Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da2145b5-6513-419c-a72b-3b41bbdf3573.roa
File: da2145b5-6513-419c-a72b-3b41bbdf3573.roa (raw, json)
Hash identifier: SKiUAPpJxBmo8udzvBqYoFnPLKkPdIQZZ4+1VbtgmE4=
Subject key identifier: 63:A9:AE:AF:E3:4D:0D:4A:EC:83:C7:2D:DA:4A:B2:F8:FE:1D:99:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7591FB033B1BD57E6F1298B48C8647456E996FB6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da2145b5-6513-419c-a72b-3b41bbdf3573.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:91:fb:03:3b:1b:d5:7e:6f:12:98:b4:8c:86:47:45:6e:99:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:f5:a3:c0:00:9d:fc:fb:b8:24:d2:a6:59:
44:0d:b8:35:4a:d1:26:51:09:42:5a:51:df:b2:ef:
77:ed:60:21:f9:5c:b0:e4:24:eb:0b:61:48:6f:66:
be:34:bc:b5:e0:5d:af:c0:1e:3c:7c:0c:c3:c4:1a:
18:6d:f5:fa:e4:f6:e4:99:c3:45:d5:7b:bc:06:b9:
32:56:a9:c5:63:9d:43:ec:87:5e:2b:1f:51:fe:0f:
32:d4:39:f4:c6:94:44:44:c1:66:a9:4b:d0:2b:6a:
2e:c8:db:16:91:52:eb:1e:89:9c:a5:3d:e7:4c:fa:
fe:23:ac:e8:0f:70:2a:b6:9f:dc:31:0b:36:34:94:
1a:61:d6:be:d8:84:33:b3:47:74:9b:20:cf:ba:91:
93:3b:d7:17:1a:de:fd:a9:a9:f3:7e:25:8e:f5:d4:
85:ff:a6:39:30:00:16:23:ca:3b:b8:41:65:8a:6f:
5a:ae:89:66:43:87:4f:97:70:46:67:21:07:88:42:
ae:9d:f2:ff:f8:3c:01:01:60:85:92:a8:00:46:80:
b9:b1:8a:2b:a7:a3:f4:ba:bf:cc:76:13:b6:56:87:
af:ed:13:8b:89:f8:7f:15:0c:c0:7a:fe:02:6b:a4:
90:ac:1e:a4:e9:cc:f1:68:dc:60:37:e8:df:b3:b4:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:AE:AF:E3:4D:0D:4A:EC:83:C7:2D:DA:4A:B2:F8:FE:1D:99:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da2145b5-6513-419c-a72b-3b41bbdf3573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:1000::/40
Signature Algorithm: sha256WithRSAEncryption
79:f4:d0:56:80:55:f5:af:4f:c7:a3:d9:a8:4a:94:bb:30:6f:
dc:f3:53:b5:33:1a:bb:02:aa:bf:17:a5:f5:e0:06:19:5f:c4:
89:c6:be:ae:77:b8:86:08:a0:ac:1f:c4:d6:e9:f3:41:83:33:
08:3f:74:2e:86:0a:18:ec:ea:22:3c:e1:c0:0c:0a:25:d5:79:
78:4a:0e:ea:3b:47:4a:ba:2c:54:e5:06:f7:65:93:47:aa:ab:
74:34:e2:6d:eb:18:8d:62:94:aa:d0:17:4d:3c:7e:2e:02:53:
c4:91:bb:7a:84:1c:0b:97:2e:91:a5:7a:31:58:45:56:ce:a0:
55:57:68:58:bc:8c:3e:87:83:ca:0c:75:59:58:e6:14:48:0f:
14:7c:0a:4a:6c:2b:ea:d8:ee:33:50:6a:d3:d3:3b:8a:fc:8b:
d0:68:a6:40:28:2c:47:cc:e5:e9:64:9e:f4:e8:df:db:6c:ff:
a7:0d:bb:ab:de:20:a2:c9:b8:52:46:61:39:9d:54:1f:57:3c:
2e:f1:ec:4c:99:34:55:6d:d4:a6:72:ac:b1:c4:8d:4e:f0:a9:
a1:e5:f1:0a:32:6e:37:27:3b:bd:ce:58:64:6d:25:16:af:f1:
ca:28:de:8e:b5:d3:b5:cc:a7:64:cf:bc:6f:f7:03:f8:66:81:
fd:4f:54:c4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdZH7Azsb1X5vEpi0jIZHRW6Zb7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAyMDUwMDAwMDBaFw0yNTAzMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDkzNGRjMWI0YzhkZTU1MzM1NjIyMzY0ZTRkMTAzOGQ4ZDgwNmQwMmZhNDU0
Nzk5NmUzNTQ3YTlmYWQ2YjRmNTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANGo9aPAAJ38+7gk0qZZRA24NUrRJlEJQlpR37Lvd+1gIflcsOQk6wthSG9m
vjS8teBdr8AePHwMw8QaGG31+uT25JnDRdV7vAa5MlapxWOdQ+yHXisfUf4PMtQ5
9MaURETBZqlL0CtqLsjbFpFS6x6JnKU950z6/iOs6A9wKraf3DELNjSUGmHWvtiE
M7NHdJsgz7qRkzvXFxre/amp834ljvXUhf+mOTAAFiPKO7hBZYpvWq6JZkOHT5dw
RmchB4hCrp3y//g8AQFghZKoAEaAubGKK6ej9Lq/zHYTtlaHr+0Ti4n4fxUMwHr+
AmukkKwepOnM8WjcYDfo37O0VnkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRjqa6v
400NSuyDxy3aSrL4/h2Z0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGEyMTQ1YjUtNjUxMy00MTljLWE3MmItM2I0MWJiZGYzNTczLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DYQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB59NBWgFX1r0/Ho9moSpS7MG/c81O1Mxq7Aqq/
F6X14AYZX8SJxr6ud7iGCKCsH8TW6fNBgzMIP3QuhgoY7OoiPOHADAol1Xl4Sg7q
O0dKuixU5Qb3ZZNHqqt0NOJt6xiNYpSq0BdNPH4uAlPEkbt6hBwLly6RpXoxWEVW
zqBVV2hYvIw+h4PKDHVZWOYUSA8UfApKbCvq2O4zUGrT0zuK/IvQaKZAKCxHzOXp
ZJ706N/bbP+nDbur3iCiybhSRmE5nVQfVzwu8exMmTRVbdSmcqyxxI1O8Kmh5fEK
Mm43Jzu9zlhkbSUWr/HKKN6OtdO1zKdkz7xv9wP4ZoH9T1TE
-----END CERTIFICATE-----
Generated at Sat Mar 8 03:30:17 2025 by rpki-client on console.sobornost.net