTEy
ODFiZjQ4YTc5ZGQwNWQwOGQ5MTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5Vk6/k9n9ePUjRwD0WEELcKMmhsJ6oTpKWzElYEI2HwWE0wOZqDYF+I+5u
Ag4xcpPBSeXMkpGHWReE1uOzcZcBhbFg9qelSkgEQThc49ZKobETy1FbRPesBCF3
Rq+VsA7nw/pJsJspTda2Au1UJy4x968U0BQTtSOEP9+d/lI8FshwmK6tHozfp2DV
9nF548LtQp6jWU23wQCIaoxtVrFcpa2HP4lSdLMVfdmTfoe5hZTCMD2KBVcKksQ2
5S7uafXULqePtCTRCQHBzekKhUXAPMSiW3USV3g6yXYocaLezLKDZpKb8ivv7kPp
2ZF3Ps0bYMjti3f4TCzXAhjr8qUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQAvIik
dO7zTVfQFMmoZex+uVlKbDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzY1ZTExZmEtZWM2ZC00MjE0LTg4YzUtNDY0YTAyNGQ4OTU3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFA
MA0GCSqGSIb3DQEBCwUAA4IBAQC4juGxmy7Z1Ru2FmFgg3iE/6GL9F3o4pyoZbfs
GxouXHuj6GKji4EEM2poW8xlrCXVlcIz2cBNOUx59hqQM+hNqeF2lV/DeM81CPM1
F8msV2qWVVPhr9kWdUaFGHTQnCOA2NeFzjcWW1gBKp0YP2r02O5ccp1UXxYBf46/
3huYmnOo3GAWWD0jyt1Y/44tp2KVJ9u9rUbD4d7jxcRtASNXZyewJgToMceqX30s
aO9ylaWMZRa0Nt0V3eCaw8lUY4Z4QVWLvABHqYLfX6ebnbdt4cy/GXr+HVZErvLa
dDOWOAuaHD7RNheW8AM04WMkomFJlTlUuqJmPNFeOB9HaVEK
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:56 2025 by rpki-client