Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
File: 4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa (raw, json)
Hash identifier: ME8X0bOhMEGCJ+uLoKZDeOP7jmijIZgXwh3S2j6yi/o=
Subject key identifier: D0:C9:58:C9:4C:4A:71:3A:AA:15:09:F6:5B:92:13:1C:A9:4E:53:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BA8B1576E7B098F8182AFC08F4BEEF910542468
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
Signing time: Wed 05 Mar 2025 17:10:23 +0000
ROA not before: Wed 05 Mar 2025 17:10:23 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a8:b1:57:6e:7b:09:8f:81:82:af:c0:8f:4b:ee:f9:10:54:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:10:23 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:eb:5b:b5:41:08:2c:e7:44:a4:6d:85:35:
91:37:1c:d9:91:81:8e:5b:2d:d7:48:05:a4:6b:36:
d6:00:8c:f0:a0:be:12:96:21:5b:95:87:e0:ed:2c:
64:e5:7d:88:f2:89:6d:c5:5a:86:06:80:bb:dc:71:
0e:0a:fa:d8:ed:00:d3:27:62:ef:09:e4:c0:4a:71:
d1:fd:0a:0d:7b:b8:11:e8:6b:44:e1:1f:e0:a8:68:
ba:79:ef:0c:d4:d8:32:ac:4b:33:47:d5:73:bd:df:
a0:0e:9e:68:a9:cd:f0:1b:5c:e9:26:10:1e:37:50:
28:7d:0c:86:f1:a7:f0:bc:df:59:e3:63:27:60:5d:
e2:79:52:77:57:73:63:15:ee:a7:64:56:ec:8c:b8:
42:ff:e5:19:f0:08:ea:6d:19:89:de:b9:ce:0e:49:
94:1a:8d:1a:50:58:03:85:3d:d5:36:f5:81:f5:b2:
6c:c7:fc:e1:59:4c:b5:22:30:26:92:6c:4f:ce:73:
d9:36:81:38:02:f1:36:21:e2:1d:63:41:b6:52:55:
16:53:8a:8e:ed:89:9e:01:0d:97:25:de:bf:4e:e1:
3f:3c:fe:f3:9d:d5:a9:99:0a:35:ee:2f:8e:cf:7b:
fc:47:6b:4e:1e:4d:c8:9e:05:cd:80:e7:79:75:b9:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:58:C9:4C:4A:71:3A:AA:15:09:F6:5B:92:13:1C:A9:4E:53:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c522b3a-46c0-4e5a-8698-21b41418c9a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:c3:cb:fc:b9:66:ee:97:4d:76:8b:c8:91:30:18:8d:b0:ab:
09:6f:f9:db:e2:b5:66:9c:b4:33:1b:ee:de:de:89:71:22:14:
8e:dd:b6:86:4a:71:76:17:e2:26:c2:3d:b8:3e:98:12:c2:c9:
d8:bf:e1:3c:b1:cd:9f:ca:4b:7d:02:2a:7a:54:c0:2b:dd:3c:
d9:70:b1:1a:e5:4b:77:bc:ee:a9:52:26:0f:b0:48:e7:70:d7:
d8:e0:20:c5:20:5d:fa:c6:c4:7f:e1:e3:97:d4:a4:19:c1:7d:
e7:46:e5:74:82:19:49:b9:0c:06:40:0e:7a:d1:6c:81:7f:71:
2f:28:13:87:94:48:31:94:fc:73:54:c9:1f:8b:89:4c:c0:27:
45:9a:43:49:74:93:9a:52:67:2a:f3:51:ac:c0:e0:43:7b:65:
f3:f0:f5:67:b3:89:ea:e0:40:85:1a:f6:12:52:cf:34:8a:ee:
77:9f:2a:81:cb:80:e6:39:44:ad:6f:55:3b:42:4a:9e:fb:73:
aa:bb:8f:00:06:74:67:8b:3e:d3:20:19:75:f1:e5:06:10:d0:
1e:56:6f:af:f5:42:5f:f5:d5:56:26:19:ed:5f:16:86:97:2c:
cc:aa:ba:dc:43:cc:01:64:cb:00:41:e6:a6:22:7e:27:e8:b0:
cb:bc:35:d3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUe6ixV257CY+Bgq/Aj0vu+RBUJGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzEwMjNaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGMwZTYxYTM4NDJkNzUzMmMwMzcwNjQ2MDgzODljZjAwZDE5MmYwZTFlZmE0
MmMzNDJkMjQyMDk2ZWQ1NWZlZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALe761u1QQgs50SkbYU1kTcc2ZGBjlst10gFpGs21gCM8KC+EpYhW5WH4O0s
ZOV9iPKJbcVahgaAu9xxDgr62O0A0ydi7wnkwEpx0f0KDXu4EehrROEf4Khounnv
DNTYMqxLM0fVc73foA6eaKnN8Btc6SYQHjdQKH0MhvGn8LzfWeNjJ2Bd4nlSd1dz
YxXup2RW7Iy4Qv/lGfAI6m0Zid65zg5JlBqNGlBYA4U91Tb1gfWybMf84VlMtSIw
JpJsT85z2TaBOALxNiHiHWNBtlJVFlOKju2JngENlyXev07hPzz+853VqZkKNe4v
js97/EdrTh5NyJ4FzYDneXW5jHcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTQyVjJ
TEpxOqoVCfZbkhMcqU5TQjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGM1MjJiM2EtNDZjMC00ZTVhLTg2OTgtMjFiNDE0MThjOWE0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HtA
MA0GCSqGSIb3DQEBCwUAA4IBAQClw8v8uWbul012i8iRMBiNsKsJb/nb4rVmnLQz
G+7e3olxIhSO3baGSnF2F+Imwj24PpgSwsnYv+E8sc2fykt9Aip6VMAr3TzZcLEa
5Ut3vO6pUiYPsEjncNfY4CDFIF36xsR/4eOX1KQZwX3nRuV0ghlJuQwGQA560WyB
f3EvKBOHlEgxlPxzVMkfi4lMwCdFmkNJdJOaUmcq81GswOBDe2Xz8PVns4nq4ECF
GvYSUs80iu53nyqBy4DmOUStb1U7Qkqe+3Oqu48ABnRniz7TIBl18eUGENAeVm+v
9UJf9dVWJhntXxaGlyzMqrrcQ8wBZMsAQeamIn4n6LDLvDXT
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:04 2025 by rpki-client