Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File: fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier: 4FDfCdbxaoWFyEVikqaKVCxDYcd1fJx20IpNibNfn0s=
Subject key identifier: E8:6B:4C:71:82:14:9F:AD:ED:6A:0A:76:89:D1:BC:55:90:10:35:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D76441F1AB1240DEEEBD1DE0BCF65A788750CE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:76:44:1f:1a:b1:24:0d:ee:eb:d1:de:0b:cf:65:a7:88:75:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=5e60f633b47767fa1647d29767c03b90f41f1e87dd24b6220cddaf9dc73d57b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:a7:a6:bc:72:10:55:22:7c:1f:ad:a8:96:
26:48:e1:2e:30:92:9b:0d:ed:d2:09:49:84:4d:58:
0a:f6:14:a0:5a:32:65:d6:e2:8e:c3:ad:b8:21:0a:
c6:fa:f4:e1:bc:78:32:81:eb:85:39:0f:21:5c:7b:
b3:e8:4a:d4:9b:d3:26:b5:cf:16:0f:6a:80:8c:48:
a8:70:4d:cf:7a:1f:ca:94:f9:93:41:fb:a4:b9:68:
c1:80:d0:6b:83:f6:78:3f:b2:7e:d8:57:f9:26:93:
c1:6a:1c:f0:82:80:0f:39:49:9e:13:6d:bf:c5:c0:
26:87:76:58:57:0c:7d:d5:e2:28:e0:2e:08:56:7b:
be:2b:f5:bb:f0:bb:06:e0:18:c6:b2:84:b4:8f:97:
c8:a1:2c:ca:80:74:b6:39:8d:cd:e9:6a:9a:03:6d:
32:87:c7:d5:1a:7d:3a:59:2e:23:eb:1d:e2:bf:ce:
1d:30:5d:15:18:97:1e:60:a8:df:a2:ee:d5:13:1d:
37:e2:96:38:b4:bb:d1:bb:d0:1c:c3:a5:30:be:84:
be:4c:18:cf:53:3a:b3:ef:c3:bc:fd:eb:1f:b6:ad:
9d:89:28:a1:c6:b1:60:45:d0:6f:a8:68:6b:f9:27:
c6:a6:08:c3:e3:6e:c3:4e:45:2d:e7:e4:10:3e:91:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:4C:71:82:14:9F:AD:ED:6A:0A:76:89:D1:BC:55:90:10:35:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b080::/48
Signature Algorithm: sha256WithRSAEncryption
53:47:43:ca:f9:a3:fa:f3:04:ca:3d:83:ee:aa:25:b1:f2:95:
40:13:4f:dd:29:7f:2b:ff:7f:d9:ad:6c:c8:b1:f0:c6:c7:87:
ac:68:fa:69:1b:68:32:df:a4:e4:ee:37:0d:e6:73:2e:a5:29:
f5:a3:be:8b:6c:fc:53:8e:01:f3:46:ff:89:60:82:18:19:35:
21:5b:3f:39:33:55:93:0e:53:10:c0:7e:5f:a8:d4:c4:a1:05:
9d:df:6e:ec:cd:36:c8:4a:99:46:e7:14:fa:21:56:de:d6:ca:
97:0e:7f:20:03:13:94:29:99:8e:e7:20:07:63:b8:20:9d:93:
58:da:c9:95:82:e7:e5:71:47:a6:76:aa:8a:31:bd:5d:d2:bc:
ee:5c:63:f1:96:68:0a:30:c0:a0:a3:31:22:d7:4b:86:61:2f:
44:38:45:a2:a7:24:7e:bf:70:1a:a5:01:70:8f:ad:85:dc:1c:
d7:8e:2c:1c:87:9d:f5:b5:5a:53:f0:20:cc:f6:17:d5:b5:c5:
ac:51:79:b0:02:1e:91:d5:b9:73:c8:e3:60:a8:42:5f:0c:e4:
f0:48:aa:cc:f3:7f:f8:66:c2:e7:a7:30:54:bf:5c:76:15:cf:
1f:d5:ef:6f:4a:82:a5:ae:9d:0b:34:06:fe:bb:76:5e:c6:57:
3d:6d:57:65
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPXZEHxqxJA3u69HeC89lp4h1DOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDVlNjBmNjMzYjQ3NzY3ZmExNjQ3ZDI5NzY3YzAzYjkwZjQxZjFlODdkZDI0
YjYyMjBjZGRhZjlkYzczZDU3YjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANrIp6a8chBVInwfraiWJkjhLjCSmw3t0glJhE1YCvYUoFoyZdbijsOtuCEK
xvr04bx4MoHrhTkPIVx7s+hK1JvTJrXPFg9qgIxIqHBNz3ofypT5k0H7pLlowYDQ
a4P2eD+yfthX+SaTwWoc8IKADzlJnhNtv8XAJod2WFcMfdXiKOAuCFZ7viv1u/C7
BuAYxrKEtI+XyKEsyoB0tjmNzelqmgNtMofH1Rp9OlkuI+sd4r/OHTBdFRiXHmCo
36Lu1RMdN+KWOLS70bvQHMOlML6EvkwYz1M6s+/DvP3rH7atnYkoocaxYEXQb6ho
a/knxqYIw+Nuw05FLefkED6ReUkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBToa0xx
ghSfre1qCnaJ0bxVkBA1IjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmEzYjQwMWYtZWE5MS00NWE5LTgxODItZDU2N2NmYWMwNzdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGw
gDANBgkqhkiG9w0BAQsFAAOCAQEAU0dDyvmj+vMEyj2D7qolsfKVQBNP3Sl/K/9/
2a1syLHwxseHrGj6aRtoMt+k5O43DeZzLqUp9aO+i2z8U44B80b/iWCCGBk1IVs/
OTNVkw5TEMB+X6jUxKEFnd9u7M02yEqZRucU+iFW3tbKlw5/IAMTlCmZjucgB2O4
IJ2TWNrJlYLn5XFHpnaqijG9XdK87lxj8ZZoCjDAoKMxItdLhmEvRDhFoqckfr9w
GqUBcI+thdwc144sHIed9bVaU/AgzPYX1bXFrFF5sAIekdW5c8jjYKhCXwzk8Eiq
zPN/+GbC56cwVL9cdhXPH9Xvb0qCpa6dCzQG/rt2XsZXPW1XZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:29 2025 by rpki-client