Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c1d8e8d-582a-4cac-86e1-f27d0bc3d7b6.roa
File: 4c1d8e8d-582a-4cac-86e1-f27d0bc3d7b6.roa (raw, json)
Hash identifier: 1n0djBfv2Nt8hnPpSAGyrwfu6DGV5zS4smCNErQigIY=
Subject key identifier: AC:DC:5C:24:A7:70:12:AC:94:0B:02:75:8F:2A:D8:53:D9:03:5F:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AEA27FF06DB2C14400E3081B8A796B69C33700F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c1d8e8d-582a-4cac-86e1-f27d0bc3d7b6.roa
Signing time: Wed 05 Mar 2025 15:00:55 +0000
ROA not before: Wed 05 Mar 2025 15:00:55 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ea:27:ff:06:db:2c:14:40:0e:30:81:b8:a7:96:b6:9c:33:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:00:55 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:fd:6a:92:23:91:57:ca:c1:47:47:db:bb:
fd:68:23:f7:6e:d0:0f:9d:c5:43:ec:a7:3e:96:bb:
e7:4d:94:2c:cd:fc:ca:c7:2b:21:84:da:e5:34:a2:
be:7b:ec:55:0c:28:a2:58:da:54:33:68:f1:81:8b:
7b:bf:0e:e4:9d:65:e2:8e:60:9e:c9:dc:f0:61:c3:
2d:66:b8:27:37:14:ac:11:6d:ec:93:d4:7c:17:ac:
6d:46:7d:85:ed:9d:ed:e5:67:93:27:7a:4d:02:cb:
f2:52:53:a8:03:6a:bd:c2:ab:3d:3d:45:34:13:27:
34:e2:55:cd:8c:1b:7d:f5:10:8b:82:9d:f6:f6:dd:
71:5e:20:1a:70:37:dc:6b:e9:e5:64:84:e9:23:64:
c4:05:e8:ad:f2:67:e2:c3:02:84:d4:e0:80:38:58:
73:1e:5b:10:42:c7:94:d8:2c:48:59:2a:f9:05:77:
4e:eb:4c:2e:b3:a1:a7:ee:6d:3b:37:0a:7a:31:a7:
6a:a1:a9:ac:b0:99:5f:06:09:76:33:d3:29:08:93:
f5:42:83:54:eb:ab:73:91:6d:d3:71:e8:8b:dc:d1:
f8:18:1e:2c:29:aa:e3:5e:53:5e:29:09:7a:96:20:
6c:8b:bb:b5:6b:a1:e3:af:3c:50:20:1e:7b:5e:22:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:5C:24:A7:70:12:AC:94:0B:02:75:8F:2A:D8:53:D9:03:5F:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c1d8e8d-582a-4cac-86e1-f27d0bc3d7b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:8080::/48
Signature Algorithm: sha256WithRSAEncryption
a4:27:34:96:d6:55:0d:5d:1e:56:7c:47:b0:db:ae:50:62:af:
b8:e7:50:46:63:f6:57:9b:b9:44:c1:40:66:cd:29:2e:1d:89:
58:1c:2d:55:69:02:a8:fc:50:d6:4a:72:de:6e:95:6e:19:2a:
3c:dc:92:e5:bc:79:c4:54:99:0b:dd:58:e3:0d:a3:6a:3a:e1:
8d:27:dc:32:73:b8:6b:64:a8:53:5c:1e:29:60:d0:21:e7:c9:
77:24:c6:83:d2:57:4d:ea:f0:e4:e0:48:fd:b7:9d:9d:c6:98:
32:f0:5c:a1:21:0d:30:b0:8f:a0:9c:17:ed:f1:8a:e1:a4:00:
be:96:d6:63:95:d3:7c:06:2a:c4:b2:17:9e:c1:13:76:05:0e:
c3:ad:9a:da:de:e5:7b:cb:4b:53:35:dd:03:e5:06:db:8b:31:
9f:90:87:f2:b1:11:cd:c1:cf:d9:d2:28:31:8c:be:f3:c0:ab:
ff:4b:85:15:95:06:bd:ec:9a:d9:ee:7a:65:c8:94:6b:6f:fb:
06:1a:d4:67:e5:c8:f0:aa:d4:22:8f:b6:86:f1:bb:39:76:2a:
b0:82:ea:e6:a5:81:b3:8d:12:b9:5c:2d:3a:03:b9:2a:10:05:
fe:f1:e6:7b:c3:93:e4:22:2f:32:98:23:a1:40:ea:7a:88:18:
45:75:d7:f8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWuon/wbbLBRADjCBuKeWtpwzcA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNTAwNTVaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1NWI1OTJkYWQ2YmExNTYyNTIxNDNhYjhjOWUyMDRkZjU2NTEzZmJjNmQ4
ZTlkNjk4ODc0OWQ1YWUyNjliNGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALeY/WqSI5FXysFHR9u7/Wgj927QD53FQ+ynPpa7502ULM38yscrIYTa5TSi
vnvsVQwooljaVDNo8YGLe78O5J1l4o5gnsnc8GHDLWa4JzcUrBFt7JPUfBesbUZ9
he2d7eVnkyd6TQLL8lJTqANqvcKrPT1FNBMnNOJVzYwbffUQi4Kd9vbdcV4gGnA3
3Gvp5WSE6SNkxAXorfJn4sMChNTggDhYcx5bEELHlNgsSFkq+QV3TutMLrOhp+5t
OzcKejGnaqGprLCZXwYJdjPTKQiT9UKDVOurc5Ft03Hoi9zR+BgeLCmq415TXikJ
epYgbIu7tWuh4688UCAee14iL48CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSs3Fwk
p3ASrJQLAnWPKthT2QNfrjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGMxZDhlOGQtNTgyYS00Y2FjLTg2ZTEtZjI3ZDBiYzNkN2I2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HSA
gDANBgkqhkiG9w0BAQsFAAOCAQEApCc0ltZVDV0eVnxHsNuuUGKvuOdQRmP2V5u5
RMFAZs0pLh2JWBwtVWkCqPxQ1kpy3m6VbhkqPNyS5bx5xFSZC91Y4w2jajrhjSfc
MnO4a2SoU1weKWDQIefJdyTGg9JXTerw5OBI/bedncaYMvBcoSENMLCPoJwX7fGK
4aQAvpbWY5XTfAYqxLIXnsETdgUOw62a2t7le8tLUzXdA+UG24sxn5CH8rERzcHP
2dIoMYy+88Cr/0uFFZUGveya2e56ZciUa2/7BhrUZ+XI8KrUIo+2hvG7OXYqsILq
5qWBs40SuVwtOgO5KhAF/vHme8OT5CIvMpgjoUDqeogYRXXX+A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:25 2025 by rpki-client