Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier: A259iKwrW2t8jutNgIPWL9NXyLhlu2/8C/4x0JR6cfc=
Subject key identifier: 2E:25:58:D1:10:7A:93:07:B7:7D:CA:6D:8A:E4:B5:B9:04:7E:7D:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 523EABB266E23BA619B9A87AC23AFC38703610CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time: Wed 05 Mar 2025 17:40:24 +0000
ROA not before: Wed 05 Mar 2025 17:40:24 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3e:ab:b2:66:e2:3b:a6:19:b9:a8:7a:c2:3a:fc:38:70:36:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:40:24 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:ed:d6:5e:14:fc:01:95:31:01:d8:a2:c8:
72:25:bc:6c:be:0a:50:6c:20:99:b5:a0:06:f8:16:
14:f5:4a:ed:4d:8b:3f:e3:94:23:77:e2:dd:dc:a5:
4e:e7:88:4d:84:bc:d5:aa:70:da:b3:cc:cb:c6:06:
d4:ac:4c:f3:81:39:d2:6d:ce:23:e8:2e:e3:e1:c9:
a2:ca:ca:bf:eb:e7:fe:86:2f:fe:0c:7a:af:50:9d:
18:5e:a0:61:4c:59:f8:cc:d2:a8:10:9c:11:ec:17:
c9:97:aa:53:3b:d1:45:7c:ee:4b:22:ad:f4:05:ad:
d1:f0:43:d5:65:91:81:57:8f:e8:cc:41:9e:b1:13:
40:61:54:63:d0:ae:fb:82:0d:d7:c6:4f:97:c2:b1:
47:60:b6:eb:bd:2a:eb:90:23:e8:04:c9:97:85:dd:
30:ee:17:9e:8b:73:ac:dc:20:89:b1:1a:ea:9d:55:
43:6a:75:29:87:80:59:d5:04:49:c9:0b:58:be:ee:
9e:45:35:a1:97:42:56:9a:75:2f:ae:4e:d1:0e:ee:
71:74:d9:88:dc:e2:0f:ba:2e:cf:5c:c9:5e:1b:5d:
61:6e:c5:ef:45:e2:fc:64:21:b3:3c:2e:1e:59:da:
e0:68:b2:7e:ea:ba:f9:d0:bc:49:07:ea:75:15:9c:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:58:D1:10:7A:93:07:B7:7D:CA:6D:8A:E4:B5:B9:04:7E:7D:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/38
Signature Algorithm: sha256WithRSAEncryption
31:64:ae:2d:5e:e1:f2:05:46:da:55:55:e6:f9:25:3c:0f:35:
05:03:01:02:fa:70:1f:dc:31:c9:68:32:b6:92:1b:e4:50:c0:
28:00:2a:be:78:1b:83:93:91:32:e2:ec:1e:7a:53:44:b0:95:
74:ad:94:b4:1b:7f:97:a1:3e:58:8f:f0:14:69:be:33:27:a8:
8d:10:34:e5:cc:f5:d5:4f:bb:8f:9e:81:3c:c7:e7:8c:27:7d:
54:42:59:80:1f:6e:44:ba:86:b2:29:39:85:ea:b7:88:6d:32:
4e:89:cd:94:2d:32:9f:46:f8:9e:ca:c7:17:c1:82:ca:52:ee:
72:3f:f0:43:6e:a6:f1:ff:32:32:e6:8f:0e:99:bb:c9:4d:d9:
8c:30:2d:8f:2f:49:09:19:a8:04:f4:aa:3b:0c:2c:46:94:7a:
2b:6e:65:b9:ad:29:44:71:e0:37:a2:35:1c:a7:b5:9b:76:d0:
8a:67:c3:ad:82:8f:64:39:1b:ed:d7:67:53:0d:a7:0a:66:3d:
e1:7e:01:71:76:d4:46:95:a8:5f:dd:62:79:e3:62:9e:37:85:
2c:3b:f5:49:6e:00:ef:7c:a6:35:17:8e:5e:9a:b5:ea:50:3f:
ab:e7:b7:2d:9c:b2:d8:c7:57:fb:7d:cd:1b:80:48:ab:7c:40:
bd:e7:33:74
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUj6rsmbiO6YZuah6wjr8OHA2EM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzQwMjRaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmODVkNWU3NmUzODA3N2E3NGRlNTI5N2NhZGViNGIyOTQ3MzYwNDBlNzJl
YThjZjBhODMyMGFkZDg5YmNjYzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCB7dZeFPwBlTEB2KLIciW8bL4KUGwgmbWgBvgWFPVK7U2LP+OUI3fi3dyl
TueITYS81apw2rPMy8YG1KxM84E50m3OI+gu4+HJosrKv+vn/oYv/gx6r1CdGF6g
YUxZ+MzSqBCcEewXyZeqUzvRRXzuSyKt9AWt0fBD1WWRgVeP6MxBnrETQGFUY9Cu
+4IN18ZPl8KxR2C2670q65Aj6ATJl4XdMO4XnotzrNwgibEa6p1VQ2p1KYeAWdUE
SckLWL7unkU1oZdCVpp1L65O0Q7ucXTZiNziD7ouz1zJXhtdYW7F70Xi/GQhszwu
Hlna4Giyfuq6+dC8SQfqdRWcvckCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQuJVjR
EHqTB7d9ym2K5LW5BH59NDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTQzMGQ1ZGItNWEwOS00NDYxLWI4MGEtYjlkNzU1ZDM0NmE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxZK4tXuHyBUbaVVXm+SU8DzUFAwEC+nAf3DHJ
aDK2khvkUMAoACq+eBuDk5Ey4uweelNEsJV0rZS0G3+XoT5Yj/AUab4zJ6iNEDTl
zPXVT7uPnoE8x+eMJ31UQlmAH25EuoayKTmF6reIbTJOic2ULTKfRvieyscXwYLK
Uu5yP/BDbqbx/zIy5o8OmbvJTdmMMC2PL0kJGagE9Ko7DCxGlHorbmW5rSlEceA3
ojUcp7WbdtCKZ8Otgo9kORvt12dTDacKZj3hfgFxdtRGlahf3WJ542KeN4UsO/VJ
bgDvfKY1F45emrXqUD+r57ctnLLYx1f7fc0bgEirfEC95zN0
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:52 2025 by rpki-client