Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
File: fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json)
Hash identifier: 1C1eeT0dyj+XBKtU8W/0eerwxj8eoZUxEdKPkSllp1E=
Subject key identifier: F4:85:0E:38:A4:AC:73:FE:91:34:8F:18:0F:FF:F5:9F:11:D1:52:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09F965C003EA9A4F300513C05C16471E4742AA66
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
Signing time: Wed 05 Mar 2025 16:10:10 +0000
ROA not before: Wed 05 Mar 2025 16:10:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f9:65:c0:03:ea:9a:4f:30:05:13:c0:5c:16:47:1e:47:42:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:10:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:66:48:9d:b5:d4:c7:3d:9b:cd:bc:b6:c2:
77:51:33:03:a5:95:1a:2a:c0:8f:7b:2a:78:58:92:
d1:0d:a5:4b:47:ca:74:e8:13:a1:f7:0c:24:af:7b:
51:44:2c:75:56:21:46:49:60:1b:27:53:2d:c7:ec:
ab:eb:e1:0c:51:23:fc:7b:83:ae:aa:a3:79:79:fd:
30:fa:2d:00:4b:a0:91:d0:2d:e3:98:95:ff:aa:a8:
40:a5:75:8c:c3:9a:2e:d6:dd:98:f5:11:00:af:0f:
56:27:88:eb:b4:04:07:7e:4f:e7:66:06:d9:d4:35:
af:75:92:48:a6:1d:fb:42:d7:93:84:85:ee:da:1b:
31:5e:8b:f3:78:23:05:75:3a:7a:98:0e:24:5a:95:
b6:22:18:25:48:4c:01:bd:72:ae:22:79:70:6a:0d:
8a:5c:36:21:29:b5:4f:53:38:60:a5:8e:46:48:4d:
48:3d:02:91:87:78:16:6b:3a:52:63:50:ff:f0:00:
b6:5e:d2:f2:de:2a:44:57:13:ef:98:26:74:5b:17:
c7:81:ab:7d:1d:2f:e9:ba:1f:da:bc:77:85:dc:de:
01:ed:2c:55:8b:f8:97:08:8a:0b:2d:7d:9a:57:29:
70:cb:a8:ce:61:1f:19:8f:3a:95:1b:6d:df:d8:ca:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:0E:38:A4:AC:73:FE:91:34:8F:18:0F:FF:F5:9F:11:D1:52:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2080::/48
Signature Algorithm: sha256WithRSAEncryption
48:61:38:1d:ac:f8:69:f3:07:c7:20:42:b0:56:b8:02:9b:08:
0d:e9:df:b7:07:7b:31:d6:63:d1:75:7a:ed:f0:87:fd:37:83:
e5:4f:08:ec:2b:bd:c0:46:70:02:bb:03:45:d1:8a:a8:68:50:
1f:6f:08:c4:61:47:64:77:27:e0:76:04:73:59:ed:d9:22:6d:
b6:c2:b7:6d:4e:9b:7f:5a:db:4e:5c:4d:42:e8:26:87:9c:8a:
b4:fd:17:89:27:7a:85:88:09:08:aa:d2:e7:bd:f4:f7:cb:89:
37:08:eb:88:6f:1c:b0:7a:33:26:a0:c9:73:44:8c:13:b5:14:
1a:42:de:bc:80:72:79:ab:82:e7:78:4b:b7:90:92:1c:36:34:
fb:ff:29:e3:0f:d0:a1:25:0a:e9:9a:6d:5b:6e:aa:6e:fd:43:
2c:62:f3:fe:4b:59:fa:db:14:b8:a5:65:82:cc:72:3f:93:7d:
05:0e:8f:56:b5:da:b4:53:99:ee:11:8d:0c:19:35:be:2d:f4:
34:c4:d6:cb:7f:37:81:f3:28:05:86:cf:bb:5f:94:c8:30:54:
f0:16:db:61:1f:c7:4a:ef:12:ab:51:bf:f3:c7:69:4a:fc:29:
b1:ec:a6:76:56:65:fe:68:0d:ea:ff:d6:18:bc:a6:0f:18:50:
ea:be:88:86
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCfllwAPqmk8wBRPAXBZHHkdCqmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNjEwMTBaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGJkY2JiZDNmMmQ0YTY2ODZmZmE1MWI3Yzk5YTk1NmJmMGJjYzNmODlhZjc1
YTA4OGFiZDliYzI4NzIyMmY3MDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpLZkidtdTHPZvNvLbCd1EzA6WVGirAj3sqeFiS0Q2lS0fKdOgTofcMJK97
UUQsdVYhRklgGydTLcfsq+vhDFEj/HuDrqqjeXn9MPotAEugkdAt45iV/6qoQKV1
jMOaLtbdmPURAK8PVieI67QEB35P52YG2dQ1r3WSSKYd+0LXk4SF7tobMV6L83gj
BXU6epgOJFqVtiIYJUhMAb1yriJ5cGoNilw2ISm1T1M4YKWORkhNSD0CkYd4Fms6
UmNQ//AAtl7S8t4qRFcT75gmdFsXx4GrfR0v6bof2rx3hdzeAe0sVYv4lwiKCy19
mlcpcMuozmEfGY86lRtt39jKDN8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT0hQ44
pKxz/pE0jxgP//WfEdFSqjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmI5ZDQ3MTYtYmYwZi00MGU1LWJlYjEtNGVhNWVmMDFiZDFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEg
gDANBgkqhkiG9w0BAQsFAAOCAQEASGE4Haz4afMHxyBCsFa4ApsIDenftwd7MdZj
0XV67fCH/TeD5U8I7Cu9wEZwArsDRdGKqGhQH28IxGFHZHcn4HYEc1nt2SJttsK3
bU6bf1rbTlxNQugmh5yKtP0XiSd6hYgJCKrS573098uJNwjriG8csHozJqDJc0SM
E7UUGkLevIByeauC53hLt5CSHDY0+/8p4w/QoSUK6ZptW26qbv1DLGLz/ktZ+tsU
uKVlgsxyP5N9BQ6PVrXatFOZ7hGNDBk1vi30NMTWy383gfMoBYbPu1+UyDBU8Bbb
YR/HSu8Sq1G/88dpSvwpseymdlZl/mgN6v/WGLymDxhQ6r6Ihg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:45 2025 by rpki-client