Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: WvgRvehmyY5iuCzwFZY3SFYUJV08QSa1u0AlgZXpJ0I=
Subject key identifier: 91:6F:3A:FB:E3:59:97:EA:63:E7:19:61:52:3B:4F:E6:0F:CA:70:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 390D4FF0A690C216A6FC1B4959F14259B6E4CA95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Wed 05 Mar 2025 16:51:06 +0000
ROA not before: Wed 05 Mar 2025 16:51:06 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0d:4f:f0:a6:90:c2:16:a6:fc:1b:49:59:f1:42:59:b6:e4:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:51:06 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:1d:94:93:00:5c:d8:ee:fc:b1:88:dc:83:
62:75:76:30:d9:98:a3:e6:f1:52:7c:42:7b:ad:8f:
07:11:5b:e3:9c:23:40:da:93:9e:4c:a4:d2:4a:7a:
af:a7:84:a8:e0:db:ac:d6:d6:54:f8:a3:8a:6a:4c:
21:84:9b:98:d3:95:f3:45:ad:8d:51:f2:9b:4c:a1:
2b:3e:93:d3:13:c3:d9:52:c0:ba:48:68:f2:80:b9:
c9:eb:8a:a5:28:24:e5:37:de:d6:f7:55:f8:83:e0:
e5:61:24:c9:a6:28:5d:ca:cc:07:d6:32:3f:49:8e:
23:2c:95:e8:29:d0:50:9d:8a:0e:22:1f:46:b1:e8:
fd:6f:c2:b6:bc:12:ac:fe:9c:eb:91:39:e3:2b:a9:
f9:5c:30:12:0e:c6:9e:72:04:5a:6c:64:6d:93:d3:
27:95:c4:c8:51:6e:fa:ca:b6:f0:98:e1:41:98:83:
57:b1:32:4c:4f:b0:92:77:fb:a0:2a:98:86:4a:0c:
51:dc:81:f5:1c:5e:65:df:4f:79:71:65:81:b9:a3:
6d:3b:3f:be:3a:61:32:51:46:4d:bc:8e:52:dc:d1:
d9:47:d2:58:a7:7b:eb:0e:be:c0:ac:34:a5:7b:91:
c8:c9:d3:90:5d:1b:44:db:26:ed:dc:27:7e:da:1e:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:3A:FB:E3:59:97:EA:63:E7:19:61:52:3B:4F:E6:0F:CA:70:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
39:01:83:90:e5:97:cd:85:45:83:1d:4d:7f:59:38:ae:5f:f7:
65:1c:36:ba:8c:72:31:95:1b:bc:ce:fc:30:9a:5f:df:73:bb:
dd:bd:80:88:4a:df:5e:f0:2c:58:58:1b:27:73:cf:e8:10:c4:
3b:e6:ae:bc:f4:31:e5:c7:b9:fa:af:10:2f:1a:01:e0:d3:ac:
dd:26:5e:99:bd:21:a8:03:cd:7c:c3:5e:ab:f2:dc:4e:b9:76:
80:5d:0a:36:35:97:a4:03:43:c4:78:4b:df:b4:91:d9:fc:14:
9a:4d:28:dc:0c:be:a5:65:54:04:91:23:19:e6:38:bf:32:7a:
20:3d:d3:ec:37:bd:13:8e:59:89:45:39:2d:50:b3:ef:a2:60:
82:18:47:7e:a9:b2:5b:da:7a:e3:4c:9e:b1:3f:4b:0e:76:f8:
70:47:ab:16:51:fb:f8:01:44:d6:b1:0f:aa:7c:ea:ed:2c:fb:
f1:19:3a:21:78:90:98:f9:bd:e7:58:a8:a3:9a:44:eb:d6:bc:
a9:7b:0b:cb:a6:8f:43:bb:6f:d5:0d:48:19:e5:01:34:06:32:
31:dd:5a:e0:07:51:e4:3b:c0:01:a0:54:71:05:1c:1a:a8:0c:
33:07:8e:cb:a9:a6:8b:33:2a:48:7a:8e:4b:93:b3:3b:a3:c1:
73:af:fe:b0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOQ1P8KaQwham/BtJWfFCWbbkypUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjUxMDZaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDI2ODhhMTU3MDYyNjFlYTU5OWFkMTFhODE2ZjQ3ZjZlYTI1ZjdlMjA3M2Fl
NDI1Zjg4ODU0NDVlZjZiOWFjNDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVxHZSTAFzY7vyxiNyDYnV2MNmYo+bxUnxCe62PBxFb45wjQNqTnkyk0kp6
r6eEqODbrNbWVPijimpMIYSbmNOV80WtjVHym0yhKz6T0xPD2VLAukho8oC5yeuK
pSgk5Tfe1vdV+IPg5WEkyaYoXcrMB9YyP0mOIyyV6CnQUJ2KDiIfRrHo/W/CtrwS
rP6c65E54yup+VwwEg7GnnIEWmxkbZPTJ5XEyFFu+sq28JjhQZiDV7EyTE+wknf7
oCqYhkoMUdyB9RxeZd9PeXFlgbmjbTs/vjphMlFGTbyOUtzR2UfSWKd76w6+wKw0
pXuRyMnTkF0bRNsm7dwnftoe0TECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSRbzr7
41mX6mPnGWFSO0/mD8pwBzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2NlNDEzYWQtNTYwZC00ZWI4LTkxNWItOGM2ZTAxZDk3OTEwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ABQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA5AYOQ5ZfNhUWDHU1/WTiuX/dlHDa6jHIxlRu8
zvwwml/fc7vdvYCISt9e8CxYWBsnc8/oEMQ75q689DHlx7n6rxAvGgHg06zdJl6Z
vSGoA818w16r8txOuXaAXQo2NZekA0PEeEvftJHZ/BSaTSjcDL6lZVQEkSMZ5ji/
MnogPdPsN70TjlmJRTktULPvomCCGEd+qbJb2nrjTJ6xP0sOdvhwR6sWUfv4AUTW
sQ+qfOrtLPvxGToheJCY+b3nWKijmkTr1rypewvLpo9Du2/VDUgZ5QE0BjIx3Vrg
B1HkO8ABoFRxBRwaqAwzB47LqaaLMypIeo5Lk7M7o8Fzr/6w
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:17 2025 by rpki-client