Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
File: 655038e8-ae62-4d89-86ef-c5f745dc0c17.roa (raw, json)
Hash identifier: HDx7gFf/9iGagJ6zf+WyevGCrPaa8tDHu1mHMvrmq1w=
Subject key identifier: F2:4D:97:6D:F0:A9:92:60:D5:65:83:F4:B4:B0:18:F1:01:04:CE:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A3EE41DA639844753D55782EEDB2D8C1CA92B84
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
Signing time: Wed 26 Mar 2025 19:23:30 +0000
ROA not before: Wed 26 Mar 2025 19:23:30 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3e:e4:1d:a6:39:84:47:53:d5:57:82:ee:db:2d:8c:1c:a9:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:23:30 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:04:67:a5:1c:5b:b9:6d:38:4a:d5:b4:8b:
b6:87:57:47:4d:23:ee:3e:f6:e6:55:a0:96:41:5c:
3f:27:5c:14:e0:65:ea:8e:ef:a8:fb:91:24:e5:54:
6b:e0:eb:53:25:9c:18:65:51:79:b4:27:ca:68:50:
61:21:a7:a0:92:58:df:2a:69:b3:bf:65:d5:ae:01:
f9:4f:48:f3:42:ea:c3:56:4e:01:29:41:55:99:f1:
56:a2:69:35:41:da:9e:3d:97:36:8b:af:e5:39:e9:
32:4f:44:eb:a2:c2:a5:28:94:48:72:40:11:74:c5:
96:f1:39:ee:e4:fc:27:ad:b3:fa:53:f1:08:0e:64:
9e:b7:33:cb:28:f3:d2:06:56:e6:e8:c2:46:0e:39:
b8:e3:05:38:c8:1f:55:cc:a6:26:92:44:52:92:e3:
a7:d5:61:58:3d:63:33:5a:64:fc:66:81:5f:71:47:
ae:34:6d:93:9c:90:ee:41:50:a0:81:fc:b5:0f:7a:
60:23:96:14:1b:f2:3b:63:ff:bd:63:55:d3:d7:92:
2a:5d:80:18:7b:0c:e7:10:74:99:fd:ba:aa:e8:9a:
a8:10:85:79:67:4c:dc:28:89:fc:b8:f1:19:9e:d7:
96:4d:f0:10:54:ba:8c:33:1c:41:6b:a1:be:ee:b3:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4D:97:6D:F0:A9:92:60:D5:65:83:F4:B4:B0:18:F1:01:04:CE:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:840::/48
Signature Algorithm: sha256WithRSAEncryption
56:ab:8b:cf:3d:85:66:83:7a:31:d6:08:01:06:a1:01:c5:d3:
f4:21:50:56:06:96:c9:fd:83:94:bc:c3:42:dd:78:17:1e:31:
dc:04:d0:d9:75:65:0b:1f:19:ba:3f:a5:8f:9e:f6:55:e6:76:
29:7d:5f:65:4e:60:e0:6d:07:ab:2f:73:54:aa:5b:66:d8:8d:
43:76:99:c7:f7:e9:74:98:ea:5c:88:f5:3c:24:a5:e7:51:9b:
fe:2d:8b:74:96:e4:d0:01:bc:75:43:11:ec:98:b1:f3:ad:2a:
13:99:3a:64:3a:f3:93:e9:a2:1f:80:b0:db:2f:a7:7d:5f:db:
3c:2b:fd:35:6d:15:2f:12:f6:f3:ef:bb:6f:11:af:62:89:30:
02:94:5e:a7:33:d3:68:97:b2:6c:b0:58:63:ad:65:22:1a:13:
df:7c:3d:03:aa:c1:51:48:d5:09:95:18:ab:b2:c4:a9:2e:4c:
ad:ad:89:e3:19:7e:e3:50:a5:78:1d:13:d1:b3:50:fa:b4:99:
cf:c8:6f:26:7f:d5:54:66:e3:81:da:fe:c4:c6:6b:f6:6f:54:
34:52:7f:5a:d5:3d:ec:f5:2f:66:91:a5:2d:0d:b7:98:2f:ba:
cf:4c:21:83:5e:1a:ae:94:d6:a7:43:e7:e0:a9:ea:52:e4:19:
0f:4b:56:89
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKj7kHaY5hEdT1VeC7tstjBypK4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMjYxOTIzMzBaFw0yNTA0MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5NGNiNTk3NTE0OGEzOTU2ZjNjNjZjZDg1YzM4MDY1ZjY3MjhhMzhjMDlk
YTIzYjk1NzM5MjdiMjAwZjFlMTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZBBGelHFu5bThK1bSLtodXR00j7j725lWglkFcPydcFOBl6o7vqPuRJOVU
a+DrUyWcGGVRebQnymhQYSGnoJJY3ypps79l1a4B+U9I80Lqw1ZOASlBVZnxVqJp
NUHanj2XNouv5TnpMk9E66LCpSiUSHJAEXTFlvE57uT8J62z+lPxCA5knrczyyjz
0gZW5ujCRg45uOMFOMgfVcymJpJEUpLjp9VhWD1jM1pk/GaBX3FHrjRtk5yQ7kFQ
oIH8tQ96YCOWFBvyO2P/vWNV09eSKl2AGHsM5xB0mf26quiaqBCFeWdM3CiJ/Ljx
GZ7Xlk3wEFS6jDMcQWuhvu6zZ8cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTyTZdt
8KmSYNVlg/S0sBjxAQTOlDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjU1MDM4ZTgtYWU2Mi00ZDg5LTg2ZWYtYzVmNzQ1ZGMwYzE3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H8I
QDANBgkqhkiG9w0BAQsFAAOCAQEAVquLzz2FZoN6MdYIAQahAcXT9CFQVgaWyf2D
lLzDQt14Fx4x3ATQ2XVlCx8Zuj+lj572VeZ2KX1fZU5g4G0Hqy9zVKpbZtiNQ3aZ
x/fpdJjqXIj1PCSl51Gb/i2LdJbk0AG8dUMR7Jix860qE5k6ZDrzk+miH4Cw2y+n
fV/bPCv9NW0VLxL28++7bxGvYokwApRepzPTaJeybLBYY61lIhoT33w9A6rBUUjV
CZUYq7LEqS5Mra2J4xl+41CleB0T0bNQ+rSZz8hvJn/VVGbjgdr+xMZr9m9UNFJ/
WtU97PUvZpGlLQ23mC+6z0whg14arpTWp0Pn4KnqUuQZD0tWiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:18 2025 by rpki-client