Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: z/zCebsMu94Es2DfG3lrJSBO6PBegvJvHKE564c1FaU=
Subject key identifier: C0:C2:72:B1:F2:4D:DE:70:29:DC:90:52:EE:32:E4:B9:E0:5F:7F:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7142DF3DB6E266362B4CF304062E9CBBC14F7582
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Wed 05 Mar 2025 16:40:58 +0000
ROA not before: Wed 05 Mar 2025 16:40:58 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:42:df:3d:b6:e2:66:36:2b:4c:f3:04:06:2e:9c:bb:c1:4f:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:40:58 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:86:48:0a:95:09:dd:0c:c1:09:7f:78:c0:
2e:10:5d:b9:b5:0b:c3:ee:5b:d9:db:6a:2c:8a:8b:
a9:ca:cf:26:8d:bf:b4:14:11:65:5e:4c:5e:9c:3f:
44:d4:8f:5f:3b:34:a0:50:56:f7:e9:75:d9:a0:f4:
59:fc:db:3e:90:7c:f1:15:d8:87:fb:79:72:28:33:
6c:34:3d:93:c4:1f:44:da:0b:96:4f:6f:d6:05:2e:
09:13:eb:7a:75:43:f0:45:f1:2d:cc:ae:a0:0f:2c:
4f:2b:cd:cd:1f:60:a0:76:cf:cd:64:e5:12:f9:58:
c8:f7:b7:a4:69:42:77:a8:e3:d5:0d:74:4f:31:8f:
fc:d4:11:c1:84:71:ba:1a:2a:5b:17:44:01:69:5e:
74:5a:7e:bc:76:0e:24:f4:c6:dd:04:b2:b8:68:dc:
0f:b6:af:4e:d2:47:46:cf:d4:c1:79:6f:f1:e6:4a:
6a:fa:9c:bc:a0:f1:d5:cb:66:af:2a:b3:12:80:f0:
3f:e9:e0:aa:6f:91:2e:59:76:76:9b:1f:e7:34:9a:
0e:5a:19:cc:3e:40:c8:6d:29:6b:c0:ad:13:29:14:
cf:75:23:62:05:ef:c4:b9:32:0b:4e:e7:be:e7:26:
65:f7:1e:2d:ed:a2:4c:bb:a7:8d:45:9e:bb:e4:65:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C2:72:B1:F2:4D:DE:70:29:DC:90:52:EE:32:E4:B9:E0:5F:7F:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
c6:dc:23:85:b7:68:5d:43:38:b4:3d:ac:6c:1e:92:39:85:f5:
06:82:41:ad:49:a4:d6:26:b8:bb:8d:24:41:e4:c0:f4:d8:6a:
10:6c:70:d4:65:df:b1:f6:38:04:6c:23:bb:2b:02:71:88:13:
46:7e:06:5a:4e:27:e4:4e:f1:8a:cd:88:78:08:71:a5:44:43:
81:93:ef:a0:19:42:6c:13:ee:4e:8d:06:25:b7:25:c1:f8:bc:
41:3f:28:89:89:e9:43:1a:e9:1e:86:e0:76:ec:4a:a7:bb:45:
7d:b7:a9:2e:8c:0b:ca:97:63:b2:b7:33:9a:61:c4:41:38:54:
b0:21:69:a2:1e:0a:d6:d3:26:42:fa:66:43:ae:10:e3:61:8d:
21:67:f2:7f:3c:9e:79:09:16:11:04:0e:35:23:42:aa:ab:9a:
55:a2:83:37:71:17:a3:28:e1:95:94:81:7d:c0:67:0f:f5:2d:
e7:26:7d:27:f6:4e:1a:c3:55:bd:76:aa:d3:79:7c:ab:d5:f8:
ef:d7:c1:9f:64:91:36:56:9c:9d:df:5d:3f:a5:c3:39:01:46:
3f:87:2d:11:99:26:40:a0:8f:17:0f:e6:b7:2a:2b:e0:ac:1c:
81:ca:66:55:27:9f:cd:6d:be:8d:98:a9:d2:b8:7d:01:e4:8a:
1d:91:ac:c3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcULfPbbiZjYrTPMEBi6cu8FPdYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjQwNThaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGExZDIzMGFjZWM4MzIxZDFiNGNjYTQ5NDhmYmI0MWMyZmZjOTk1Yzg3MTRl
NDkzZDg4NTBjNTEwYzY4YTc2MzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALi+hkgKlQndDMEJf3jALhBdubULw+5b2dtqLIqLqcrPJo2/tBQRZV5MXpw/
RNSPXzs0oFBW9+l12aD0WfzbPpB88RXYh/t5cigzbDQ9k8QfRNoLlk9v1gUuCRPr
enVD8EXxLcyuoA8sTyvNzR9goHbPzWTlEvlYyPe3pGlCd6jj1Q10TzGP/NQRwYRx
uhoqWxdEAWledFp+vHYOJPTG3QSyuGjcD7avTtJHRs/UwXlv8eZKavqcvKDx1ctm
ryqzEoDwP+ngqm+RLll2dpsf5zSaDloZzD5AyG0pa8CtEykUz3UjYgXvxLkyC07n
vucmZfceLe2iTLunjUWeu+Rl45ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTAwnKx
8k3ecCnckFLuMuS54F9/MjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGMwYWFiNGUtOWRiYy00YjY4LTkzOGQtODAyMDJlM2QwYmQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+Q
QDANBgkqhkiG9w0BAQsFAAOCAQEAxtwjhbdoXUM4tD2sbB6SOYX1BoJBrUmk1ia4
u40kQeTA9NhqEGxw1GXfsfY4BGwjuysCcYgTRn4GWk4n5E7xis2IeAhxpURDgZPv
oBlCbBPuTo0GJbclwfi8QT8oiYnpQxrpHobgduxKp7tFfbepLowLypdjsrczmmHE
QThUsCFpoh4K1tMmQvpmQ64Q42GNIWfyfzyeeQkWEQQONSNCqquaVaKDN3EXoyjh
lZSBfcBnD/Ut5yZ9J/ZOGsNVvXaq03l8q9X479fBn2SRNlacnd9dP6XDOQFGP4ct
EZkmQKCPFw/mtyor4KwcgcpmVSefzW2+jZip0rh9AeSKHZGsww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:54 2025 by rpki-client