Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
File: cfca2455-b58e-43e0-a15f-276f8a5b527f.roa (raw, json)
Hash identifier: 737PwV+PYOUphXKux9Lb+Q/rmKVWAxzHsFoU0Uvj2oc=
Subject key identifier: 1D:17:26:9E:AD:89:D9:18:58:D2:C7:A3:C1:F8:73:0E:B1:18:3D:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C8E5D3714718DC618EEE9B53986CAB3F590156C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
Signing time: Wed 05 Mar 2025 16:00:01 +0000
ROA not before: Wed 05 Mar 2025 16:00:01 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8e:5d:37:14:71:8d:c6:18:ee:e9:b5:39:86:ca:b3:f5:90:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:00:01 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:7b:37:1f:15:23:d2:21:f1:4c:58:ab:fc:
77:f1:ff:1f:54:73:40:8f:a6:00:c9:12:ea:25:e5:
9c:19:7e:0e:2d:48:e3:a4:27:b9:be:c1:06:b4:a1:
64:92:20:fc:ec:44:7a:cc:59:7d:f3:ef:2d:2c:2c:
4a:ea:58:ee:14:f6:29:36:f5:5d:9e:34:ab:a3:60:
be:96:24:d9:05:49:7b:0d:c3:d2:6e:7c:db:60:c9:
8d:3c:79:81:3a:b2:9c:e1:7f:54:a6:b0:63:cb:e2:
0d:13:32:06:18:26:40:aa:94:73:71:3c:b0:0c:b9:
b3:7d:65:10:11:9d:e4:af:16:ec:e4:04:48:09:e3:
b8:85:da:22:53:09:17:dd:a8:1f:56:de:a9:0a:dc:
e4:6a:33:94:ee:7c:84:63:e7:94:08:6d:6b:b4:ce:
9b:d7:3b:10:83:2a:8e:5a:34:53:12:81:91:53:65:
55:03:82:c1:a5:30:9f:13:14:f8:67:ac:6f:23:a7:
df:1f:e4:d8:ff:56:11:fc:13:e2:50:48:87:6e:44:
ea:b0:82:c0:77:ce:53:83:8d:8c:9c:21:76:55:70:
07:b6:bc:09:cd:ea:96:e3:1e:03:d2:af:52:85:00:
29:21:bb:78:6a:ca:85:03:19:3f:7d:bd:68:3e:35:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:26:9E:AD:89:D9:18:58:D2:C7:A3:C1:F8:73:0E:B1:18:3D:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e040::/48
Signature Algorithm: sha256WithRSAEncryption
21:d9:45:c4:ef:d0:d2:9f:c1:8a:3c:50:db:fb:65:39:5a:c0:
f0:90:66:67:80:e5:81:e4:6a:2d:c8:32:98:42:fd:d0:4e:fe:
b1:fc:f8:4a:66:88:c2:b0:d8:0f:12:84:b5:07:d2:19:a3:0a:
a8:8c:b5:8d:fb:0a:60:8d:6e:4d:0e:67:d7:af:4a:96:8c:08:
b0:44:a2:27:14:35:8e:b8:b6:36:72:b4:14:35:0e:f6:d0:56:
7c:5f:35:0b:0b:62:c1:57:ec:8b:43:73:89:85:a1:d7:9e:f2:
7e:50:23:fc:d0:64:f5:4b:23:1c:dc:ac:c3:8a:f1:b7:d0:2c:
35:60:26:5e:1f:61:ec:54:c9:08:00:3a:b2:a0:4c:2c:c2:81:
0c:0b:34:37:31:19:5c:55:5f:2b:d2:82:01:ed:06:c4:44:d7:
39:be:cc:55:cf:59:93:bf:7e:c0:41:6e:37:55:76:99:f5:40:
e6:61:8c:bb:53:e6:ce:4c:5e:06:d7:ff:b8:ee:fc:29:db:5c:
21:29:41:5a:96:b7:25:89:97:41:cc:69:be:11:d1:ab:7d:90:
67:2e:da:ad:d7:be:04:54:a6:44:be:2b:7e:db:b0:04:f7:b8:
f5:9d:95:13:1c:89:d9:e4:ed:b4:7e:b4:9f:57:4b:1d:91:fa:
4b:96:e1:cc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbI5dNxRxjcYY7um1OYbKs/WQFWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjAwMDFaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmNjI0NGYxZjZmYjEyMjAyMmM4ZjM0ZTUzYzU2MDRlNDcwNGZjNDhhNDVm
ZjM0ZGI3OGFjZDM0M2IwNTU3ZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/QezcfFSPSIfFMWKv8d/H/H1RzQI+mAMkS6iXlnBl+Di1I46Qnub7BBrSh
ZJIg/OxEesxZffPvLSwsSupY7hT2KTb1XZ40q6NgvpYk2QVJew3D0m5822DJjTx5
gTqynOF/VKawY8viDRMyBhgmQKqUc3E8sAy5s31lEBGd5K8W7OQESAnjuIXaIlMJ
F92oH1beqQrc5GozlO58hGPnlAhta7TOm9c7EIMqjlo0UxKBkVNlVQOCwaUwnxMU
+GesbyOn3x/k2P9WEfwT4lBIh25E6rCCwHfOU4ONjJwhdlVwB7a8Cc3qluMeA9Kv
UoUAKSG7eGrKhQMZP329aD41hOMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQdFyae
rYnZGFjSx6PB+HMOsRg9qzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2ZjYTI0NTUtYjU4ZS00M2UwLWExNWYtMjc2ZjhhNWI1MjdmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H/g
QDANBgkqhkiG9w0BAQsFAAOCAQEAIdlFxO/Q0p/BijxQ2/tlOVrA8JBmZ4DlgeRq
LcgymEL90E7+sfz4SmaIwrDYDxKEtQfSGaMKqIy1jfsKYI1uTQ5n169KlowIsESi
JxQ1jri2NnK0FDUO9tBWfF81CwtiwVfsi0NziYWh157yflAj/NBk9UsjHNysw4rx
t9AsNWAmXh9h7FTJCAA6sqBMLMKBDAs0NzEZXFVfK9KCAe0GxETXOb7MVc9Zk79+
wEFuN1V2mfVA5mGMu1PmzkxeBtf/uO78KdtcISlBWpa3JYmXQcxpvhHRq32QZy7a
rde+BFSmRL4rftuwBPe49Z2VExyJ2eTttH60n1dLHZH6S5bhzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:50 2025 by rpki-client