Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
File: caf40866-a0b4-4882-b28e-32602ae3e0df.roa (raw, json)
Hash identifier: B7CpruOm5BtnEsmxOjdV1XoINWSZtAL7TP9Wxh7Q6kM=
Subject key identifier: F3:F0:B1:7C:CA:FB:5C:1D:73:32:A7:80:BB:2C:94:8F:5F:76:F2:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0635FA967AE1F534233A99693E9C43B4B6EE90C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:35:fa:96:7a:e1:f5:34:23:3a:99:69:3e:9c:43:b4:b6:ee:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e08e14ce19f5a6efed514ad3583c0a4897e1cf4280a2a96543d41578d0ab280b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:38:77:a7:62:7f:dc:3e:8b:f7:4a:09:a5:
91:8b:cb:18:6b:ef:42:26:b8:ce:30:7c:87:87:cc:
c5:eb:91:49:12:08:0a:01:5b:c3:1f:b7:10:99:b1:
57:8b:12:5d:58:12:2a:12:73:be:9d:db:be:28:0a:
ae:97:7b:2d:c4:20:e4:36:46:2f:a9:b6:1e:ca:62:
77:90:18:21:99:db:53:cf:12:5f:63:6f:3e:0b:34:
1c:44:0e:0b:d0:97:dc:36:3c:ad:b1:09:16:a1:9b:
13:8e:79:5b:67:a9:c5:54:ed:1a:f1:f5:81:74:e0:
ca:42:f1:f0:92:c6:5f:3f:62:5c:55:d4:94:26:21:
20:96:cb:b7:4f:06:84:b4:74:de:27:06:a9:50:50:
c2:df:e0:85:a0:81:b5:10:d2:fe:84:d8:2e:b4:79:
eb:71:d1:67:cd:b0:3c:16:90:f5:de:6e:75:c2:6e:
bb:f8:59:d4:3f:7b:50:3d:1d:13:df:85:ad:41:d8:
12:d8:bb:5b:93:b9:67:58:c3:89:76:71:4f:dc:e9:
81:4b:aa:80:c4:81:a0:90:d5:67:42:a7:47:28:da:
f7:6a:42:c9:29:2d:fe:67:fe:fc:04:c1:18:1a:5f:
84:07:74:37:2a:07:51:7d:93:51:d3:ad:65:40:38:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:B1:7C:CA:FB:5C:1D:73:32:A7:80:BB:2C:94:8F:5F:76:F2:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:a000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:31:b2:b2:c8:a0:b5:8e:1e:d3:9b:c8:0f:37:81:7a:2b:3f:
b4:75:97:d4:96:34:57:0d:5e:6c:96:00:a7:0a:75:9f:91:b6:
a3:1a:ce:2c:91:64:0d:df:25:43:eb:21:1c:53:e9:0d:c0:88:
d7:1e:6d:a3:ea:ec:59:61:17:75:77:6a:03:6f:65:75:7e:35:
4d:9e:1c:f4:91:1a:07:b4:d2:a7:d0:0f:d4:da:63:e9:34:32:
46:6e:b5:95:ec:5e:2c:f4:96:56:5f:f6:48:02:41:91:c6:d9:
4e:38:4e:10:1e:0b:e7:72:04:f0:d9:60:72:01:7f:46:55:45:
3d:03:2c:6d:f1:4a:32:8f:7e:37:9e:34:dd:99:cc:de:8a:82:
53:43:38:1a:73:83:0a:f4:6d:a9:4a:45:53:ea:81:42:91:74:
e4:8d:5d:f4:92:4d:1d:d2:b3:52:d0:ef:45:45:a2:2a:a3:25:
fe:19:db:a2:76:3a:a2:c1:0d:d7:31:e5:f8:58:bd:ff:3d:05:
ea:85:ac:82:a5:ad:33:60:2a:63:6b:0e:ba:bf:90:46:d9:e1:
4e:10:e6:78:eb:a0:da:05:3b:48:b3:17:92:12:c0:6f:43:85:
1b:0f:2d:5f:d6:bc:34:98:13:bc:be:c9:9d:33:08:ac:43:0a:
be:9c:d6:c5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBjX6lnrh9TQjOplpPpxDtLbukMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDYwMDAwMDBaFw0yNTAyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGUwOGUxNGNlMTlmNWE2ZWZlZDUxNGFkMzU4M2MwYTQ4OTdlMWNmNDI4MGEy
YTk2NTQzZDQxNTc4ZDBhYjI4MGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGEOHenYn/cPov3SgmlkYvLGGvvQia4zjB8h4fMxeuRSRIICgFbwx+3EJmx
V4sSXVgSKhJzvp3bvigKrpd7LcQg5DZGL6m2Hspid5AYIZnbU88SX2NvPgs0HEQO
C9CX3DY8rbEJFqGbE455W2epxVTtGvH1gXTgykLx8JLGXz9iXFXUlCYhIJbLt08G
hLR03icGqVBQwt/ghaCBtRDS/oTYLrR563HRZ82wPBaQ9d5udcJuu/hZ1D97UD0d
E9+FrUHYEti7W5O5Z1jDiXZxT9zpgUuqgMSBoJDVZ0KnRyja92pCySkt/mf+/ATB
GBpfhAd0NyoHUX2TUdOtZUA4k68CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTz8LF8
yvtcHXMyp4C7LJSPX3byljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2FmNDA4NjYtYTBiNC00ODgyLWIyOGUtMzI2MDJhZTNlMGRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCg
MA0GCSqGSIb3DQEBCwUAA4IBAQCPMbKyyKC1jh7Tm8gPN4F6Kz+0dZfUljRXDV5s
lgCnCnWfkbajGs4skWQN3yVD6yEcU+kNwIjXHm2j6uxZYRd1d2oDb2V1fjVNnhz0
kRoHtNKn0A/U2mPpNDJGbrWV7F4s9JZWX/ZIAkGRxtlOOE4QHgvncgTw2WByAX9G
VUU9Ayxt8Uoyj343njTdmczeioJTQzgac4MK9G2pSkVT6oFCkXTkjV30kk0d0rNS
0O9FRaIqoyX+GduidjqiwQ3XMeX4WL3/PQXqhayCpa0zYCpjaw66v5BG2eFOEOZ4
66DaBTtIsxeSEsBvQ4UbDy1f1rw0mBO8vsmdMwisQwq+nNbF
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:58 2025 by rpki-client