Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2ea2aa-d40a-49a7-ab00-44ff5dbf729b.roa
File: 9d2ea2aa-d40a-49a7-ab00-44ff5dbf729b.roa (raw, json)
Hash identifier: 61H2vZ0zMKrU6tkS2AwMGjZ82dJyZMG9RRWXARX3+B0=
Subject key identifier: CB:91:DF:84:6C:9D:38:BE:5B:A1:6E:62:80:F1:3F:A2:FF:FA:8B:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 607549A7DDFFDE5D97F5B7DC0760879B251F8FE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2ea2aa-d40a-49a7-ab00-44ff5dbf729b.roa
Signing time: Wed 05 Mar 2025 17:21:33 +0000
ROA not before: Wed 05 Mar 2025 17:21:33 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:75:49:a7:dd:ff:de:5d:97:f5:b7:dc:07:60:87:9b:25:1f:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:33 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:e3:25:eb:e4:cd:56:5b:c6:94:64:86:ff:
41:cf:8d:17:f5:f5:fd:05:5b:a6:cf:36:84:70:6c:
d1:0b:2f:55:fe:8e:8f:4f:79:fd:4a:11:c3:31:d2:
fb:99:f7:78:4f:25:9e:a3:26:01:fc:f4:ba:b1:11:
27:19:14:84:96:24:da:85:ca:b4:54:af:c7:2f:00:
41:8b:97:c0:db:bc:50:d3:4e:45:40:84:15:67:53:
e9:e1:05:b6:b1:d0:e0:15:da:f5:e6:e1:23:df:60:
16:3f:90:df:4b:3a:d5:c3:39:60:3c:fc:ac:d5:b3:
3e:8f:20:f1:c7:63:c4:c0:cc:3c:ec:7b:e4:ae:0d:
a6:64:6c:53:53:84:5f:c3:78:cc:6f:4d:a9:71:7d:
75:b7:b8:7c:76:ae:77:da:73:6c:f9:d6:de:ea:8f:
9a:af:45:04:bb:4b:3f:d1:5c:9a:39:3c:20:f4:c9:
dc:72:7c:fc:da:fe:ac:9a:13:89:21:ba:1e:4c:e7:
6e:ed:84:78:e7:f4:e2:77:7c:a7:85:92:7f:9e:a8:
24:18:1e:ef:3f:44:2d:98:4d:17:5e:3e:e7:7f:05:
93:2d:e6:7d:c3:36:b5:19:b2:20:bf:2a:a7:eb:75:
52:63:86:d3:e9:ce:a6:da:b1:4e:df:c6:5f:4f:b1:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:DF:84:6C:9D:38:BE:5B:A1:6E:62:80:F1:3F:A2:FF:FA:8B:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2ea2aa-d40a-49a7-ab00-44ff5dbf729b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:a3:36:12:53:47:49:8d:aa:14:3e:01:6b:d5:6f:66:c9:4c:
63:5d:2b:ff:7d:71:8d:8a:c1:d6:3a:3e:ea:20:48:c9:80:9b:
40:77:97:fa:a3:2d:fb:49:b2:22:c0:76:27:45:a1:a6:1f:84:
83:2a:03:ba:ba:98:f4:a8:f5:08:ec:61:d6:6f:d0:dc:91:b5:
f3:22:31:6f:21:29:1e:b3:3b:d6:c4:80:7d:25:09:6d:64:10:
c8:cc:54:95:34:46:1f:7a:66:65:a7:9f:51:a8:35:75:20:53:
9e:e5:38:56:25:69:ad:97:41:98:e0:3f:52:bd:4a:41:b9:32:
63:f2:50:79:72:0c:80:8b:d0:2c:c7:43:01:e9:1f:67:ce:26:
7f:85:22:13:f7:14:e1:79:20:b5:8c:3d:74:39:f5:5f:1b:b9:
a6:42:6e:91:4c:a2:3e:50:a8:5c:f0:09:67:b2:90:68:15:33:
ab:09:ec:ba:64:17:50:49:60:cc:af:12:32:b4:eb:96:87:8b:
97:43:be:8d:03:34:df:20:b8:12:eb:af:7d:99:34:51:33:e1:
7b:37:b8:d6:82:18:43:f9:bf:03:ee:75:52:1c:25:18:f5:32:
a0:0b:26:5f:f0:25:22:9f:0f:b8:e2:73:1c:30:17:73:26:0a:
e6:0a:2a:83
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYHVJp93/3l2X9bfcB2CHmyUfj+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzIxMzNaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ2MDRiNDFmYzBjOTIzOTE5N2FjYjViMTRhZDA1ZTJiMDdmYTM5OWYwM2Nh
ZDE1MjYxZGYxNTVjOTBkMGRlMzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7G4yXr5M1WW8aUZIb/Qc+NF/X1/QVbps82hHBs0QsvVf6Oj095/UoRwzHS
+5n3eE8lnqMmAfz0urERJxkUhJYk2oXKtFSvxy8AQYuXwNu8UNNORUCEFWdT6eEF
trHQ4BXa9ebhI99gFj+Q30s61cM5YDz8rNWzPo8g8cdjxMDMPOx75K4NpmRsU1OE
X8N4zG9NqXF9dbe4fHaud9pzbPnW3uqPmq9FBLtLP9Fcmjk8IPTJ3HJ8/Nr+rJoT
iSG6Hkznbu2EeOf04nd8p4WSf56oJBge7z9ELZhNF14+538Fky3mfcM2tRmyIL8q
p+t1UmOG0+nOptqxTt/GX0+xGcUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTLkd+E
bJ04vluhbmKA8T+i//qL1jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWQyZWEyYWEtZDQwYS00OWE3LWFiMDAtNDRmZjVkYmY3MjliLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HGg
MA0GCSqGSIb3DQEBCwUAA4IBAQCyozYSU0dJjaoUPgFr1W9myUxjXSv/fXGNisHW
Oj7qIEjJgJtAd5f6oy37SbIiwHYnRaGmH4SDKgO6upj0qPUI7GHWb9DckbXzIjFv
ISkeszvWxIB9JQltZBDIzFSVNEYfemZlp59RqDV1IFOe5ThWJWmtl0GY4D9SvUpB
uTJj8lB5cgyAi9Asx0MB6R9nziZ/hSIT9xTheSC1jD10OfVfG7mmQm6RTKI+UKhc
8AlnspBoFTOrCey6ZBdQSWDMrxIytOuWh4uXQ76NAzTfILgS6699mTRRM+F7N7jW
ghhD+b8D7nVSHCUY9TKgCyZf8CUinw+44nMcMBdzJgrmCiqD
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:30 2025 by rpki-client