Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
File: fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa (raw, json)
Hash identifier: yis5J6l3L53m1FL0XZO8RI4drlcV+xiyYY8p71m4FGc=
Subject key identifier: 51:8E:F3:A8:3E:08:49:01:DC:AB:66:A3:93:97:90:CE:09:26:EC:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 697C83B8A3B232FFBB4209EB2ED00AFBD3373E9B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
Signing time: Wed 05 Mar 2025 17:11:55 +0000
ROA not before: Wed 05 Mar 2025 17:11:55 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7c:83:b8:a3:b2:32:ff:bb:42:09:eb:2e:d0:0a:fb:d3:37:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:11:55 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:65:e1:18:c2:08:a2:0d:19:18:c0:aa:91:
ab:42:c6:fc:f2:79:ee:8a:fc:13:23:60:39:fc:15:
f6:ad:5d:31:b9:87:10:6e:a7:ee:b0:07:e7:94:c7:
a2:f2:8f:0e:11:93:de:44:d9:32:93:c8:3e:34:ca:
31:d3:d6:d5:ee:e6:03:d8:f1:03:e3:4c:9f:c5:27:
99:7b:be:93:ee:a8:6f:04:fa:c8:2d:99:66:3b:c4:
f1:f5:b4:f8:e3:44:6b:4f:e3:2d:57:60:ae:91:db:
44:da:3d:18:32:9b:6a:19:43:f5:ef:7f:61:31:df:
64:2a:19:1a:40:7c:43:0a:ca:66:f6:11:b3:1c:8c:
1e:08:e4:9b:6d:90:ec:28:3d:ee:76:76:76:cb:2a:
23:1c:92:13:5e:75:29:14:63:4e:a2:30:70:6b:43:
a1:71:b2:bb:27:af:7b:3f:d5:9b:40:dd:25:25:1f:
a2:1d:50:29:18:51:50:42:7c:05:6e:8c:68:26:1b:
37:7b:6a:e0:31:a0:5a:61:78:7e:1b:90:af:e1:67:
00:c8:8b:de:a1:c4:ec:f0:01:3b:02:7e:cb:0b:d5:
d8:a7:d1:bc:10:44:74:ed:c0:94:3b:c9:90:9f:13:
ef:99:7b:f6:b5:db:12:43:52:7e:2c:13:21:05:2b:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:F3:A8:3E:08:49:01:DC:AB:66:A3:93:97:90:CE:09:26:EC:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2080::/46
Signature Algorithm: sha256WithRSAEncryption
11:14:67:b7:82:ba:19:62:e1:1d:0c:96:14:6e:bf:1d:29:32:
32:e5:dd:a6:58:1d:f0:8c:7f:fb:90:bb:36:e3:d3:14:62:9c:
74:af:6a:9b:ed:90:c8:9a:74:5b:95:56:f5:22:49:69:3d:34:
34:03:cd:b3:bb:65:84:82:06:f4:f3:bb:ca:b7:7e:90:11:8a:
08:fa:fa:db:b3:6e:89:c7:a0:a4:2a:58:87:4b:65:62:6c:13:
f2:8b:18:41:38:c9:36:31:28:06:e1:c5:42:99:00:e2:f8:55:
c2:aa:0a:4d:78:ca:2f:30:27:0a:b8:5d:9c:c8:64:8b:d2:69:
87:29:8f:23:74:1b:23:c5:06:c8:f6:a6:10:5c:e1:12:94:38:
b9:58:b8:ca:88:f8:e3:09:b6:2c:23:f4:24:b7:6e:d6:8d:7c:
43:44:96:84:a8:df:0a:18:de:39:58:b5:09:ec:9f:d7:ba:2f:
89:a3:9d:36:f6:40:7d:93:1b:56:da:8d:73:49:82:3a:a1:c0:
32:1c:6f:c0:fe:c6:0d:43:cd:30:d2:d5:c6:a9:de:e6:07:61:
c4:4b:ec:41:a4:d8:72:be:de:a9:6d:04:f8:f6:ab:cd:fd:f1:
5f:34:77:5f:bc:13:5c:66:37:8d:bc:ac:ce:83:ff:e5:76:8e:
30:01:45:5b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUaXyDuKOyMv+7QgnrLtAK+9M3PpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzExNTVaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGRkZWQyMDFiYTA0N2I0ZjIzMTExYWNkZTQyZTM0Nzk1ZTQwYjk5YTIzZWJi
NDAwMTkzMjBkNmE1ZTU1N2U0NjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpQZeEYwgiiDRkYwKqRq0LG/PJ57or8EyNgOfwV9q1dMbmHEG6n7rAH55TH
ovKPDhGT3kTZMpPIPjTKMdPW1e7mA9jxA+NMn8UnmXu+k+6obwT6yC2ZZjvE8fW0
+ONEa0/jLVdgrpHbRNo9GDKbahlD9e9/YTHfZCoZGkB8QwrKZvYRsxyMHgjkm22Q
7Cg97nZ2dssqIxySE151KRRjTqIwcGtDoXGyuyevez/Vm0DdJSUfoh1QKRhRUEJ8
BW6MaCYbN3tq4DGgWmF4fhuQr+FnAMiL3qHE7PABOwJ+ywvV2KfRvBBEdO3AlDvJ
kJ8T75l79rXbEkNSfiwTIQUr2tECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRRjvOo
PghJAdyrZqOTl5DOCSbsBTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmU2OGY3MWMtMzJkNC00NmEyLWJlMzYtNTNiNmQ2ZTdiODAxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hcg
gDANBgkqhkiG9w0BAQsFAAOCAQEAERRnt4K6GWLhHQyWFG6/HSkyMuXdplgd8Ix/
+5C7NuPTFGKcdK9qm+2QyJp0W5VW9SJJaT00NAPNs7tlhIIG9PO7yrd+kBGKCPr6
27NuicegpCpYh0tlYmwT8osYQTjJNjEoBuHFQpkA4vhVwqoKTXjKLzAnCrhdnMhk
i9JphymPI3QbI8UGyPamEFzhEpQ4uVi4yoj44wm2LCP0JLdu1o18Q0SWhKjfChje
OVi1Ceyf17oviaOdNvZAfZMbVtqNc0mCOqHAMhxvwP7GDUPNMNLVxqne5gdhxEvs
QaTYcr7eqW0E+Parzf3xXzR3X7wTXGY3jbyszoP/5XaOMAFFWw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:53 2025 by rpki-client