Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
File: bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa (raw, json)
Hash identifier: Wa27T4huD4liO144oBeEGdbJUaEDVUNXoVUHX2YIKPY=
Subject key identifier: D9:4E:D3:BB:A2:EF:AA:D7:2D:6F:58:CC:77:22:7A:13:7E:C5:A9:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41E78226B43EA0F4360352AE03E53611A37D17CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
Signing time: Fri 21 Mar 2025 15:00:15 +0000
ROA not before: Fri 21 Mar 2025 15:00:15 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e7:82:26:b4:3e:a0:f4:36:03:52:ae:03:e5:36:11:a3:7d:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:00:15 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:c1:e7:cb:f7:6d:6f:92:3e:3b:2c:51:52:
24:13:4a:9d:bf:81:f5:15:44:97:b3:82:f6:87:73:
df:8d:1a:8e:db:09:1c:0d:ea:a0:d9:54:fd:00:34:
99:fd:6f:d2:e0:41:44:86:ce:92:2a:a1:74:3b:6f:
fd:63:5e:69:d8:65:9e:f2:8e:6a:18:7a:73:bd:44:
6f:4b:b4:f4:0c:24:32:c8:d5:29:29:b0:31:4a:27:
dc:65:88:aa:c9:4c:6a:e7:dc:30:ce:af:ab:5d:5b:
a7:0d:75:1d:8e:60:bc:5f:4f:6d:66:5c:ed:75:7e:
6a:e3:2c:7b:93:2f:e4:9c:b2:41:9f:71:10:b1:23:
a8:f6:4c:52:ef:c4:d6:be:bf:6d:62:ef:88:a4:18:
7f:26:60:39:f2:d7:f9:b5:54:9a:41:7b:fb:be:25:
39:b4:e5:99:55:43:9c:1a:bd:ac:1f:bd:a8:57:9b:
7d:c9:db:2e:c1:b2:6f:a9:6b:00:bd:23:b3:eb:78:
03:7a:cc:79:19:63:3a:9b:91:2a:18:94:7b:ca:ef:
00:5a:1a:01:a3:57:0f:8b:b1:53:9c:9c:85:9a:c3:
08:58:ae:f4:ca:c7:e0:c0:6f:58:9f:04:04:37:a5:
0e:ef:40:d9:13:66:37:64:af:df:cb:a4:97:31:47:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:D3:BB:A2:EF:AA:D7:2D:6F:58:CC:77:22:7A:13:7E:C5:A9:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
36:5c:71:af:78:ef:8f:06:81:cb:4a:c4:d0:28:18:56:5a:52:
f1:2d:f9:c7:5c:d9:be:1b:24:7b:d7:0c:44:61:b8:51:89:0a:
2b:9b:49:a1:21:88:4d:e3:4f:17:6f:05:97:92:20:b2:90:81:
47:73:9d:99:56:ed:b4:2d:27:4e:8c:d2:36:50:a9:05:f2:dc:
34:0a:3a:d5:bd:d5:60:cf:46:c4:6e:b0:e5:ce:47:b4:27:d6:
47:e8:d5:b2:0d:a6:3f:2d:cc:d7:1d:5f:49:34:c6:47:c9:4e:
e9:26:53:14:1b:9d:c3:c2:29:f2:32:64:f2:bb:35:90:30:a4:
e7:90:8c:8c:82:28:05:ae:af:0f:92:36:7a:01:f9:14:d5:02:
72:70:8c:60:7a:8f:81:0c:26:61:0f:ae:6e:4e:0f:0a:3b:77:
66:c3:1e:d0:91:37:ae:b6:5b:12:5c:cd:19:99:f1:a7:78:b3:
7d:74:74:c7:fc:fe:b8:4b:53:54:41:43:e8:fc:cb:d7:10:e4:
6c:98:25:a3:79:0d:9b:3c:30:cb:25:cf:51:9f:69:3d:0f:ea:
e5:b8:66:a6:b4:21:8a:ad:5a:78:be:d8:6b:8e:92:00:01:46:
d3:86:7a:0f:b1:17:fa:05:db:44:c5:1b:23:8e:7a:c0:01:93:
39:53:59:73
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQeeCJrQ+oPQ2A1KuA+U2EaN9F84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMjExNTAwMTVaFw0yNTA0MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDBhMzdkYzZkNjQ5ZGUzZDE3YWQ3NjA2Mjg3OWRiZTJiMjgyZmVlY2ZiOWEw
YmYzYmRhNjIxY2I1ZGYzY2UwMTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8/wefL921vkj47LFFSJBNKnb+B9RVEl7OC9odz340ajtsJHA3qoNlU/QA0
mf1v0uBBRIbOkiqhdDtv/WNeadhlnvKOahh6c71Eb0u09AwkMsjVKSmwMUon3GWI
qslMaufcMM6vq11bpw11HY5gvF9PbWZc7XV+auMse5Mv5JyyQZ9xELEjqPZMUu/E
1r6/bWLviKQYfyZgOfLX+bVUmkF7+74lObTlmVVDnBq9rB+9qFebfcnbLsGyb6lr
AL0js+t4A3rMeRljOpuRKhiUe8rvAFoaAaNXD4uxU5ychZrDCFiu9MrH4MBvWJ8E
BDelDu9A2RNmN2Sv38uklzFHS7UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTZTtO7
ou+q1y1vWMx3InoTfsWpeTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmM1OWU0MjEtYmExZC00ZjZhLWFlYmEtOWQ1YzY3M2E3MDI2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DAg
MA0GCSqGSIb3DQEBCwUAA4IBAQA2XHGveO+PBoHLSsTQKBhWWlLxLfnHXNm+GyR7
1wxEYbhRiQorm0mhIYhN408XbwWXkiCykIFHc52ZVu20LSdOjNI2UKkF8tw0CjrV
vdVgz0bEbrDlzke0J9ZH6NWyDaY/LczXHV9JNMZHyU7pJlMUG53DwinyMmTyuzWQ
MKTnkIyMgigFrq8PkjZ6AfkU1QJycIxgeo+BDCZhD65uTg8KO3dmwx7QkTeutlsS
XM0ZmfGneLN9dHTH/P64S1NUQUPo/MvXEORsmCWjeQ2bPDDLJc9Rn2k9D+rluGam
tCGKrVp4vthrjpIAAUbThnoPsRf6BdtExRsjjnrAAZM5U1lz
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:05 2025 by rpki-client