Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
File: c575b6fa-c023-458f-85c8-9694aa053e43.roa (raw, json)
Hash identifier: PLYx75pKG0s78iM8e18H07yNZD28PuZTxRwprdGORZk=
Subject key identifier: 47:39:C8:14:0D:FD:5E:E6:27:42:FB:D5:CB:3B:CB:6B:A1:2B:DE:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 515E4FFCA217CF140198C5D205E088799674F460
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
Signing time: Wed 05 Mar 2025 15:50:49 +0000
ROA not before: Wed 05 Mar 2025 15:50:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5e:4f:fc:a2:17:cf:14:01:98:c5:d2:05:e0:88:79:96:74:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:50:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:75:0f:09:7c:f1:fe:3f:21:89:1b:3e:76:
97:43:2f:cc:c4:9f:18:9e:5a:3b:f0:d8:6f:93:53:
44:f0:c1:e9:df:f9:cc:f1:ff:0d:bc:d4:56:76:ff:
00:d8:a0:9b:cb:99:ff:30:76:e8:16:0f:8b:eb:5e:
cf:00:7b:69:b8:b1:8a:a8:b4:e1:11:ae:d9:57:7d:
5a:e1:5e:86:ad:0c:d1:a1:17:a2:c6:5a:87:38:12:
5c:c4:c3:1e:51:37:57:b9:65:46:1b:f2:6c:27:2e:
f7:c2:f5:05:82:e9:66:f0:37:f4:c3:5a:5e:ca:b2:
26:08:d6:a5:69:e4:4e:1b:a5:77:d5:4f:1f:42:42:
3a:48:f9:9c:eb:a9:4e:70:b9:53:48:25:71:eb:27:
ae:a5:f5:14:9a:e8:ac:27:db:d7:58:ce:f1:7a:d4:
6e:38:2d:26:7a:24:de:21:76:0d:f4:f1:69:02:5b:
88:f1:19:56:f2:0f:81:b1:0d:7b:cd:a1:c3:bd:1b:
1a:60:af:6a:7e:a6:93:bd:b6:4a:7c:d5:fb:47:4f:
85:5a:28:1a:21:16:35:4d:aa:e7:e2:61:c3:63:85:
89:91:4b:f5:06:77:2a:80:ec:df:5c:5c:a4:db:d6:
bb:71:33:b7:b0:a1:1a:5c:bf:8a:57:58:d2:bc:f7:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:C8:14:0D:FD:5E:E6:27:42:FB:D5:CB:3B:CB:6B:A1:2B:DE:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4080::/48
Signature Algorithm: sha256WithRSAEncryption
7d:cd:3c:18:6c:40:f1:42:ad:7c:66:1e:37:60:75:9f:31:c1:
05:85:5c:a5:bc:c8:e6:72:34:c7:b8:08:6c:27:b8:6c:74:c5:
d3:d5:b0:e1:79:3b:88:a2:32:c8:a3:b4:ec:55:5b:9f:91:d0:
55:13:81:2f:b9:d6:4c:76:36:db:fc:90:fa:5e:ed:f3:b1:eb:
01:68:03:c8:1e:ce:1a:1f:25:2d:ef:76:a8:32:da:e8:57:9b:
4d:b2:c8:c0:6a:1a:9c:bc:8f:44:83:f4:cd:4e:79:23:f7:70:
74:cd:97:bc:ad:ae:28:77:7f:10:61:4f:7f:65:72:ca:01:b2:
72:dd:6a:06:88:71:67:68:6d:98:4a:5c:86:a6:65:12:a4:8c:
e9:bb:19:73:8e:7a:17:fa:ea:88:b5:68:d8:02:e2:51:82:bb:
6d:df:c6:43:9c:17:8c:3c:09:3e:02:60:3e:c4:3b:da:f9:42:
c6:8a:0b:ad:f8:c9:fc:fc:2e:fe:08:1e:e7:e3:47:fc:5f:8b:
ee:3f:0c:cb:3a:ec:4e:d5:74:2e:bb:60:25:1a:12:61:53:4a:
78:45:51:63:21:2a:e6:40:08:e9:8f:d5:58:9d:08:45:30:b2:
14:e9:3e:ef:0f:22:2d:42:ca:48:70:89:d1:83:4b:1d:e0:a6:
6a:e0:33:5a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUV5P/KIXzxQBmMXSBeCIeZZ09GAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNTUwNDlaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDViOTRkZTljODI2N2JmMTYzOTUyZmQwYWM0MWM5Mzg2YzIxNjkxZmUwNjY5
NDM2ZDIxMTExZjA2YjkxZDYzOWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKYzdQ8JfPH+PyGJGz52l0MvzMSfGJ5aO/DYb5NTRPDB6d/5zPH/DbzUVnb/
ANigm8uZ/zB26BYPi+tezwB7abixiqi04RGu2Vd9WuFehq0M0aEXosZahzgSXMTD
HlE3V7llRhvybCcu98L1BYLpZvA39MNaXsqyJgjWpWnkThuld9VPH0JCOkj5nOup
TnC5U0glcesnrqX1FJrorCfb11jO8XrUbjgtJnok3iF2DfTxaQJbiPEZVvIPgbEN
e82hw70bGmCvan6mk722SnzV+0dPhVooGiEWNU2q5+Jhw2OFiZFL9QZ3KoDs31xc
pNvWu3Ezt7ChGly/ildY0rz3yfECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRHOcgU
Df1e5idC+9XLO8troSve7TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzU3NWI2ZmEtYzAyMy00NThmLTg1YzgtOTY5NGFhMDUzZTQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFA
gDANBgkqhkiG9w0BAQsFAAOCAQEAfc08GGxA8UKtfGYeN2B1nzHBBYVcpbzI5nI0
x7gIbCe4bHTF09Ww4Xk7iKIyyKO07FVbn5HQVROBL7nWTHY22/yQ+l7t87HrAWgD
yB7OGh8lLe92qDLa6FebTbLIwGoanLyPRIP0zU55I/dwdM2XvK2uKHd/EGFPf2Vy
ygGyct1qBohxZ2htmEpchqZlEqSM6bsZc456F/rqiLVo2ALiUYK7bd/GQ5wXjDwJ
PgJgPsQ72vlCxooLrfjJ/Pwu/gge5+NH/F+L7j8MyzrsTtV0LrtgJRoSYVNKeEVR
YyEq5kAI6Y/VWJ0IRTCyFOk+7w8iLULKSHCJ0YNLHeCmauAzWg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:45 2025 by rpki-client