Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json)
Hash identifier: U7U2G2xgxbjR0APjWF4byZyRzTsgcUxX5jMgprfrJQE=
Subject key identifier: 73:29:42:19:FA:68:74:FB:28:92:90:6A:AF:2B:01:DB:19:1F:17:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11451CEE99B7EF6D2B1985010FADFC5EA535D32E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:45:1c:ee:99:b7:ef:6d:2b:19:85:01:0f:ad:fc:5e:a5:35:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=47d5fd7283a72a53ebc1c99b5bba5951c09a04fbcc64527aba223f16de29ec8b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:d4:40:da:f1:66:f2:0e:67:ac:d8:1e:a7:
b5:c7:5b:72:60:19:ff:dd:15:00:ef:20:6d:d1:a1:
7f:9b:24:09:b0:ab:ef:6a:de:7a:c1:df:78:45:bb:
d1:a2:a8:7a:b9:38:42:0c:00:ce:b4:c0:f3:ac:1a:
82:5e:a4:15:08:ad:59:76:e0:bc:36:c4:54:ad:7c:
de:71:ae:51:9c:d5:7e:cd:ee:34:f1:8a:80:84:81:
4a:86:07:0b:1d:ff:d1:da:30:3b:fe:ed:41:69:94:
b7:25:e5:08:ab:2d:1a:97:af:fc:b6:b7:a5:fe:03:
6e:fa:8c:af:a3:3a:57:2d:7f:2b:ec:a2:58:b0:e9:
9e:35:78:c3:ac:4d:03:a3:ca:60:b0:08:2f:16:67:
64:c9:59:1f:18:fe:05:83:43:af:77:0a:53:f3:4c:
9e:68:8a:f9:97:4f:3d:ba:3e:29:80:22:d2:c9:5e:
fd:dc:05:6c:5d:78:7e:e8:ad:2f:34:a6:13:c0:fd:
e8:3a:33:ce:fb:1a:e5:b5:d3:08:73:5f:4c:38:c2:
ee:49:46:66:3b:44:3e:20:bc:02:81:36:8f:84:52:
5d:56:4d:f6:59:5c:39:c9:1e:71:07:fb:ba:ee:a0:
00:7b:5b:1b:87:2e:ca:ae:8c:92:fa:ee:ac:21:ea:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:42:19:FA:68:74:FB:28:92:90:6A:AF:2B:01:DB:19:1F:17:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/35
Signature Algorithm: sha256WithRSAEncryption
3a:85:2d:38:c5:28:8e:37:db:b9:6e:af:5e:78:c2:ee:2f:39:
80:26:31:ca:70:91:8e:74:16:b6:e7:dc:c7:80:96:91:95:db:
40:94:38:d2:c1:3b:ef:3b:32:1f:29:50:43:18:21:e6:3e:56:
5d:d7:e4:c5:98:b8:bf:fd:d9:ad:9c:8e:25:1f:43:e3:da:d6:
63:05:30:7c:2d:d5:54:0a:25:b0:f2:df:6b:ff:ba:c4:a9:e8:
c5:04:8a:fb:1f:db:cf:6f:41:bc:0c:37:eb:51:89:fc:64:53:
f0:ae:09:ac:3b:45:c6:c1:63:cd:df:a4:55:7c:b1:51:2d:ae:
4f:67:1c:ef:fb:d1:4f:47:35:27:82:0a:c9:e9:42:eb:f2:24:
db:1f:b7:82:f7:53:28:03:d0:f3:37:8c:5d:cf:61:0b:58:7c:
9c:8b:f6:e7:9c:1d:78:41:de:6d:b8:c8:d9:b7:45:77:d9:07:
a7:2d:e2:e3:d2:d1:24:c0:a9:b8:78:e7:21:8f:68:f4:1d:ac:
85:0c:ae:14:78:3b:0e:ae:16:74:ec:5a:06:5a:18:be:19:79:
87:8a:30:2c:ae:b8:82:0d:a5:44:22:6c:8a:ab:ca:79:0a:08:
e0:b6:5e:5e:b2:61:5c:f4:48:a1:f3:87:38:67:7a:b9:ff:ea:
4b:5c:b3:44
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEUUc7pm3720rGYUBD638XqU10y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ3ZDVmZDcyODNhNzJhNTNlYmMxYzk5YjViYmE1OTUxYzA5YTA0ZmJjYzY0
NTI3YWJhMjIzZjE2ZGUyOWVjOGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOP1EDa8WbyDmes2B6ntcdbcmAZ/90VAO8gbdGhf5skCbCr72reesHfeEW7
0aKoerk4QgwAzrTA86wagl6kFQitWXbgvDbEVK183nGuUZzVfs3uNPGKgISBSoYH
Cx3/0dowO/7tQWmUtyXlCKstGpev/La3pf4DbvqMr6M6Vy1/K+yiWLDpnjV4w6xN
A6PKYLAILxZnZMlZHxj+BYNDr3cKU/NMnmiK+ZdPPbo+KYAi0sle/dwFbF14fuit
LzSmE8D96Dozzvsa5bXTCHNfTDjC7klGZjtEPiC8AoE2j4RSXVZN9llcOckecQf7
uu6gAHtbG4cuyq6MkvrurCHqYaECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRzKUIZ
+mh0+yiSkGqvKwHbGR8XNDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTA1MDQ4YzAtNzc1MS00ZWM0LWI4OTEtYTM1ODNkYmRjOWZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoF0BgA
MA0GCSqGSIb3DQEBCwUAA4IBAQA6hS04xSiON9u5bq9eeMLuLzmAJjHKcJGOdBa2
59zHgJaRldtAlDjSwTvvOzIfKVBDGCHmPlZd1+TFmLi//dmtnI4lH0Pj2tZjBTB8
LdVUCiWw8t9r/7rEqejFBIr7H9vPb0G8DDfrUYn8ZFPwrgmsO0XGwWPN36RVfLFR
La5PZxzv+9FPRzUnggrJ6ULr8iTbH7eC91MoA9DzN4xdz2ELWHyci/bnnB14Qd5t
uMjZt0V32QenLeLj0tEkwKm4eOchj2j0HayFDK4UeDsOrhZ07FoGWhi+GXmHijAs
rriCDaVEImyKq8p5Cgjgtl5esmFc9Eih84c4Z3q5/+pLXLNE
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:16 2025 by rpki-client