Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
File: 5387f3e7-ef20-46b2-8929-bf638dce97e1.roa (raw, json)
Hash identifier: OdF+8ut8LAOAkVKIjgO9VrX49mX2+VVmcxoz3KZiiIk=
Subject key identifier: 3D:4B:8E:2C:EB:6E:97:69:82:A5:A7:26:AC:D6:E0:22:03:CB:CA:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79EEE7BB708761F1E0ED17971A42DA0DAF665EAB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
Signing time: Wed 05 Mar 2025 15:50:48 +0000
ROA not before: Wed 05 Mar 2025 15:50:48 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ee:e7:bb:70:87:61:f1:e0:ed:17:97:1a:42:da:0d:af:66:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:50:48 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:84:14:2d:48:c9:f0:3c:57:99:a6:d4:ab:
b7:c4:bf:96:b0:4e:41:36:bb:91:cc:04:37:bc:e7:
56:96:16:25:8b:58:ec:7c:92:97:74:25:4f:50:dc:
20:31:75:7a:d2:76:21:cb:d9:cc:1c:6a:ee:01:26:
47:25:6e:ff:f9:75:80:5a:6c:51:db:70:f6:2d:de:
3c:67:7d:33:41:0b:3a:8a:c1:37:bc:16:c6:cd:be:
19:cb:d4:b5:9a:1e:bc:6b:5f:d0:43:20:31:9d:08:
0a:29:00:b0:fc:fc:1e:65:fa:ce:e5:c1:8c:05:e9:
77:d1:af:3f:24:55:70:6d:f3:0e:75:e4:73:e4:fd:
d8:82:93:1a:f8:46:aa:dc:ea:e6:8f:6e:d6:ce:d2:
80:2c:a5:e3:22:38:78:74:cb:9f:af:8b:65:33:f5:
6f:41:10:1b:71:c9:83:3e:f4:72:43:3c:47:3e:83:
14:24:6e:45:ff:f3:58:24:86:43:39:58:6c:53:c2:
0d:71:e3:7b:8c:c9:f9:f3:0f:bc:2c:58:1b:a0:22:
9f:b6:6d:c8:3b:30:44:89:fc:a1:37:87:db:1a:07:
56:0d:60:ce:39:e7:9c:6f:8d:e8:b7:87:b9:62:ab:
9b:8d:b5:4e:78:53:c1:00:91:93:ad:f4:88:8a:a8:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:8E:2C:EB:6E:97:69:82:A5:A7:26:AC:D6:E0:22:03:CB:CA:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5000::/40
Signature Algorithm: sha256WithRSAEncryption
15:9b:0e:c0:a7:bd:be:19:35:56:ba:ee:8f:3a:5d:07:5d:a5:
ac:74:7e:89:d0:2b:b5:77:32:8a:db:cf:14:40:a2:25:03:ce:
2a:72:44:45:a4:b1:90:44:77:c7:cb:c7:86:13:26:cc:95:50:
3e:c8:7c:c1:31:58:71:24:cb:38:04:8d:f3:28:c8:fb:0d:88:
9f:8a:3b:ec:b1:0c:37:0b:83:27:be:f2:2d:df:ed:9d:eb:9c:
33:2d:2c:41:69:04:76:f1:60:6c:cb:1a:50:9f:e8:b1:ec:16:
68:5a:b5:fa:57:c9:3d:43:7f:7a:73:d3:cd:9f:36:ad:fc:b6:
97:58:6e:e7:0a:3c:1c:f5:00:b9:11:b5:0d:d9:a4:6a:a3:18:
b2:bf:2d:33:ee:4b:2d:fd:e8:ef:fc:b0:fd:eb:2b:5e:06:58:
51:32:7b:dd:ab:b8:d4:78:d7:34:6f:ff:5a:c8:e9:ff:89:61:
cb:e0:61:5b:7e:11:d0:39:70:a8:fe:dd:5e:10:2e:84:a8:11:
8c:03:dd:91:9c:ed:99:13:74:35:79:97:1a:f1:90:20:11:2c:
f9:23:97:06:bb:20:b8:8b:9a:53:16:3f:66:64:11:54:b7:bf:
63:80:c7:a6:0c:39:50:74:d9:c7:d1:18:80:17:8a:78:2f:b7:
5a:bc:c1:5c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUee7nu3CHYfHg7ReXGkLaDa9mXqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNTUwNDhaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4YmI5YTMwZTdmZjgzMDkxZGJjNjgxYmYyZTQ0ZTQyMDYyNWFjMzUzODI4
NTQ3NzliMGYzNmJjNGUzOWQ2ZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJEnhBQtSMnwPFeZptSrt8S/lrBOQTa7kcwEN7znVpYWJYtY7HySl3QlT1Dc
IDF1etJ2IcvZzBxq7gEmRyVu//l1gFpsUdtw9i3ePGd9M0ELOorBN7wWxs2+GcvU
tZoevGtf0EMgMZ0ICikAsPz8HmX6zuXBjAXpd9GvPyRVcG3zDnXkc+T92IKTGvhG
qtzq5o9u1s7SgCyl4yI4eHTLn6+LZTP1b0EQG3HJgz70ckM8Rz6DFCRuRf/zWCSG
QzlYbFPCDXHje4zJ+fMPvCxYG6Ain7ZtyDswRIn8oTeH2xoHVg1gzjnnnG+N6LeH
uWKrm421TnhTwQCRk630iIqoQ/MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ9S44s
626XaYKlpyas1uAiA8vKvTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTM4N2YzZTctZWYyMC00NmIyLTg5MjktYmY2MzhkY2U5N2UxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAVmw7Ap72+GTVWuu6POl0HXaWsdH6J0Cu1dzKK
288UQKIlA84qckRFpLGQRHfHy8eGEybMlVA+yHzBMVhxJMs4BI3zKMj7DYifijvs
sQw3C4MnvvIt3+2d65wzLSxBaQR28WBsyxpQn+ix7BZoWrX6V8k9Q396c9PNnzat
/LaXWG7nCjwc9QC5EbUN2aRqoxiyvy0z7kst/ejv/LD96yteBlhRMnvdq7jUeNc0
b/9ayOn/iWHL4GFbfhHQOXCo/t1eEC6EqBGMA92RnO2ZE3Q1eZca8ZAgESz5I5cG
uyC4i5pTFj9mZBFUt79jgMemDDlQdNnH0RiAF4p4L7davMFc
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:06 2025 by rpki-client