Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05a72d01-7790-4b75-991b-28806ee2dacf.roa
File: 05a72d01-7790-4b75-991b-28806ee2dacf.roa (raw, json)
Hash identifier: 7p7DDDdBmxL+D3YQxbgiuqXjlUv1dN6pb0QK0RwDKcg=
Subject key identifier: 02:30:98:40:13:BA:86:15:DD:2E:E6:C6:B2:B5:B6:70:5C:0F:30:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FE42298F6F406C619349590ACD2D59A11BA0C89
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05a72d01-7790-4b75-991b-28806ee2dacf.roa
Signing time: Wed 05 Mar 2025 15:40:05 +0000
ROA not before: Wed 05 Mar 2025 15:40:05 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:1040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e4:22:98:f6:f4:06:c6:19:34:95:90:ac:d2:d5:9a:11:ba:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:40:05 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:4c:09:81:22:bb:db:a8:d6:7c:d8:ad:93:
49:42:39:b5:e0:29:d8:73:96:6d:bf:cd:4f:1b:31:
af:42:f0:c3:0f:5e:51:23:f5:4c:13:92:12:48:50:
91:a0:e3:1c:6a:7e:9e:45:7c:ec:9e:d7:aa:17:94:
1c:14:7b:0b:cc:6f:a7:a7:39:6f:61:aa:b7:99:c5:
89:cf:74:c0:5d:80:ac:b4:fd:d2:69:02:f7:8a:35:
1e:91:11:f4:7a:7e:06:03:4b:4a:a7:e2:d2:c3:06:
bc:af:2b:19:1a:40:2c:ee:92:11:92:de:7c:e7:2e:
ae:0a:a1:7a:1e:51:5c:a5:76:3f:42:ed:ae:99:f5:
57:7c:d1:13:06:f8:17:5f:03:ad:04:ac:c0:6b:c8:
03:59:10:76:35:6e:eb:f3:12:09:0e:3b:3e:fa:97:
b8:07:6b:ef:60:c0:1d:44:6b:63:93:fc:28:7c:54:
af:12:a3:0f:3e:cd:24:ca:0c:f7:32:89:28:9d:4a:
ac:c6:f1:6b:96:ed:b6:29:41:85:b7:77:ae:07:d9:
db:7f:07:73:f0:9c:a4:10:de:a0:69:f8:f7:45:3d:
a3:51:d9:df:f7:d5:83:c1:96:ac:8f:dc:03:e2:38:
83:61:12:2f:55:3a:b4:22:06:d3:9c:94:3b:80:20:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:98:40:13:BA:86:15:DD:2E:E6:C6:B2:B5:B6:70:5C:0F:30:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05a72d01-7790-4b75-991b-28806ee2dacf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1040::/48
Signature Algorithm: sha256WithRSAEncryption
51:3c:8a:08:9f:0d:99:76:3b:f9:31:d7:62:8d:db:41:b1:3b:
2f:fe:5e:0e:81:25:f1:c4:1a:60:8d:be:a0:1c:2d:37:3a:c4:
da:0f:e6:4d:d8:77:b1:8d:ef:3d:fe:c9:67:10:17:3f:e4:7a:
16:80:a4:36:90:1a:1c:01:e9:e3:21:f5:77:ab:3f:23:34:7e:
b9:26:ae:8c:5f:1c:92:8b:cb:28:8a:b2:1e:c8:90:aa:b3:b1:
29:b1:d9:c1:26:b2:ee:ca:7e:fb:01:48:6c:34:3b:36:f1:53:
55:27:07:52:02:58:c9:79:9a:e0:91:02:bb:2e:47:23:10:08:
51:eb:71:7b:76:8a:6f:c1:7c:ef:b3:ce:08:d7:31:dc:86:3f:
f9:ff:8b:79:40:30:cd:13:ad:f3:cf:82:5c:20:33:88:24:15:
6c:82:a8:e5:fa:b5:3b:94:aa:d0:d8:64:1d:91:e9:d6:e9:45:
e1:00:e6:9e:a5:55:9c:e9:73:0a:00:c8:5c:e8:48:42:5b:7c:
42:92:a9:fa:e3:af:1d:3b:31:ef:e5:9c:7a:1f:29:6a:ee:02:
a9:3d:bc:09:92:1f:cd:68:aa:33:3a:c6:f5:07:9a:a5:6b:2c:
52:f8:36:bc:df:e5:c4:c1:2e:10:0f:50:2b:95:e0:fa:df:6e:
a8:29:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:22 2025 by rpki-client