Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: Szv36KEOXLQ17advDv/++zV7x3yHoO16/Grhim+pG9o=
Subject key identifier: 4B:6D:3B:DF:94:82:E6:84:9C:68:50:04:0A:41:DF:74:B4:73:D5:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D06D791916DD3B05A4194F8740B1B1BE32D3CCD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Wed 05 Mar 2025 15:10:53 +0000
ROA not before: Wed 05 Mar 2025 15:10:53 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:06:d7:91:91:6d:d3:b0:5a:41:94:f8:74:0b:1b:1b:e3:2d:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:10:53 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:0d:ad:2c:de:86:0e:21:84:28:3b:ee:f8:
be:f3:d8:71:c9:bf:86:c9:5e:ea:33:09:62:32:c2:
01:24:6d:6e:20:7f:08:a5:83:20:18:75:d4:50:c3:
92:85:37:4d:f2:16:25:2f:65:d5:bd:8c:2b:79:ed:
0e:7a:3a:4e:ec:10:24:7e:18:4b:f0:82:62:b4:00:
af:35:b9:d1:57:d3:4c:6b:18:d6:04:8d:f9:85:e5:
f2:e2:b2:79:1b:a4:58:c9:53:a5:f5:c7:6b:ee:ad:
35:90:30:15:f3:9e:9f:59:45:be:48:08:96:c1:4e:
94:76:b4:40:31:20:74:c3:0c:96:01:86:c1:16:a4:
ab:a7:3e:23:7f:2f:dc:60:f2:b0:0f:bf:e0:e4:ea:
b7:cb:68:38:a7:5b:f6:d5:38:bb:9f:c5:b6:e0:d2:
76:5e:0f:f1:c6:31:23:1d:40:d7:2c:ad:8e:56:1f:
d3:71:00:b0:68:8e:79:35:a6:24:8e:60:5d:87:b9:
19:7f:dd:b8:7c:80:d3:af:1a:3a:52:82:d9:cc:d6:
68:39:bf:40:cd:0b:ff:cb:6b:bd:0d:79:7a:a8:c2:
c5:0d:ea:e9:bb:79:ed:57:3e:d5:db:1e:14:30:1e:
23:85:a7:7d:a8:04:90:90:3a:f5:d3:50:81:7e:55:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:3B:DF:94:82:E6:84:9C:68:50:04:0A:41:DF:74:B4:73:D5:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
98:de:e9:44:2c:10:bf:2f:d2:33:0c:31:88:f3:c9:e6:d7:8d:
46:f5:c1:f8:01:96:67:05:b8:00:bf:66:bf:84:21:40:f0:f1:
9f:b3:a4:bc:e9:c3:c9:d8:24:ae:5d:e9:b6:c0:e3:43:03:d6:
1d:1e:5f:ca:44:63:f5:92:1a:a1:e8:0e:f5:9c:a3:d2:32:2e:
76:1a:2d:5a:2c:36:d2:c0:88:8b:58:63:8a:37:66:0f:53:79:
e4:3e:86:91:d2:51:d3:6f:17:04:50:bb:a0:9f:4b:4d:7a:9d:
96:6c:9c:d8:53:b7:bf:8b:75:1f:72:02:b8:2c:4d:4b:22:7d:
9b:5f:c7:89:21:98:b9:b5:50:e5:73:1f:f3:1b:4a:c4:8b:41:
9f:c6:93:b8:c9:9f:64:6c:2e:4b:a3:02:53:fd:89:9c:0c:20:
e4:5a:a1:6c:01:26:95:40:44:08:e4:67:b2:a6:f2:93:86:49:
8d:1f:1a:36:e5:5e:1a:7e:e9:78:e0:ba:7c:fe:a7:9b:ae:72:
8e:5e:a9:49:87:af:bd:bf:29:e4:7b:5d:8f:5c:b5:01:46:14:
aa:e2:61:ff:8e:4b:1e:29:e6:96:41:59:f8:79:a2:d4:4e:30:
a4:f4:e4:cc:d9:4b:e3:69:9a:9f:ab:e4:c6:b6:f1:e4:39:47:
eb:c2:4c:60
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXQbXkZFt07BaQZT4dAsbG+MtPM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNTEwNTNaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGRkY2VjMDE2OTg5NmYwYWNhMWUyMzNkMTFhYTliMDkzOTI4ODBkZjgyNTZi
ZTAzMTcwOGI2YWI1OTZhNzI4ZWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSWDa0s3oYOIYQoO+74vvPYccm/hsle6jMJYjLCASRtbiB/CKWDIBh11FDD
koU3TfIWJS9l1b2MK3ntDno6TuwQJH4YS/CCYrQArzW50VfTTGsY1gSN+YXl8uKy
eRukWMlTpfXHa+6tNZAwFfOen1lFvkgIlsFOlHa0QDEgdMMMlgGGwRakq6c+I38v
3GDysA+/4OTqt8toOKdb9tU4u5/FtuDSdl4P8cYxIx1A1yytjlYf03EAsGiOeTWm
JI5gXYe5GX/duHyA068aOlKC2czWaDm/QM0L/8trvQ15eqjCxQ3q6bt57Vc+1dse
FDAeI4WnfagEkJA69dNQgX5VDAsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRLbTvf
lILmhJxoUAQKQd90tHPVxDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjljY2JmMWYtYmQxOC00MzdmLTg3Y2ItYzhkODU1ODdjYmVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
MDANBgkqhkiG9w0BAQsFAAOCAQEAmN7pRCwQvy/SMwwxiPPJ5teNRvXB+AGWZwW4
AL9mv4QhQPDxn7OkvOnDydgkrl3ptsDjQwPWHR5fykRj9ZIaoegO9Zyj0jIudhot
Wiw20sCIi1hjijdmD1N55D6GkdJR028XBFC7oJ9LTXqdlmyc2FO3v4t1H3ICuCxN
SyJ9m1/HiSGYubVQ5XMf8xtKxItBn8aTuMmfZGwuS6MCU/2JnAwg5FqhbAEmlUBE
CORnsqbyk4ZJjR8aNuVeGn7peOC6fP6nm65yjl6pSYevvb8p5Htdj1y1AUYUquJh
/45LHinmlkFZ+Hmi1E4wpPTkzNlL42man6vkxrbx5DlH68JMYA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client