Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
File: 2e8369e3-7a1d-4e37-8db7-c71339526d79.roa (raw, json)
Hash identifier: UxkV8E6EqeUMcjDH6Hbc9z+CEQYHnU3R4r4PK+wV4TQ=
Subject key identifier: 50:F8:60:9B:A7:0E:05:85:E0:54:D4:1B:DA:41:9D:BC:4F:49:DC:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11BF1B5D1E011A79E323584C367D181A71BAA1FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
Signing time: Wed 05 Mar 2025 16:41:16 +0000
ROA not before: Wed 05 Mar 2025 16:41:16 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bf:1b:5d:1e:01:1a:79:e3:23:58:4c:36:7d:18:1a:71:ba:a1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:41:16 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:f3:13:a2:c8:9b:e5:e2:29:eb:b0:f1:67:
51:f5:63:e5:db:ef:f2:ca:cd:9f:30:56:13:98:ad:
7b:05:b1:89:36:6b:bb:bf:b5:07:f7:a7:0a:27:96:
a7:de:04:d4:95:34:76:5c:52:12:d0:f1:d7:0a:7d:
2e:0f:9b:6a:89:c3:b2:b4:d0:61:5d:0e:3d:13:f9:
08:8f:60:10:fb:de:97:e6:85:da:ea:a0:c4:fa:3d:
1c:54:2a:ea:99:f9:12:7f:9f:c5:b9:0d:4e:07:fb:
be:27:72:54:a0:86:a3:de:a6:1a:7c:88:d1:42:74:
07:13:41:68:9c:6c:64:85:48:4a:da:b5:9c:a1:58:
6e:ab:3e:99:6a:47:28:48:90:4a:1d:84:d7:57:37:
aa:ab:35:cf:0d:5a:fd:c6:11:10:a7:10:cf:07:a8:
74:61:1b:67:9b:43:e9:e9:6c:23:8b:f4:ac:51:f0:
43:f8:2c:a4:7a:f6:b6:ee:1a:e2:d4:1b:90:a2:04:
5f:0e:63:d1:ed:d8:5d:a7:78:ed:94:0a:d0:bf:34:
50:8a:87:bb:93:90:7f:9a:8c:95:c6:41:9e:fe:59:
ea:e3:80:2a:ea:33:cf:f5:7a:c3:04:4c:8a:62:c5:
cd:c2:4f:8a:06:8f:ae:11:42:cf:49:1a:12:9f:24:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:60:9B:A7:0E:05:85:E0:54:D4:1B:DA:41:9D:BC:4F:49:DC:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:7a:07:dd:71:ab:f8:fd:e1:76:66:f7:db:cb:0a:a8:7b:5e:
c6:fb:13:67:23:b0:47:0e:78:4e:9b:d4:09:b1:f1:9a:56:c4:
be:27:8d:69:27:44:b3:ae:3c:c6:bb:5a:04:69:43:ec:20:d8:
b0:0f:a4:fd:6b:cc:87:97:eb:8a:54:ab:c1:74:87:6a:83:4d:
b6:12:b2:bc:70:89:de:49:1e:4c:18:b8:1e:07:b5:c1:dc:8a:
93:d0:79:e6:8c:9c:cc:2b:52:23:e8:63:db:04:97:ce:81:6f:
b7:13:57:6d:0b:a5:e2:25:fd:be:03:e0:27:28:3f:20:da:4f:
61:fd:20:95:34:d8:85:22:e5:49:83:00:ef:fd:89:44:5d:24:
ab:10:40:fe:98:cc:de:29:a7:69:f3:ff:6b:85:b0:77:f1:68:
57:25:a4:a1:04:41:a4:a7:ac:e8:30:4a:bb:49:63:dc:5e:ea:
f8:bf:d5:bb:6a:e6:ec:cc:79:d0:36:76:c8:ec:8a:b3:08:2d:
d0:ba:9b:5f:16:de:8e:11:39:5e:36:d8:9a:42:5d:32:3f:83:
46:35:67:21:f1:f6:29:cb:fa:2c:73:35:70:95:88:64:fd:ca:
1f:44:21:38:3f:db:71:3d:da:fd:bc:a7:78:5c:1a:c0:c2:b6:
a5:33:5c:c3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEb8bXR4BGnnjI1hMNn0YGnG6ofswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjQxMTZaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4MGNlYTAwNWNjZjZhMjBmNWRkMjRhZWU1OTcxZjEyMDAzNTNmZTZhZDM1
NGZhMTM1MDk1MzdiMzIyMDhhMDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIzL8xOiyJvl4inrsPFnUfVj5dvv8srNnzBWE5itewWxiTZru7+1B/enCieW
p94E1JU0dlxSEtDx1wp9Lg+baonDsrTQYV0OPRP5CI9gEPvel+aF2uqgxPo9HFQq
6pn5En+fxbkNTgf7vidyVKCGo96mGnyI0UJ0BxNBaJxsZIVIStq1nKFYbqs+mWpH
KEiQSh2E11c3qqs1zw1a/cYREKcQzweodGEbZ5tD6elsI4v0rFHwQ/gspHr2tu4a
4tQbkKIEXw5j0e3YXad47ZQK0L80UIqHu5OQf5qMlcZBnv5Z6uOAKuozz/V6wwRM
imLFzcJPigaPrhFCz0kaEp8kagkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRQ+GCb
pw4FheBU1BvaQZ28T0nceTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmU4MzY5ZTMtN2ExZC00ZTM3LThkYjctYzcxMzM5NTI2ZDc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HRg
MA0GCSqGSIb3DQEBCwUAA4IBAQBKegfdcav4/eF2Zvfbywqoe17G+xNnI7BHDnhO
m9QJsfGaVsS+J41pJ0SzrjzGu1oEaUPsINiwD6T9a8yHl+uKVKvBdIdqg022ErK8
cIneSR5MGLgeB7XB3IqT0HnmjJzMK1Ij6GPbBJfOgW+3E1dtC6XiJf2+A+AnKD8g
2k9h/SCVNNiFIuVJgwDv/YlEXSSrEED+mMzeKadp8/9rhbB38WhXJaShBEGkp6zo
MEq7SWPcXur4v9W7aubszHnQNnbI7IqzCC3QuptfFt6OETleNtiaQl0yP4NGNWch
8fYpy/osczVwlYhk/cofRCE4P9txPdr9vKd4XBrAwralM1zD
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:00 2025 by rpki-client