Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: w5G305Z7GpGruz8Zi7TFfAkscZlnJT3IdCCmSUKcqoI=
Subject key identifier: 41:3D:FF:6A:BA:25:EF:C9:C5:2B:DB:2A:F1:8A:A3:31:BE:11:C8:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25855D463250990AFB530BE0055D6CD6DF2CFD57
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Wed 05 Mar 2025 16:10:04 +0000
ROA not before: Wed 05 Mar 2025 16:10:04 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:85:5d:46:32:50:99:0a:fb:53:0b:e0:05:5d:6c:d6:df:2c:fd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:10:04 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:c2:52:ac:8d:b7:2b:1e:d3:66:15:2d:12:
8e:a7:22:d6:7b:c7:86:4a:ab:1a:73:8d:1c:0e:01:
b3:27:cf:59:26:16:6a:12:8f:23:6a:2d:32:6d:d0:
55:28:fd:5c:da:59:92:50:94:bd:63:58:de:c2:64:
3a:94:33:b9:bf:1e:33:31:fe:3b:b0:a3:de:18:d7:
48:7d:84:12:eb:e6:90:2b:95:4b:43:31:6c:9d:de:
f8:99:36:b5:05:77:cf:97:c7:b0:4b:3d:43:37:a2:
b4:71:a7:6e:d7:86:7c:51:7b:ed:2f:af:0a:25:e7:
74:8c:85:02:d7:15:7f:a6:45:40:45:29:18:62:63:
0f:a3:cb:86:b9:08:37:d6:bc:2c:bd:ec:44:d9:42:
49:9f:b3:3f:65:dc:c4:c5:b4:66:79:cb:11:81:6b:
91:3d:77:f1:56:2d:26:5f:7a:32:f2:a7:88:e6:f3:
97:f9:a2:9c:01:30:b2:10:ce:23:c0:73:2a:e9:27:
fa:58:e0:4a:c6:19:ef:0e:e8:c1:21:1c:33:df:69:
3e:c7:27:66:94:9d:5f:c1:46:4d:dd:9a:ad:95:50:
0e:41:96:80:25:fa:f4:93:26:ab:67:67:73:62:08:
f0:94:8f:9b:b6:57:20:2e:6d:d2:c4:9a:71:00:31:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:FF:6A:BA:25:EF:C9:C5:2B:DB:2A:F1:8A:A3:31:BE:11:C8:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
3b:38:84:db:ae:41:ec:41:0d:8c:8c:52:20:28:15:79:5f:15:
12:82:2f:12:61:87:66:f6:36:12:72:3a:46:30:56:17:d0:8e:
65:be:a7:de:98:9b:2d:b7:9b:8e:71:00:4e:c4:df:39:34:bd:
72:4a:8c:42:36:c9:62:66:f3:b4:ce:ff:03:94:90:8c:ee:ce:
2c:b5:bf:9d:bd:81:55:29:ca:34:fb:a9:fb:2b:cf:09:f3:41:
cb:c4:22:d6:96:37:e9:08:48:2b:8d:41:08:52:01:64:29:bb:
9d:d8:93:20:2f:83:91:cb:84:29:fc:9e:c0:d9:29:86:9f:95:
fe:c3:f3:87:33:25:a9:89:20:66:0e:6f:c4:be:3f:d2:00:0c:
34:db:ab:8a:ee:b8:f2:f7:2b:77:af:69:2c:4a:7e:5e:2b:ec:
f1:26:ae:87:34:b2:04:3e:98:36:1d:9f:a8:82:ce:39:ca:25:
35:52:ff:f0:24:c4:57:f5:21:d4:ce:d8:f9:4a:68:8a:a7:21:
19:0e:81:37:6e:8b:cd:00:e2:6b:f9:d1:37:60:93:af:43:71:
2a:9b:b7:55:d3:2b:b9:9c:97:d2:c1:c9:d2:d2:f7:d7:a3:64:
aa:69:6b:ff:0a:24:02:9f:18:b2:20:27:db:18:cb:ac:7a:cc:
e3:fe:9f:36
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJYVdRjJQmQr7UwvgBV1s1t8s/VcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjEwMDRaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDgwNWRlMzNhZjNmN2EwMjcwMGM2N2VhOTBiYWYwOGQzODgyMTdkNDQ4N2Rh
ZDYwNTdmZWMxZjcwNmY2MDU1NTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKaJwlKsjbcrHtNmFS0Sjqci1nvHhkqrGnONHA4BsyfPWSYWahKPI2otMm3Q
VSj9XNpZklCUvWNY3sJkOpQzub8eMzH+O7Cj3hjXSH2EEuvmkCuVS0MxbJ3e+Jk2
tQV3z5fHsEs9QzeitHGnbteGfFF77S+vCiXndIyFAtcVf6ZFQEUpGGJjD6PLhrkI
N9a8LL3sRNlCSZ+zP2XcxMW0ZnnLEYFrkT138VYtJl96MvKniObzl/minAEwshDO
I8BzKukn+ljgSsYZ7w7owSEcM99pPscnZpSdX8FGTd2arZVQDkGWgCX69JMmq2dn
c2II8JSPm7ZXIC5t0sSacQAxd2MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRBPf9q
uiXvycUr2yrxiqMxvhHI+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTRlMDhkOGQtMTNmYS00MDYwLThjZTAtMGEyNzU3YTFmYTVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g
QDANBgkqhkiG9w0BAQsFAAOCAQEAOziE265B7EENjIxSICgVeV8VEoIvEmGHZvY2
EnI6RjBWF9COZb6n3pibLbebjnEATsTfOTS9ckqMQjbJYmbztM7/A5SQjO7OLLW/
nb2BVSnKNPup+yvPCfNBy8Qi1pY36QhIK41BCFIBZCm7ndiTIC+DkcuEKfyewNkp
hp+V/sPzhzMlqYkgZg5vxL4/0gAMNNuriu648vcrd69pLEp+Xivs8SauhzSyBD6Y
Nh2fqILOOcolNVL/8CTEV/Uh1M7Y+UpoiqchGQ6BN26LzQDia/nRN2CTr0NxKpu3
VdMruZyX0sHJ0tL316Nkqmlr/wokAp8YsiAn2xjLrHrM4/6fNg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:56 2025 by rpki-client