Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier: ZPjoSEOYNP7ttWGm556pUbDNB8ah5QEqJkRcGxpyubA=
Subject key identifier: 33:BD:CC:3E:64:90:04:BB:4E:9B:6C:F8:9F:09:76:10:F3:24:51:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 198DACC7B5386E7CA1118E046F0CA4FEAE19E022
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:20c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8d:ac:c7:b5:38:6e:7c:a1:11:8e:04:6f:0c:a4:fe:ae:19:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=74464bdb2622277e261150d44066717b14da5e5df3499b17e62cff30393639c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:ae:e4:12:d4:f1:41:d6:43:9e:45:58:85:
b7:a2:31:1a:62:9a:ed:6b:aa:2d:c1:76:bb:e8:fb:
dd:6a:f6:28:a7:48:f3:89:ac:86:0f:ff:39:33:84:
a5:9b:1b:db:d3:55:27:16:e5:7c:b0:c1:b3:a0:30:
aa:41:06:cd:c6:be:93:a0:bf:32:7e:fd:24:7f:1f:
f2:b4:76:be:cb:0e:54:bc:d2:7d:0a:bd:32:e5:2f:
46:ae:fe:b1:ef:aa:e4:a5:7d:47:2c:42:56:0b:4d:
1f:d7:f2:67:50:99:e5:f7:c9:e6:b8:c4:c3:1b:04:
ce:fa:b2:0a:3b:12:ef:67:44:b0:5c:77:e9:6c:7f:
76:d4:28:d2:14:5f:0e:12:1e:65:09:da:5e:b4:5e:
77:b1:ca:86:d2:36:ee:8a:02:86:b0:f8:58:dc:27:
25:68:aa:e1:82:2a:29:1a:b6:97:23:69:53:3f:d1:
de:05:74:1b:76:72:fb:15:97:c0:c8:d8:5b:2e:49:
b1:72:1b:38:41:38:b2:39:59:ae:d1:b2:e5:5b:62:
08:f1:d1:25:78:76:19:80:43:14:5f:73:d6:0b:75:
56:46:70:71:b9:f7:85:65:b3:1f:f1:e4:e8:ef:3b:
fd:2d:3d:ba:ba:af:4d:69:a5:74:75:03:7d:39:66:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:CC:3E:64:90:04:BB:4E:9B:6C:F8:9F:09:76:10:F3:24:51:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:c8:7d:30:5d:3b:b7:ad:bc:08:bc:1d:63:ff:08:e4:ba:0e:
ab:ea:cd:bd:ee:0d:bd:bf:02:69:73:2c:34:b0:31:e8:18:ac:
c6:2a:15:37:0e:c5:d6:5e:d6:a1:5e:21:23:2c:2b:7a:49:61:
a6:e8:32:62:79:4f:23:14:59:6c:02:1a:a3:c9:44:2c:29:28:
ab:b6:05:16:23:0e:0c:0c:06:61:50:f1:3c:e3:90:86:43:bb:
3e:4e:10:c3:2b:af:d4:16:77:12:2c:46:cc:6a:e2:ec:2c:07:
05:78:0c:ac:62:f5:ce:ae:22:b5:9f:99:b9:cb:5e:c7:3e:5d:
f8:d6:b9:7b:57:40:49:7e:08:10:7f:d0:21:84:23:30:43:6c:
27:11:4c:d4:a3:1b:16:a0:aa:d1:28:4b:c4:55:8c:dd:fc:f8:
f5:25:1b:32:44:56:07:ac:8a:c2:87:0a:6d:d6:b4:00:b1:30:
7b:7f:55:c5:2c:9a:5f:f2:f8:c9:f5:5e:dd:d3:e3:a7:9c:7e:
8c:2c:57:3b:67:18:9d:fb:70:28:1b:8c:f9:35:d9:7f:11:a5:
99:0a:d3:25:9e:94:98:9b:31:22:11:10:e2:ac:2d:45:ab:fe:
2b:dc:bf:13:37:60:3d:87:91:22:f9:dd:35:a4:70:17:87:d1:
6f:36:ae:82
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGY2sx7U4bnyhEY4Ebwyk/q4Z4CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDc0NDY0YmRiMjYyMjI3N2UyNjExNTBkNDQwNjY3MTdiMTRkYTVlNWRmMzQ5
OWIxN2U2MmNmZjMwMzkzNjM5YzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMrjruQS1PFB1kOeRViFt6IxGmKa7WuqLcF2u+j73Wr2KKdI84mshg//OTOE
pZsb29NVJxblfLDBs6AwqkEGzca+k6C/Mn79JH8f8rR2vssOVLzSfQq9MuUvRq7+
se+q5KV9RyxCVgtNH9fyZ1CZ5ffJ5rjEwxsEzvqyCjsS72dEsFx36Wx/dtQo0hRf
DhIeZQnaXrRed7HKhtI27ooChrD4WNwnJWiq4YIqKRq2lyNpUz/R3gV0G3Zy+xWX
wMjYWy5JsXIbOEE4sjlZrtGy5VtiCPHRJXh2GYBDFF9z1gt1VkZwcbn3hWWzH/Hk
6O87/S09urqvTWmldHUDfTlmCS8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQzvcw+
ZJAEu06bbPifCXYQ8yRRLzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTg3NWVhZGQtNjQ3OC00YWMwLTg3OTItMDY3MjJhYTgwZGQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIg
wDANBgkqhkiG9w0BAQsFAAOCAQEAqch9MF07t628CLwdY/8I5LoOq+rNve4Nvb8C
aXMsNLAx6BisxioVNw7F1l7WoV4hIywreklhpugyYnlPIxRZbAIao8lELCkoq7YF
FiMODAwGYVDxPOOQhkO7Pk4Qwyuv1BZ3EixGzGri7CwHBXgMrGL1zq4itZ+Zucte
xz5d+Na5e1dASX4IEH/QIYQjMENsJxFM1KMbFqCq0ShLxFWM3fz49SUbMkRWB6yK
wocKbda0ALEwe39VxSyaX/L4yfVe3dPjp5x+jCxXO2cYnftwKBuM+TXZfxGlmQrT
JZ6UmJsxIhEQ4qwtRav+K9y/EzdgPYeRIvndNaRwF4fRbzaugg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:21 2025 by rpki-client