Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
File: e17dcec5-9d55-4765-8f83-957d1f5c0010.roa (raw, json)
Hash identifier: gZICqLwK7oS6ISCQte0OPMukOsGgYh48nfSd0m83Mhk=
Subject key identifier: 7E:89:55:DD:F5:87:F8:B1:53:3C:42:E7:42:C7:3A:D8:6F:E1:51:D4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 294B21F26FBE17B931226179E60E3998060A1EAE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
Signing time: Wed 05 Mar 2025 17:10:05 +0000
ROA not before: Wed 05 Mar 2025 17:10:05 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8020::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4b:21:f2:6f:be:17:b9:31:22:61:79:e6:0e:39:98:06:0a:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:10:05 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:23:d2:78:fb:41:07:99:54:38:b4:68:c6:
f3:b0:aa:4f:da:cf:01:37:5b:79:78:1b:93:92:f9:
53:17:be:9d:3c:3d:c2:7b:bb:da:0b:63:05:97:58:
55:db:d3:f1:fd:91:a7:c1:ca:df:b6:2b:6a:95:c3:
b4:a0:63:63:e5:8e:85:df:76:ca:1c:bc:aa:98:57:
d6:cd:29:fd:4b:e1:e8:ed:8b:bd:9e:fe:bf:5d:2c:
6e:cd:08:6e:0f:a9:44:7b:b5:58:ce:bd:d2:44:b4:
7b:a2:75:0a:aa:f3:00:7f:87:ad:dc:8b:e7:a5:45:
57:90:00:92:4f:d7:8c:da:d5:e1:c6:85:34:35:70:
46:42:8a:ff:5a:01:3d:d7:a9:ef:6e:ce:20:9b:9f:
98:2e:a1:30:9f:ef:c8:42:58:fc:45:3e:dd:aa:b6:
20:61:8f:d8:6d:31:39:52:8b:35:a0:81:3d:2e:f8:
ea:2a:b4:68:c2:96:2c:ab:6d:53:88:ed:00:fe:10:
2f:6d:f5:4a:a7:50:ea:12:93:cc:09:9a:9a:d5:27:
bc:d3:df:a5:7f:1a:1a:a7:cd:f5:50:0a:0d:07:17:
2e:4f:87:3f:ac:d2:4f:f7:4d:8a:66:9e:1a:8f:66:
89:42:a7:dc:37:0a:1f:7a:68:3d:86:ef:6b:8b:b2:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:55:DD:F5:87:F8:B1:53:3C:42:E7:42:C7:3A:D8:6F:E1:51:D4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e17dcec5-9d55-4765-8f83-957d1f5c0010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8020::/46
Signature Algorithm: sha256WithRSAEncryption
c0:8e:a2:11:a0:63:74:69:97:36:1b:ac:3b:8f:51:53:f2:86:
6d:9e:66:ec:f0:c9:cc:92:38:14:07:88:17:e6:16:37:d0:70:
e6:99:48:3b:05:40:72:b1:9c:c3:38:7d:8c:50:cd:f5:80:61:
6e:22:a1:7e:f1:04:f5:cb:a5:4d:8f:a6:2f:3a:0a:f2:9e:2e:
20:92:1e:07:a7:20:b2:74:bb:3b:6d:03:7f:cc:43:09:4b:69:
74:30:54:9e:cc:fe:fe:99:6d:2f:50:f8:d6:ca:7a:c1:c4:32:
16:c6:69:9f:77:f4:f1:bd:20:11:06:bb:74:35:17:0c:01:42:
91:94:2a:4c:fd:7a:4f:98:f7:dc:83:d0:47:39:58:7b:dc:37:
ab:7a:cc:a3:60:91:91:be:95:cc:2d:1b:82:92:de:f8:8c:2d:
92:2e:c1:77:77:8b:83:98:c2:63:28:76:00:89:05:03:45:ee:
d2:f1:0b:f2:9a:0e:18:ba:3e:36:d6:52:81:23:cb:0b:8d:06:
99:50:93:67:2d:89:3e:79:f2:49:fb:31:87:ef:bb:96:41:13:
41:b0:68:af:b8:11:dd:cd:06:a4:c8:dd:95:cc:a8:28:a9:f7:
0b:0f:92:16:cd:87:01:1a:73:b7:45:ba:31:76:d2:c0:51:7b:
ca:25:86:fd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKUsh8m++F7kxImF55g45mAYKHq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzEwMDVaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDBmMmI1NjU0OTQ0M2JlMWJkNWIxMjViN2VlZDU5YmVkYzI0NTNhN2ZjZjI5
MjYxZWJmZmJiMzFiYzZiNTM2NjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKm2I9J4+0EHmVQ4tGjG87CqT9rPATdbeXgbk5L5Uxe+nTw9wnu72gtjBZdY
VdvT8f2Rp8HK37YrapXDtKBjY+WOhd92yhy8qphX1s0p/Uvh6O2LvZ7+v10sbs0I
bg+pRHu1WM690kS0e6J1CqrzAH+HrdyL56VFV5AAkk/XjNrV4caFNDVwRkKK/1oB
Pdep727OIJufmC6hMJ/vyEJY/EU+3aq2IGGP2G0xOVKLNaCBPS746iq0aMKWLKtt
U4jtAP4QL231SqdQ6hKTzAmamtUnvNPfpX8aGqfN9VAKDQcXLk+HP6zST/dNimae
Go9miUKn3DcKH3poPYbva4uyUXMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR+iVXd
9Yf4sVM8QudCxzrYb+FR1DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTE3ZGNlYzUtOWQ1NS00NzY1LThmODMtOTU3ZDFmNWMwMDEwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DWA
IDANBgkqhkiG9w0BAQsFAAOCAQEAwI6iEaBjdGmXNhusO49RU/KGbZ5m7PDJzJI4
FAeIF+YWN9Bw5plIOwVAcrGcwzh9jFDN9YBhbiKhfvEE9culTY+mLzoK8p4uIJIe
B6cgsnS7O20Df8xDCUtpdDBUnsz+/pltL1D41sp6wcQyFsZpn3f08b0gEQa7dDUX
DAFCkZQqTP16T5j33IPQRzlYe9w3q3rMo2CRkb6VzC0bgpLe+Iwtki7Bd3eLg5jC
Yyh2AIkFA0Xu0vEL8poOGLo+NtZSgSPLC40GmVCTZy2JPnnySfsxh++7lkETQbBo
r7gR3c0GpMjdlcyoKKn3Cw+SFs2HARpzt0W6MXbSwFF7yiWG/Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:40 2025 by rpki-client