Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
File: d3564159-9d8d-43eb-bf55-66a4445d2727.roa (raw, json)
Hash identifier: 43tUFjXZ/S7rftcFuQBXbwoXZLJmf6yd6w1jepykJ/M=
Subject key identifier: 7B:82:83:1E:0C:9E:0D:00:F4:E3:D9:6A:BD:E5:78:87:03:8F:C7:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4EA5CCDFF5FC6BE04D9951EB2FA925BCDE814020
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a5:cc:df:f5:fc:6b:e0:4d:99:51:eb:2f:a9:25:bc:de:81:40:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=8cb3dd5962d16b485d0b8a5681520c75b7467fc18b0ee9b3a6032b73f6b3fcd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:68:c4:42:a5:cc:00:34:c7:89:18:ae:24:
2c:9c:d2:e7:54:c7:1d:23:e2:69:5d:3b:b7:ab:5c:
eb:8f:97:79:c5:17:1b:71:05:d6:7b:b7:66:41:ea:
bf:c1:a6:8a:17:8f:77:a9:6e:c0:b4:0a:20:6a:2d:
db:11:e7:d8:61:fb:9a:48:a0:31:61:ae:8f:47:90:
e4:25:fe:cd:a4:bc:df:c8:5b:73:62:19:3f:fc:66:
fb:16:ab:be:f1:79:ff:ce:11:58:74:90:63:8a:f4:
7d:78:70:15:03:dc:d8:6a:3f:de:9a:e1:12:fc:0c:
55:02:7d:88:c6:c1:ea:4f:f3:fc:55:c0:2b:8c:e2:
3c:b6:ab:7e:b4:e9:d4:04:f7:fb:ec:79:f1:b1:76:
33:a5:37:30:b1:cd:af:35:21:f1:2f:d2:01:18:96:
c2:7e:3e:88:3a:fd:97:ab:f7:3a:b2:d5:8a:b9:a6:
69:78:ef:79:69:57:fe:cc:3c:65:3a:45:5b:6e:cf:
cd:4e:9c:69:88:7f:35:63:11:67:6d:15:df:e0:27:
a7:42:73:0a:55:7e:dc:a8:e3:fe:6c:9b:d3:48:48:
26:1d:30:f2:68:20:fd:d8:51:a3:3a:e4:58:85:ed:
12:0b:e9:dc:54:28:b4:f0:da:6c:2d:75:d9:22:fb:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:83:1E:0C:9E:0D:00:F4:E3:D9:6A:BD:E5:78:87:03:8F:C7:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:b000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:bd:c0:df:53:8a:9d:82:fe:5c:cb:74:ce:39:4b:fa:32:09:
59:a7:48:eb:12:08:8b:9a:c5:6f:ee:df:1c:54:89:c2:ca:df:
ca:c3:11:ac:8d:0b:c5:d3:21:ac:6b:5d:08:3e:c9:b5:e1:b8:
30:ca:fb:40:43:4c:a1:c8:4b:c9:e3:d3:ff:5f:8d:38:ec:19:
42:4b:0b:90:fb:66:5b:f0:88:04:01:fd:ab:ab:9f:a4:33:d9:
6b:29:ad:6d:e0:52:fa:ff:4b:a5:f0:68:ac:f6:12:4a:24:2f:
07:0e:69:25:b4:b8:e4:51:1d:37:3e:b1:10:ec:a8:91:d2:ca:
69:8b:68:fc:7c:70:fb:c0:cf:2d:02:0e:2a:7f:cd:b5:da:d7:
67:40:ce:30:e4:53:11:71:cd:db:45:10:5a:86:bc:eb:33:8f:
78:5d:96:4a:51:25:8f:0c:84:e3:02:05:19:9f:3a:34:ad:9c:
80:12:22:5a:0f:50:2e:95:df:72:41:f6:46:07:b4:5e:04:e0:
6a:42:fe:3c:c1:c6:2d:3a:b6:60:95:14:1d:0a:22:9c:46:94:
40:50:32:68:81:bc:2c:71:e8:8c:1a:c8:07:14:8e:d1:85:ca:
2a:7a:00:ca:57:62:49:b7:c0:e3:31:c6:4f:23:7d:04:03:03:
ba:c1:b6:03
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTqXM3/X8a+BNmVHrL6klvN6BQCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDhjYjNkZDU5NjJkMTZiNDg1ZDBiOGE1NjgxNTIwYzc1Yjc0NjdmYzE4YjBl
ZTliM2E2MDMyYjczZjZiM2ZjZDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOYIaMRCpcwANMeJGK4kLJzS51THHSPiaV07t6tc64+XecUXG3EF1nu3ZkHq
v8GmihePd6luwLQKIGot2xHn2GH7mkigMWGuj0eQ5CX+zaS838hbc2IZP/xm+xar
vvF5/84RWHSQY4r0fXhwFQPc2Go/3prhEvwMVQJ9iMbB6k/z/FXAK4ziPLarfrTp
1AT3++x58bF2M6U3MLHNrzUh8S/SARiWwn4+iDr9l6v3OrLVirmmaXjveWlX/sw8
ZTpFW27PzU6caYh/NWMRZ20V3+Anp0JzClV+3Kjj/myb00hIJh0w8mgg/dhRozrk
WIXtEgvp3FQotPDabC112SL7hUMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR7goMe
DJ4NAPTj2Wq95XiHA4/HMjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDM1NjQxNTktOWQ4ZC00M2ViLWJmNTUtNjZhNDQ0NWQyNzI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Haw
MA0GCSqGSIb3DQEBCwUAA4IBAQCxvcDfU4qdgv5cy3TOOUv6MglZp0jrEgiLmsVv
7t8cVInCyt/KwxGsjQvF0yGsa10IPsm14bgwyvtAQ0yhyEvJ49P/X4047BlCSwuQ
+2Zb8IgEAf2rq5+kM9lrKa1t4FL6/0ul8Gis9hJKJC8HDmkltLjkUR03PrEQ7KiR
0sppi2j8fHD7wM8tAg4qf8212tdnQM4w5FMRcc3bRRBahrzrM494XZZKUSWPDITj
AgUZnzo0rZyAEiJaD1Auld9yQfZGB7ReBOBqQv48wcYtOrZglRQdCiKcRpRAUDJo
gbwsceiMGsgHFI7RhcoqegDKV2JJt8DjMcZPI30EAwO6wbYD
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:19 2025 by rpki-client