Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
File: 0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa (raw, json)
Hash identifier: ta8DNAE7jyIQa9Y8gSoLXXUAM6Yh7uZcn8fxdnkFiFU=
Subject key identifier: 29:71:A6:C2:45:10:24:EC:A5:B8:F0:35:70:06:44:A4:20:76:01:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C5A63D3CA5F45344AE0EB8D9FAC1ADEAD7EC12A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
Signing time: Wed 05 Mar 2025 16:11:11 +0000
ROA not before: Wed 05 Mar 2025 16:11:11 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5a:63:d3:ca:5f:45:34:4a:e0:eb:8d:9f:ac:1a:de:ad:7e:c1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:11:11 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:3c:67:88:90:1c:b9:33:8c:b0:56:27:b6:
d9:5e:1f:58:d7:c5:0f:1d:75:90:4b:cc:b6:4e:5d:
7b:e2:9a:d8:ce:9e:24:db:d1:41:6a:95:03:6a:c3:
7c:03:59:d6:c7:9e:41:98:5b:4d:22:85:d6:b3:c3:
88:a0:0e:f0:ac:95:39:6c:61:1f:dd:7e:79:7c:07:
3d:31:c6:d3:14:10:87:94:a8:f4:cc:6c:52:fe:d3:
a6:8c:2e:42:f6:2b:14:59:0d:e8:b5:ee:42:b7:9e:
67:99:36:46:aa:9a:bf:2b:67:8c:38:25:35:2c:9c:
98:4e:1a:37:9b:c6:38:a9:47:00:88:5e:96:1f:87:
d4:10:92:87:ab:90:85:d2:bd:0b:7e:1a:01:c3:81:
49:a3:79:bd:6a:16:b6:2b:69:ed:84:d5:60:2c:79:
01:a4:29:60:52:2f:59:fe:26:36:ff:a2:82:c6:20:
1c:be:29:83:ff:d3:26:f1:b9:d4:41:f2:47:d8:eb:
19:bf:ac:af:23:97:8a:78:f3:34:b0:be:12:c6:67:
09:52:27:51:0c:1c:77:9e:d9:83:04:7a:45:6f:fe:
f4:6c:bc:e2:d0:82:ef:ca:0e:f4:7f:cc:97:53:96:
c5:b2:91:e6:59:a0:86:b2:14:cd:81:ed:82:d5:d5:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:A6:C2:45:10:24:EC:A5:B8:F0:35:70:06:44:A4:20:76:01:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a040::/48
Signature Algorithm: sha256WithRSAEncryption
13:f4:35:0a:a8:56:e9:1d:c0:97:fe:ca:ac:a4:e5:40:92:27:
e9:9f:73:ff:86:28:2a:c9:5c:58:b0:07:4c:46:1d:31:34:14:
c1:96:24:6b:b5:86:8a:65:04:a3:e3:52:84:e9:9d:ee:69:94:
80:a6:d2:39:56:f6:f1:58:b4:6d:08:38:9e:a1:c4:5b:1e:3c:
b8:93:08:ce:08:b4:59:8b:a2:9c:b2:b0:f4:27:56:3a:2d:e9:
59:78:a1:0f:9c:45:a5:5d:8b:b2:7e:6d:a8:7e:32:7b:68:01:
36:c1:0b:02:df:4b:49:f2:7e:48:3f:4f:58:65:7e:ee:ab:41:
09:e6:50:d7:83:a1:ab:0a:3a:b5:93:7c:36:9c:10:d8:3c:e7:
59:15:e1:ef:c6:8e:9b:3a:95:35:e0:93:f5:3b:0f:da:40:f4:
a2:2b:f5:13:cc:91:aa:a6:ea:88:39:7e:a7:c4:f2:a0:93:43:
26:e2:66:e1:68:00:dc:b6:fe:b0:19:f6:b1:bd:83:c1:c8:f6:
e7:c1:ff:f4:f7:1e:14:af:f8:a1:15:68:f8:a4:c2:11:a3:ba:
16:ef:9b:fb:54:e9:9a:86:2e:8a:83:51:e1:4d:f1:3e:60:cd:
ab:e0:8e:b2:97:7a:59:07:51:0d:ad:0f:ca:1a:2e:c6:99:f1:
fe:65:32:2a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfFpj08pfRTRK4OuNn6wa3q1+wSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjExMTFaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDM4ODUyNmU0ZmI0ZGY2ZWU0MzlhN2Y3NDMyYWZlM2NkM2RlNTkwNGNkYWJk
YTA2YWE3YjI3NmE3ZDY4ZGYzNjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXTPGeIkBy5M4ywVie22V4fWNfFDx11kEvMtk5de+Ka2M6eJNvRQWqVA2rD
fANZ1seeQZhbTSKF1rPDiKAO8KyVOWxhH91+eXwHPTHG0xQQh5So9MxsUv7Tpowu
QvYrFFkN6LXuQreeZ5k2RqqavytnjDglNSycmE4aN5vGOKlHAIhelh+H1BCSh6uQ
hdK9C34aAcOBSaN5vWoWtitp7YTVYCx5AaQpYFIvWf4mNv+igsYgHL4pg//TJvG5
1EHyR9jrGb+sryOXinjzNLC+EsZnCVInUQwcd57ZgwR6RW/+9Gy84tCC78oO9H/M
l1OWxbKR5lmghrIUzYHtgtXV+rECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQpcabC
RRAk7KW48DVwBkSkIHYBsDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGExYTI1ZDctNjkzNS00MjBjLWE5NDktNGE5ZDBlNmE5NWQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGg
QDANBgkqhkiG9w0BAQsFAAOCAQEAE/Q1CqhW6R3Al/7KrKTlQJIn6Z9z/4YoKslc
WLAHTEYdMTQUwZYka7WGimUEo+NShOmd7mmUgKbSOVb28Vi0bQg4nqHEWx48uJMI
zgi0WYuinLKw9CdWOi3pWXihD5xFpV2Lsn5tqH4ye2gBNsELAt9LSfJ+SD9PWGV+
7qtBCeZQ14Ohqwo6tZN8NpwQ2DznWRXh78aOmzqVNeCT9TsP2kD0oiv1E8yRqqbq
iDl+p8TyoJNDJuJm4WgA3Lb+sBn2sb2Dwcj258H/9PceFK/4oRVo+KTCEaO6Fu+b
+1TpmoYuioNR4U3xPmDNq+COspd6WQdRDa0Pyhouxpnx/mUyKg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:39 2025 by rpki-client