Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa
File: ea271f77-763d-42f8-a315-60081847d059.roa (raw, json)
Hash identifier: qrOIKfLWf9Ht8LfYG0+m5cR/yK1yQdpTGp4v9KKh7bw=
Subject key identifier: F8:F0:CF:6E:A6:F2:3F:18:53:29:4B:BE:E8:5B:15:31:52:4B:9F:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 330D09AC0CE652C7595467D961FE20B66F4DA37D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0d:09:ac:0c:e6:52:c7:59:54:67:d9:61:fe:20:b6:6f:4d:a3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ec7c4bee29e68c2af846927f698b09a9b504af33fbbca7c6c95939110ac10e2c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:32:bb:42:37:89:0b:0b:ad:e3:6f:b4:d5:
6b:7d:a9:93:17:07:1e:db:d1:6e:40:e9:ef:01:be:
45:12:40:c2:66:e8:fe:bc:4e:26:ee:0f:39:33:c6:
c3:41:33:92:db:10:c7:40:04:a7:cb:28:ca:24:f8:
bf:d9:3a:eb:44:2c:41:22:43:eb:64:8d:10:49:bb:
d2:25:6a:36:ae:61:20:31:04:7c:a4:7e:5c:88:5f:
b8:2d:0f:43:d1:92:3d:46:94:5f:9c:67:d8:98:77:
2c:a2:ae:10:c2:2e:4f:22:45:59:27:9c:e0:a8:d2:
c1:f7:36:86:16:5f:1c:a6:28:a2:cc:62:d9:ab:8c:
ae:1e:0b:95:48:ed:f6:80:09:d7:bd:22:6b:62:7a:
1d:77:0c:4f:29:ce:ee:35:aa:eb:10:80:29:e7:3b:
aa:0f:ea:60:5c:15:dc:d8:73:43:c7:1e:19:39:cf:
86:66:f9:d5:42:cb:73:36:87:88:e3:9a:20:08:8b:
1e:ac:c5:ac:c1:b0:4d:5d:af:f5:8e:a1:61:21:af:
c7:7c:6f:2e:53:66:c0:dc:e1:4b:7b:0b:ba:01:f7:
4d:14:f9:e5:85:e7:f5:17:ef:0d:e0:82:ec:b2:fd:
06:f0:47:13:d8:55:51:e1:c3:47:4f:ef:40:b8:50:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:CF:6E:A6:F2:3F:18:53:29:4B:BE:E8:5B:15:31:52:4B:9F:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea271f77-763d-42f8-a315-60081847d059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e040::/48
Signature Algorithm: sha256WithRSAEncryption
1e:51:89:23:ac:d2:94:c2:58:25:78:94:07:22:74:82:5f:18:
25:3e:43:dd:d4:29:06:1e:08:21:78:a5:74:4c:3a:d4:e9:69:
20:40:84:ea:31:49:68:0c:31:34:7e:36:92:06:60:4a:94:72:
df:ca:ec:ce:af:ca:67:e4:53:f6:79:27:e1:8c:b0:e0:bc:3b:
2c:de:c4:9d:07:92:8d:03:07:37:9a:ae:3a:26:34:e7:f8:36:
12:b5:dc:86:c7:e1:07:dc:ff:73:4a:a2:f6:fc:a3:b7:7a:71:
2e:20:74:28:fe:91:2a:de:6f:84:45:93:8a:a7:88:9f:95:2f:
cf:c7:f5:08:30:4b:a0:b5:93:b6:ab:ff:78:85:ff:cb:77:e5:
ac:7e:c2:7e:39:d8:11:09:87:5f:b2:df:9c:ee:c6:ad:49:e4:
70:fc:cf:12:61:da:b5:ed:71:4a:e4:0d:15:d0:4d:ec:76:0e:
1f:c2:a8:bb:e3:12:52:0d:50:f3:e5:c2:93:ca:2d:d5:47:a2:
24:e6:1f:4c:86:89:be:ca:05:de:56:e8:db:60:7b:44:89:b4:
84:cb:b1:f3:f8:15:7e:6e:b0:e0:68:f8:fe:d6:65:2a:97:4d:
f2:39:e9:89:09:93:d3:0f:32:77:37:bf:14:5c:a8:25:0b:e8:
8a:80:32:b5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUMw0JrAzmUsdZVGfZYf4gtm9No30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGVjN2M0YmVlMjllNjhjMmFmODQ2OTI3ZjY5OGIwOWE5YjUwNGFmMzNmYmJj
YTdjNmM5NTkzOTExMGFjMTBlMmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALx2MrtCN4kLC63jb7TVa32pkxcHHtvRbkDp7wG+RRJAwmbo/rxOJu4POTPG
w0EzktsQx0AEp8soyiT4v9k660QsQSJD62SNEEm70iVqNq5hIDEEfKR+XIhfuC0P
Q9GSPUaUX5xn2Jh3LKKuEMIuTyJFWSec4KjSwfc2hhZfHKYoosxi2auMrh4LlUjt
9oAJ170ia2J6HXcMTynO7jWq6xCAKec7qg/qYFwV3NhzQ8ceGTnPhmb51ULLczaH
iOOaIAiLHqzFrMGwTV2v9Y6hYSGvx3xvLlNmwNzhS3sLugH3TRT55YXn9RfvDeCC
7LL9BvBHE9hVUeHDR0/vQLhQUY0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT48M9u
pvI/GFMpS77oWxUxUkufPjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWEyNzFmNzctNzYzZC00MmY4LWEzMTUtNjAwODE4NDdkMDU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHg
QDANBgkqhkiG9w0BAQsFAAOCAQEAHlGJI6zSlMJYJXiUByJ0gl8YJT5D3dQpBh4I
IXildEw61OlpIECE6jFJaAwxNH42kgZgSpRy38rszq/KZ+RT9nkn4Yyw4Lw7LN7E
nQeSjQMHN5quOiY05/g2ErXchsfhB9z/c0qi9vyjt3pxLiB0KP6RKt5vhEWTiqeI
n5Uvz8f1CDBLoLWTtqv/eIX/y3flrH7CfjnYEQmHX7LfnO7GrUnkcPzPEmHate1x
SuQNFdBN7HYOH8Kou+MSUg1Q8+XCk8ot1UeiJOYfTIaJvsoF3lbo22B7RIm0hMux
8/gVfm6w4Gj4/tZlKpdN8jnpiQmT0w8ydze/FFyoJQvoioAytQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:45 2025 by rpki-client