Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
File: 03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json)
Hash identifier: UeviZ7bQgv/YTZshfUL91QQeihpr6NB+72LcfmIMTGU=
Subject key identifier: 6A:39:BB:A0:84:98:1A:37:FE:90:BE:49:EE:D9:CA:0A:24:52:AD:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50165F09437EFC1D59DFB94AE4C7D8185E001FE4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
Signing time: Wed 05 Mar 2025 17:21:48 +0000
ROA not before: Wed 05 Mar 2025 17:21:48 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:16:5f:09:43:7e:fc:1d:59:df:b9:4a:e4:c7:d8:18:5e:00:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:48 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:ee:03:f9:30:4f:b1:ee:45:a9:9d:01:51:
05:6d:80:60:a4:32:30:c6:05:b4:98:fd:35:80:57:
bf:4d:8a:77:ca:1e:24:e7:34:43:4b:89:23:49:e9:
ac:98:63:01:cf:3a:13:5b:3e:0e:e3:cf:4d:f1:49:
40:8a:e8:04:f2:87:8e:96:80:40:3d:02:7b:fa:6c:
ac:77:78:e9:22:cf:19:53:b2:86:76:a7:0d:32:93:
f6:7e:c7:bf:52:75:d5:b9:97:91:75:a7:2c:bd:b5:
3e:6b:6e:77:b6:5d:6a:22:6a:37:c7:7d:8b:b3:b0:
0d:f4:ff:82:a0:3c:c8:75:65:24:a4:6a:fe:98:43:
20:fc:54:d9:7c:b8:49:e1:01:5f:dd:22:c8:fd:49:
e6:b3:4a:d0:a7:64:f7:65:00:04:8b:fb:c2:47:c3:
50:8b:cb:7a:82:aa:d0:c8:d6:07:72:44:d0:32:32:
d1:c1:aa:7e:45:7b:30:65:63:86:90:b1:50:1a:0b:
05:f7:4d:bd:c7:12:f5:6a:47:0a:d2:0b:cf:79:1f:
b3:a7:dc:ae:c4:eb:06:f2:06:98:8e:1d:a5:c7:22:
a1:d3:d8:3a:fa:f3:b4:ca:eb:96:81:da:79:6d:6d:
17:0c:a4:f8:90:fc:32:98:bd:6d:9e:7b:29:42:d6:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:BB:A0:84:98:1A:37:FE:90:BE:49:EE:D9:CA:0A:24:52:AD:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:b000::/40
Signature Algorithm: sha256WithRSAEncryption
87:da:90:d6:41:24:a3:b7:af:92:d5:d2:56:27:44:43:41:86:
56:59:ad:87:2a:56:08:fe:e4:38:e8:b9:f9:17:6e:ae:ff:50:
cf:dc:b7:67:64:db:c4:2c:0c:16:19:dd:e0:f1:81:12:da:c2:
cb:63:aa:1c:2a:03:97:51:3c:27:0e:cc:da:cf:a2:c0:15:ed:
b1:0e:32:07:16:f1:e3:30:2f:f1:ca:3a:7a:11:c3:1e:db:d6:
c5:6a:b9:bf:36:56:b2:56:c1:fe:23:d8:96:e7:eb:87:aa:34:
b7:db:29:47:10:ba:05:e7:36:7f:90:88:22:64:e0:43:86:99:
e6:16:f0:cd:db:83:6f:52:c2:10:cd:ac:d4:2f:22:fe:a2:f4:
66:5a:8c:69:5d:10:c5:0e:f0:49:64:27:7d:13:0b:36:03:ea:
7b:1f:d8:53:17:c0:20:5f:5c:2b:21:70:f3:8f:a1:de:83:11:
6c:21:b9:bd:43:38:13:2b:67:33:a9:c7:65:7c:03:fc:c7:ef:
68:77:95:79:bb:93:6e:87:ac:e1:4e:50:c9:88:0d:47:25:cc:
e0:31:a9:11:df:61:23:4f:38:d6:2b:38:96:51:7b:fe:0c:c5:
02:6f:fb:68:34:e4:09:cc:9c:92:9b:3b:6a:46:67:38:24:28:
fe:02:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:42 2025 by rpki-client