Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ad80ae6-718d-4331-bc0a-ad31510cfa0f.roa
File: 2ad80ae6-718d-4331-bc0a-ad31510cfa0f.roa (raw, json)
Hash identifier: ZaMoK63yvU99syH5P7ZEU0NVyG4qPLrxjQzm5qE+rbg=
Subject key identifier: 71:74:B2:FF:FB:E1:DB:E1:87:ED:32:F4:5C:CB:5E:42:74:A8:FE:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 732DA1C4B28378FC50AA510B1B889A4B6CF275A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ad80ae6-718d-4331-bc0a-ad31510cfa0f.roa
Signing time: Wed 05 Mar 2025 16:30:47 +0000
ROA not before: Wed 05 Mar 2025 16:30:47 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2d:a1:c4:b2:83:78:fc:50:aa:51:0b:1b:88:9a:4b:6c:f2:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:30:47 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:c8:03:37:4c:e2:49:ed:89:e8:9f:39:f5:
9f:c9:11:e8:71:95:8a:37:b6:0b:33:e0:4a:1b:a7:
ec:79:53:7f:05:d9:a3:37:5c:bd:2d:7d:2f:d0:1f:
3d:44:93:4e:f1:44:67:33:d9:c1:d4:6e:a8:40:8a:
60:ac:a3:d8:7e:c2:e9:52:fb:64:ea:19:fc:c4:87:
16:9d:f9:fd:e0:16:e6:51:f0:7f:a2:9c:2d:09:08:
4b:4f:f5:41:2b:0e:de:b5:65:d0:0c:cc:a7:7b:7e:
80:13:87:4d:01:b2:ab:fa:fc:f0:00:7b:28:a5:de:
50:b9:a2:c1:37:2b:02:ff:8d:08:bb:6a:06:3f:24:
a7:96:a3:c1:e5:77:00:02:cc:0c:c1:c6:38:b1:7f:
25:93:fe:ed:f9:fb:5d:e6:da:45:ab:22:1f:55:60:
96:d0:20:ba:fb:e3:21:65:08:d7:e0:e3:63:05:c7:
3d:a3:a3:da:c2:e3:0e:8e:d6:01:55:42:f9:9f:c6:
ef:2f:04:9b:d4:42:51:40:c2:91:9c:8f:fe:33:e1:
f7:1f:a6:ef:90:0d:1f:32:8f:56:40:62:4d:91:e0:
4c:82:48:52:96:65:f2:1b:3e:8f:ec:74:c9:7a:a5:
44:39:99:a0:4e:25:f9:d8:7a:93:8e:62:a6:1f:13:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:B2:FF:FB:E1:DB:E1:87:ED:32:F4:5C:CB:5E:42:74:A8:FE:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ad80ae6-718d-4331-bc0a-ad31510cfa0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c040::/48
Signature Algorithm: sha256WithRSAEncryption
04:30:40:ad:49:24:40:10:12:6b:db:1a:bb:7f:dc:80:ca:19:
5b:d9:01:13:f4:5c:f8:45:75:c9:74:74:6b:d8:14:84:04:e7:
5c:5a:2c:c8:cf:93:9a:d7:95:4c:db:8f:1f:f1:f0:ab:89:f3:
b8:35:fa:ab:98:84:23:62:86:07:19:bb:4e:d4:44:5a:25:4d:
a5:54:df:f7:04:57:7b:e4:24:50:de:bf:3e:b7:1c:dd:e9:c0:
a6:28:ad:eb:6c:b4:47:c6:c7:7b:ea:13:f0:e1:62:f0:52:d3:
1e:18:c0:52:30:64:17:62:97:30:34:78:6c:23:d2:8a:23:29:
74:4b:11:ef:f8:3c:b0:fd:f9:44:66:8f:7b:2a:ef:a4:d5:88:
89:87:65:0e:20:c8:cb:5e:a7:7f:a6:77:ea:73:b7:d6:0e:bb:
71:4f:f8:4a:59:23:7f:47:3c:aa:67:01:05:4c:b8:60:f9:2f:
bd:77:c9:70:6d:dc:cf:f4:e1:b2:89:79:17:33:e4:07:61:41:
02:37:1a:4b:ba:df:6a:e2:3f:8a:5b:1c:ba:14:8c:f8:33:47:
bc:5c:31:12:c0:51:1b:5b:e8:4c:6c:e3:7a:2f:87:d9:d1:18:
ef:22:ad:14:45:2c:6b:f1:66:c6:a3:bf:a4:8b:76:eb:ce:df:
84:a6:18:80
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcy2hxLKDePxQqlELG4iaS2zydacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjMwNDdaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjZTBiOThjYmM5YzI4YTJlNzllZmZjYjIxZTAyMjgyNTkyNjlhNzEwY2Nl
MjI4N2UyZTdlOWRlZmFjODY2NzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTmyAM3TOJJ7Ynonzn1n8kR6HGVije2CzPgShun7HlTfwXZozdcvS19L9Af
PUSTTvFEZzPZwdRuqECKYKyj2H7C6VL7ZOoZ/MSHFp35/eAW5lHwf6KcLQkIS0/1
QSsO3rVl0AzMp3t+gBOHTQGyq/r88AB7KKXeULmiwTcrAv+NCLtqBj8kp5ajweV3
AALMDMHGOLF/JZP+7fn7XebaRasiH1VgltAguvvjIWUI1+DjYwXHPaOj2sLjDo7W
AVVC+Z/G7y8Em9RCUUDCkZyP/jPh9x+m75ANHzKPVkBiTZHgTIJIUpZl8hs+j+x0
yXqlRDmZoE4l+dh6k45iph8TJB8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRxdLL/
++Hb4YftMvRcy15CdKj+fjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmFkODBhZTYtNzE4ZC00MzMxLWJjMGEtYWQzMTUxMGNmYTBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HTA
QDANBgkqhkiG9w0BAQsFAAOCAQEABDBArUkkQBASa9sau3/cgMoZW9kBE/Rc+EV1
yXR0a9gUhATnXFosyM+TmteVTNuPH/Hwq4nzuDX6q5iEI2KGBxm7TtREWiVNpVTf
9wRXe+QkUN6/Prcc3enApiit62y0R8bHe+oT8OFi8FLTHhjAUjBkF2KXMDR4bCPS
iiMpdEsR7/g8sP35RGaPeyrvpNWIiYdlDiDIy16nf6Z36nO31g67cU/4Slkjf0c8
qmcBBUy4YPkvvXfJcG3cz/Thsol5FzPkB2FBAjcaS7rfauI/ilscuhSM+DNHvFwx
EsBRG1voTGzjei+H2dEY7yKtFEUsa/FmxqO/pIt2687fhKYYgA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:43 2025 by rpki-client