Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: bs8ftDjC9S7KdMalsvy5TesDC2Fq8MmzeTv2AgXrxCM=
Subject key identifier: 4F:D4:D6:B0:B9:F7:21:EF:71:6C:91:23:93:CF:36:33:3F:A4:4A:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EB8BAA9FA31E7388E0552FF8978FA6C05788863
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Wed 05 Mar 2025 17:40:29 +0000
ROA not before: Wed 05 Mar 2025 17:40:29 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b8:ba:a9:fa:31:e7:38:8e:05:52:ff:89:78:fa:6c:05:78:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:40:29 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:2d:ab:bd:ed:99:80:13:d7:39:10:9c:18:
50:e7:24:80:35:44:fd:b9:79:80:48:89:92:ae:c3:
46:3b:72:b0:cc:af:d8:4b:be:7f:f3:7e:72:67:a9:
04:08:fc:df:75:25:a4:35:b2:4a:7f:bd:29:e8:93:
b5:f6:ce:e7:3b:a1:5b:b4:ad:ad:2d:cf:72:c7:ea:
6f:00:50:50:1c:1e:61:5f:99:2f:3c:ec:16:dc:b5:
31:c4:3d:1d:7f:55:5b:63:63:02:a9:1d:20:a6:9e:
b5:6e:66:ea:3e:b0:4e:72:52:a9:a0:84:06:2c:32:
11:d8:99:05:e3:2a:7a:26:55:ef:87:60:43:09:38:
ef:b5:73:33:36:52:83:6d:2f:24:d9:40:b3:25:7b:
a8:7d:7b:9d:09:62:9e:48:1e:ad:c9:c4:87:0a:dc:
ae:cb:91:c9:6e:73:b1:6f:3e:f9:7c:9b:af:62:cb:
85:47:d6:d0:fb:3f:e9:fc:cf:8f:2f:c0:c7:6d:3b:
3e:d9:cd:cd:d7:6c:66:79:91:05:18:d6:47:06:9d:
30:24:12:52:c4:df:e0:3c:62:c8:b8:38:7d:e7:38:
41:e9:d0:c8:6c:a0:09:a2:29:e4:d4:ef:48:ad:51:
66:42:aa:7a:02:9c:3b:72:36:11:9c:a5:9a:1a:46:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:D6:B0:B9:F7:21:EF:71:6C:91:23:93:CF:36:33:3F:A4:4A:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
2e:ca:d9:f3:4b:f7:1e:72:01:90:78:32:3d:49:fa:71:b2:f2:
e1:fd:7a:86:1c:81:47:d1:cf:b0:01:d7:fd:6d:8e:f9:7d:ba:
21:66:85:87:51:82:42:9e:10:f8:1b:db:5e:a0:b9:f3:71:7f:
82:cf:53:28:50:94:e9:4f:d1:f7:93:c7:75:5a:c8:00:29:4f:
1d:b9:ff:01:76:fe:c8:32:a1:49:17:ca:86:3a:65:97:87:ca:
a4:d0:e5:82:a5:fd:67:b6:e7:b6:b9:78:d9:a4:d5:02:db:a4:
2a:cf:89:63:1d:6a:cf:10:02:5a:48:9c:e5:e6:ae:86:c8:a5:
cc:6e:b2:96:12:92:6b:ed:66:43:97:11:c2:75:41:50:86:96:
39:c1:34:50:fc:b3:df:ca:e4:3d:2d:10:93:28:03:da:09:62:
e5:00:8e:0b:8e:21:9b:a1:50:1e:e9:13:8f:bd:b7:f7:18:dd:
3d:13:72:74:55:8e:73:67:e1:e5:a9:70:3f:c5:ff:af:5b:6d:
81:68:8c:21:26:fc:6a:6c:8a:c8:c4:9f:28:bb:d5:5a:67:89:
4c:88:e0:6a:c0:6a:02:e2:04:8f:ea:d9:20:f5:c0:6d:6d:fd:
4f:18:ad:aa:2a:ba:8d:fa:f1:b5:e8:1a:4b:ce:10:8e:b6:24:
9b:bf:7d:d8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHri6qfox5ziOBVL/iXj6bAV4iGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzQwMjlaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhYzMyYzI1YTk2MmMxZDhhYzAxMWE3MTY5YzVhNDdmM2YxMDkzZmU1ZWY3
N2RhYWQzNGNlMDZjN2ExMTk4YjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKo7Lau97ZmAE9c5EJwYUOckgDVE/bl5gEiJkq7DRjtysMyv2Eu+f/N+cmep
BAj833UlpDWySn+9KeiTtfbO5zuhW7StrS3PcsfqbwBQUBweYV+ZLzzsFty1McQ9
HX9VW2NjAqkdIKaetW5m6j6wTnJSqaCEBiwyEdiZBeMqeiZV74dgQwk477VzMzZS
g20vJNlAsyV7qH17nQlinkgercnEhwrcrsuRyW5zsW8++Xybr2LLhUfW0Ps/6fzP
jy/Ax207PtnNzddsZnmRBRjWRwadMCQSUsTf4DxiyLg4fec4QenQyGygCaIp5NTv
SK1RZkKqegKcO3I2EZylmhpGRpUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRP1Naw
ufch73FskSOTzzYzP6RKrjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGI1Nzg5MzgtM2RjYS00ZDcyLTgzODUtZjhhOTNlNTA4Mzc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BkE
MA0GCSqGSIb3DQEBCwUAA4IBAQAuytnzS/cecgGQeDI9SfpxsvLh/XqGHIFH0c+w
Adf9bY75fbohZoWHUYJCnhD4G9teoLnzcX+Cz1MoUJTpT9H3k8d1WsgAKU8duf8B
dv7IMqFJF8qGOmWXh8qk0OWCpf1ntue2uXjZpNUC26Qqz4ljHWrPEAJaSJzl5q6G
yKXMbrKWEpJr7WZDlxHCdUFQhpY5wTRQ/LPfyuQ9LRCTKAPaCWLlAI4LjiGboVAe
6ROPvbf3GN09E3J0VY5zZ+HlqXA/xf+vW22BaIwhJvxqbIrIxJ8ou9VaZ4lMiOBq
wGoC4gSP6tkg9cBtbf1PGK2qKrqN+vG16BpLzhCOtiSbv33Y
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:31 2025 by rpki-client