Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: wedBakfscioW1dVKlO0d6J9AlTfIPtJc3tvIlE3dcQI=
Subject key identifier: C0:1D:48:4A:C3:7C:B3:B5:5B:02:EE:56:55:49:B0:B2:31:1D:C0:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0ABFCDE12AF5EAC2997FEFEA68A9E0990E0308A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Wed 05 Mar 2025 17:20:59 +0000
ROA not before: Wed 05 Mar 2025 17:20:59 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bf:cd:e1:2a:f5:ea:c2:99:7f:ef:ea:68:a9:e0:99:0e:03:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:20:59 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:f3:15:d3:08:8f:49:ea:07:c5:7b:1e:2c:
bd:dc:d8:f7:3d:b7:a9:a3:11:ce:22:da:90:e5:81:
3e:38:5d:a8:cc:d5:68:80:37:45:e5:8c:ce:01:a5:
7a:dc:c3:92:5b:f0:11:34:27:04:3e:b8:c7:56:05:
92:fc:b7:22:d7:9b:60:00:23:8a:85:cd:ea:62:7a:
26:9d:8d:0c:99:e5:f5:53:80:0a:de:6f:13:33:ca:
9a:35:8a:4b:43:61:40:fd:4e:24:42:21:cd:22:46:
01:41:f8:77:3b:57:1b:58:43:8d:4c:ac:e5:db:c4:
5b:82:b9:d8:a5:74:c5:3a:f4:f8:3f:dd:ff:c4:9a:
60:9e:15:b2:83:ae:f6:d6:cf:68:82:ac:6b:12:8b:
2a:35:c4:36:f5:da:d5:4b:0a:e6:ac:70:51:0a:28:
76:8d:44:f9:bd:0d:5e:ce:6b:d0:2f:e7:ef:09:7d:
b3:d4:32:ee:e3:47:d7:a3:35:60:8c:51:c2:6e:9e:
33:3c:c0:1f:7a:9d:0e:22:ac:fd:cb:a6:3c:6d:9f:
d9:0a:60:47:c6:9d:a3:59:91:11:27:22:30:e1:b0:
c0:0c:3e:b3:20:24:02:7c:1f:dd:b2:22:51:2c:34:
b0:3c:c8:31:90:7c:4d:78:a1:06:53:59:d9:ff:27:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:48:4A:C3:7C:B3:B5:5B:02:EE:56:55:49:B0:B2:31:1D:C0:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
73:a4:70:b8:07:9c:10:5d:f1:7e:fe:92:38:ef:5a:d9:2a:48:
08:a8:ab:4d:f6:44:9f:87:e5:de:85:4e:df:56:fc:f0:e9:9f:
0e:fa:32:a1:0d:02:bc:1c:fa:a0:07:84:eb:eb:d8:b4:9d:35:
b5:d0:a7:7f:a8:67:d7:ed:d7:19:ba:0f:a5:79:87:cb:2c:b8:
38:97:12:f5:d3:63:2a:95:ee:31:78:59:1e:8b:8f:6a:d9:6a:
1e:af:cd:2c:4f:4d:28:df:fc:15:92:95:28:2c:4d:51:cf:2d:
14:3c:d9:3c:4b:31:88:73:17:f7:55:63:37:b1:fa:50:7d:e9:
74:50:ee:27:30:7a:d7:19:da:cb:0c:d6:3e:1e:f9:14:d9:e7:
0b:4a:83:4c:5e:c3:6a:52:69:14:b3:2f:35:f7:b2:d3:f4:86:
ec:92:a5:0e:47:14:da:66:d0:d2:76:36:71:34:58:b9:77:82:
0d:b4:5c:ca:b7:21:3d:81:42:b0:9e:c6:c2:33:70:4b:a7:61:
07:6d:bd:4b:cf:f7:18:56:07:c9:e2:d1:0e:c8:c1:8e:48:58:
34:28:06:2e:24:4c:80:b7:79:ee:c5:fe:7e:9f:8b:71:00:7b:
2d:ce:f1:47:98:75:36:1a:19:ec:e2:a9:bc:16:d3:eb:27:49:
19:6f:3f:a3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCr/N4Sr16sKZf+/qaKngmQ4DCKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzIwNTlaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmZDZkYjljODM2MjYyYTBjMDEwNDRkZDM1ZTVmYzc3OWU1NGQ5OWM1NjNm
MWMwN2UwMTZlODc4YWY0MzY1M2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJxL8xXTCI9J6gfFex4svdzY9z23qaMRziLakOWBPjhdqMzVaIA3ReWMzgGl
etzDklvwETQnBD64x1YFkvy3ItebYAAjioXN6mJ6Jp2NDJnl9VOACt5vEzPKmjWK
S0NhQP1OJEIhzSJGAUH4dztXG1hDjUys5dvEW4K52KV0xTr0+D/d/8SaYJ4VsoOu
9tbPaIKsaxKLKjXENvXa1UsK5qxwUQoodo1E+b0NXs5r0C/n7wl9s9Qy7uNH16M1
YIxRwm6eMzzAH3qdDiKs/cumPG2f2QpgR8ado1mRESciMOGwwAw+syAkAnwf3bIi
USw0sDzIMZB8TXihBlNZ2f8nez0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTAHUhK
w3yztVsC7lZVSbCyMR3ADjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGU2MmJkMDUtMTAzYi00Y2NlLTkxZDctMDE2ZjRhYjI2YWE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBzpHC4B5wQXfF+/pI471rZKkgIqKtN9kSfh+Xe
hU7fVvzw6Z8O+jKhDQK8HPqgB4Tr69i0nTW10Kd/qGfX7dcZug+leYfLLLg4lxL1
02Mqle4xeFkei49q2Woer80sT00o3/wVkpUoLE1Rzy0UPNk8SzGIcxf3VWM3sfpQ
fel0UO4nMHrXGdrLDNY+HvkU2ecLSoNMXsNqUmkUsy8197LT9IbskqUORxTaZtDS
djZxNFi5d4INtFzKtyE9gUKwnsbCM3BLp2EHbb1Lz/cYVgfJ4tEOyMGOSFg0KAYu
JEyAt3nuxf5+n4txAHstzvFHmHU2Ghns4qm8FtPrJ0kZbz+j
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:27 2025 by rpki-client