Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
File: 7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa (raw, json)
Hash identifier: kwCT0WcY+HJKuL75JSt4SR/bLmA5cxXLXHPk0MG/ZOw=
Subject key identifier: 01:74:2D:51:9B:69:B8:77:F9:A4:5D:BC:E1:D2:E3:5F:0F:AB:35:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63BF961AA749973737B756DE4783D0741DE7EF78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
Signing time: Wed 05 Mar 2025 15:01:06 +0000
ROA not before: Wed 05 Mar 2025 15:01:06 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bf:96:1a:a7:49:97:37:37:b7:56:de:47:83:d0:74:1d:e7:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:01:06 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:ca:b7:48:ca:cb:88:20:d7:87:ac:cd:da:
c4:94:89:c3:74:a4:45:34:83:44:1c:2f:08:e6:82:
52:c3:65:bc:b2:2f:1b:a4:b5:2f:6f:7f:46:da:6a:
99:18:d8:45:7b:60:0f:dd:ce:98:b8:00:53:09:c0:
0a:49:f2:d6:2f:f4:b8:48:fb:99:59:84:32:b8:86:
36:90:8f:5c:a7:b9:a0:0b:a7:ce:98:6f:2b:9b:32:
b2:ad:76:a1:f2:d7:db:f1:27:d4:19:78:4a:e4:06:
c9:94:a9:c8:a8:27:ca:8f:a0:b0:b6:51:69:01:bc:
e9:ac:a5:75:4a:a0:27:0f:8d:d7:ac:d9:fd:2c:67:
7d:a9:58:40:53:a4:2f:3d:1e:8d:a5:07:1a:4c:a2:
5e:e5:f5:3a:e9:0c:2e:38:42:56:8c:8f:e1:b2:3d:
57:ed:6a:8c:1a:d7:1f:f4:28:fd:3a:1e:a8:b3:80:
89:7a:a1:ae:1e:d0:f6:5a:2f:d1:f7:31:7f:3d:e1:
53:20:e9:12:ee:21:e3:ab:9b:98:89:8f:ca:9a:ce:
63:8e:2e:03:55:a6:4f:53:34:dd:5d:0c:5d:14:34:
67:1e:e2:c8:70:86:d7:9c:12:da:5d:1e:cc:86:fd:
88:30:13:f6:72:23:0e:36:2f:60:1d:3a:2e:bb:da:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:74:2D:51:9B:69:B8:77:F9:A4:5D:BC:E1:D2:E3:5F:0F:AB:35:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e080::/48
Signature Algorithm: sha256WithRSAEncryption
22:99:1d:67:a9:65:37:21:3a:5f:83:a2:46:9a:53:75:c0:53:
4c:47:da:42:fd:bc:56:c2:e8:74:ca:ad:63:7d:db:be:77:7e:
cc:5e:dc:50:78:45:86:12:49:74:f2:35:df:a2:18:e5:4c:d4:
bb:ef:63:b0:cb:43:d0:e0:f8:d4:7d:34:3b:85:41:6d:ea:0a:
f2:ee:37:92:0c:6f:b9:f5:8b:74:af:57:40:a9:be:92:c6:ee:
9e:26:39:e6:12:5d:37:e7:08:9a:1d:c4:bf:48:2a:27:19:62:
9f:08:81:ee:7e:e2:d4:76:a1:b9:96:83:dd:7c:f4:f3:68:24:
13:1c:75:18:9a:bd:b2:86:1f:a0:d6:f0:0c:27:2f:8e:d6:6a:
ac:e2:62:53:a8:1a:cf:4d:1a:fc:d2:ed:4d:c5:33:8b:b1:d5:
55:e0:f2:67:96:60:a2:c4:bc:82:8e:a2:08:ae:a2:f7:bd:a0:
25:bb:11:1b:39:88:bc:9c:5c:21:a5:24:5c:f8:ab:02:9b:b5:
cd:b4:7e:50:b6:ef:71:3a:62:dd:99:dd:f0:cb:66:0f:f1:32:
da:f9:5a:0d:dc:d8:c6:b4:ec:8e:d4:83:bb:b4:c8:e8:ef:f7:
57:af:40:05:39:86:7c:ae:7f:0a:6e:41:f1:cc:f7:aa:5e:ee:
3c:7a:c4:95
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUY7+WGqdJlzc3t1beR4PQdB3n73gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNTAxMDZaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDE4ZjE4M2YyMmNhMzRjMjgxMTMxMmE2YTI3NmFiNGUwNjkyOGY5YzcxZWRh
NTNiZDQxNTc0NmFiNDY0Y2E2ODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/DyrdIysuIINeHrM3axJSJw3SkRTSDRBwvCOaCUsNlvLIvG6S1L29/Rtpq
mRjYRXtgD93OmLgAUwnACkny1i/0uEj7mVmEMriGNpCPXKe5oAunzphvK5sysq12
ofLX2/En1Bl4SuQGyZSpyKgnyo+gsLZRaQG86ayldUqgJw+N16zZ/SxnfalYQFOk
Lz0ejaUHGkyiXuX1OukMLjhCVoyP4bI9V+1qjBrXH/Qo/ToeqLOAiXqhrh7Q9lov
0fcxfz3hUyDpEu4h46ubmImPyprOY44uA1WmT1M03V0MXRQ0Zx7iyHCG15wS2l0e
zIb9iDAT9nIjDjYvYB06LrvaAZ0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQBdC1R
m2m4d/mkXbzh0uNfD6s1SzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2I1ZjQ1YTItYWI3OS00YWQzLWEwOWUtODdiMzU1Zjc2NzMyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HLg
gDANBgkqhkiG9w0BAQsFAAOCAQEAIpkdZ6llNyE6X4OiRppTdcBTTEfaQv28VsLo
dMqtY33bvnd+zF7cUHhFhhJJdPI136IY5UzUu+9jsMtD0OD41H00O4VBbeoK8u43
kgxvufWLdK9XQKm+ksbuniY55hJdN+cImh3Ev0gqJxlinwiB7n7i1HahuZaD3Xz0
82gkExx1GJq9soYfoNbwDCcvjtZqrOJiU6gaz00a/NLtTcUzi7HVVeDyZ5ZgosS8
go6iCK6i972gJbsRGzmIvJxcIaUkXPirApu1zbR+ULbvcTpi3Znd8MtmD/Ey2vla
DdzYxrTsjtSDu7TI6O/3V69ABTmGfK5/Cm5B8cz3ql7uPHrElQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:50 2025 by rpki-client