Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
File: 404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa (raw, json)
Hash identifier: 1fQW1mqwZldrBXP02AYkpXPnRksxeLWNdz+8d5Tsoeg=
Subject key identifier: 67:10:E5:2C:65:F0:D1:06:87:B0:F5:42:6A:9E:C1:6E:A8:F6:51:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15DA649217B2FAF9202B03CB540270A5EF23DFA7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
Signing time: Wed 05 Mar 2025 17:41:30 +0000
ROA not before: Wed 05 Mar 2025 17:41:30 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:da:64:92:17:b2:fa:f9:20:2b:03:cb:54:02:70:a5:ef:23:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:30 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:d8:00:e7:ac:ae:7c:5a:d9:ba:22:93:57:
22:6b:5d:54:19:c6:3f:c3:44:0f:fb:80:b2:09:08:
09:b6:b4:e2:66:54:b2:e0:64:1c:c3:16:0e:3d:c8:
ea:72:29:fc:ac:e1:ea:f5:65:b4:e2:49:c6:4f:0f:
bd:87:41:df:8e:84:71:83:82:a6:a0:c9:2c:ef:89:
75:e1:c0:5d:88:fe:6a:ca:59:82:4e:c8:10:65:eb:
46:c6:5f:34:b8:88:44:34:ac:a2:4b:b4:c1:6e:99:
f8:07:14:68:b8:44:f5:5a:c4:ad:03:72:6a:80:76:
e6:36:7f:40:6e:13:90:cf:94:d9:a7:6c:ee:e4:a7:
10:a6:00:76:2e:49:6c:a3:80:ac:63:48:21:36:87:
73:cf:92:1d:db:44:ba:09:7e:b7:0d:7e:70:2b:2e:
bb:95:e7:cb:5b:50:8b:99:91:48:65:c9:1c:24:8b:
23:6e:7e:72:dd:34:d8:c9:b4:7b:0e:b0:08:dd:f3:
c4:3f:73:91:67:bb:05:07:8e:4a:0a:e5:34:eb:24:
2c:b4:b9:e0:ad:22:fc:4e:a0:b8:29:bb:55:a7:ec:
9e:d1:a1:e3:2e:eb:8e:36:ee:d9:90:c9:d1:a6:4f:
10:f5:46:70:08:d6:2a:79:01:87:ef:67:ca:30:a3:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:E5:2C:65:F0:D1:06:87:B0:F5:42:6A:9E:C1:6E:A8:F6:51:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017::/36
Signature Algorithm: sha256WithRSAEncryption
a9:15:a1:32:79:b2:5a:85:c8:ec:fa:b4:a7:85:75:9d:74:78:
57:6d:fa:36:a5:ff:e2:d8:72:d7:6c:5a:7a:7e:c8:b7:23:9f:
64:de:1d:6b:57:c6:f6:04:da:3e:36:3a:63:95:e9:a5:31:b1:
b3:d3:9c:f0:6f:44:23:6b:1a:cf:69:7d:72:89:bc:b5:33:1d:
64:31:5a:b1:83:b2:4d:12:0f:65:99:4d:12:49:e2:ce:ba:1b:
42:92:fb:fc:25:c2:2b:31:2b:59:1e:cd:60:9b:5d:74:08:7c:
60:d8:02:6c:d2:fa:dd:f3:7e:ee:18:05:a9:8a:8b:b9:da:ce:
99:65:ed:d9:f8:e1:95:5b:42:6e:44:d8:bc:b0:3c:a6:7c:da:
29:b6:40:7f:cb:6c:29:37:f9:ee:e7:ef:e6:a4:50:c7:84:8e:
be:8b:62:89:3c:83:25:9f:fd:dc:c7:a6:c3:41:7f:5b:8d:3a:
7f:f2:94:f5:58:c9:1c:62:a0:87:46:4c:8f:da:72:95:74:e9:
b6:44:c9:1a:2a:d9:c5:89:8d:18:2b:2f:bf:03:57:ed:08:4e:
1b:25:d1:7b:3e:00:0d:88:f6:16:6d:e7:19:d5:1c:0c:ca:2f:
84:9a:32:56:53:81:e1:f8:7b:fc:35:00:b0:bb:58:2d:bc:ad:
3d:74:e6:9b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFdpkkhey+vkgKwPLVAJwpe8j36cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzQxMzBaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDc0NmNhMjBjNTU5NTYzMDBmZTgzNWQzZTU2NTQzZWU0NDZkMTJmMDhmZDU3
NWExOTM4YTNkNmM2ZmVjYjI2NDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALi62ADnrK58Wtm6IpNXImtdVBnGP8NED/uAsgkICba04mZUsuBkHMMWDj3I
6nIp/Kzh6vVltOJJxk8PvYdB346EcYOCpqDJLO+JdeHAXYj+aspZgk7IEGXrRsZf
NLiIRDSsoku0wW6Z+AcUaLhE9VrErQNyaoB25jZ/QG4TkM+U2ads7uSnEKYAdi5J
bKOArGNIITaHc8+SHdtEugl+tw1+cCsuu5Xny1tQi5mRSGXJHCSLI25+ct002Mm0
ew6wCN3zxD9zkWe7BQeOSgrlNOskLLS54K0i/E6guCm7VafsntGh4y7rjjbu2ZDJ
0aZPEPVGcAjWKnkBh+9nyjCjc2kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRnEOUs
ZfDRBoew9UJqnsFuqPZRcTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDA0ZWYxYWYtZTA1Mi00MWI4LWEwYmYtNzBlM2ZhMGFhMDUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BcA
MA0GCSqGSIb3DQEBCwUAA4IBAQCpFaEyebJahcjs+rSnhXWddHhXbfo2pf/i2HLX
bFp6fsi3I59k3h1rV8b2BNo+NjpjlemlMbGz05zwb0QjaxrPaX1yiby1Mx1kMVqx
g7JNEg9lmU0SSeLOuhtCkvv8JcIrMStZHs1gm110CHxg2AJs0vrd837uGAWpiou5
2s6ZZe3Z+OGVW0JuRNi8sDymfNoptkB/y2wpN/nu5+/mpFDHhI6+i2KJPIMln/3c
x6bDQX9bjTp/8pT1WMkcYqCHRkyP2nKVdOm2RMkaKtnFiY0YKy+/A1ftCE4bJdF7
PgANiPYWbecZ1RwMyi+EmjJWU4Hh+Hv8NQCwu1gtvK09dOab
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:19 2025 by rpki-client