Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
File: 08648cfd-d5cb-4480-92d0-084369ff8b4d.roa (raw, json)
Hash identifier: 48fSYHBHRBOAZTIgzpCzKo+oc9nKLIfHDUL2bhahgQQ=
Subject key identifier: 47:F9:B1:E7:BB:D3:35:FB:94:78:8C:B9:F4:6D:2F:EA:8C:54:6A:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5060B22B95951DE90074D5ABE12A2F72D6BD3660
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
Signing time: Wed 05 Mar 2025 17:20:11 +0000
ROA not before: Wed 05 Mar 2025 17:20:11 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:1040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:60:b2:2b:95:95:1d:e9:00:74:d5:ab:e1:2a:2f:72:d6:bd:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:20:11 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:59:a0:64:7c:a7:58:1b:99:76:b8:7d:49:
a7:a7:0c:10:95:d7:b1:a4:59:ef:16:cc:dc:45:7e:
40:fd:cb:7b:e3:e7:0a:cf:0b:01:45:51:39:1e:5e:
5e:78:cf:79:40:35:dc:33:dd:41:ee:0c:5a:64:07:
c0:9c:c9:3c:38:35:2c:fe:d5:74:a7:f1:83:6f:c0:
63:fd:fd:ec:6c:af:bd:ac:35:5b:c7:d7:18:db:ba:
d0:32:d0:24:88:2f:0a:c2:d0:82:fd:51:8d:2f:e6:
c0:9f:5e:1d:51:bf:2d:23:4c:1b:b1:f7:de:ec:c2:
62:cb:1f:32:ea:c5:ac:cb:30:0c:24:ea:e0:df:3e:
4d:4b:32:36:59:48:0b:98:e3:cd:65:07:b5:40:b1:
07:3f:53:7d:ea:25:31:66:73:7d:bf:f2:bb:d8:50:
9e:52:5e:fd:7d:dc:dd:c6:8e:1e:4d:bb:42:a9:7b:
c0:8d:d8:3d:57:ea:fa:5d:bb:65:7d:c3:61:1a:d8:
ad:66:53:39:24:38:6b:db:3d:2d:59:64:2d:f7:52:
98:96:8e:93:39:a7:cb:a3:f3:20:62:b2:2f:be:3c:
53:ca:c4:a4:b5:ff:08:ea:68:4e:2e:12:16:f8:ed:
f2:5a:e1:6f:2c:69:4d:fc:95:92:dd:1a:a9:0c:90:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:B1:E7:BB:D3:35:FB:94:78:8C:B9:F4:6D:2F:EA:8C:54:6A:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:1040::/46
Signature Algorithm: sha256WithRSAEncryption
7f:d4:0c:43:55:e7:7f:ca:70:ae:fe:eb:07:81:64:75:3a:9f:
bd:b8:19:8c:2d:c0:e1:32:e0:e6:d5:12:5b:3b:ca:aa:c2:ad:
11:0b:3a:86:4c:17:af:27:92:37:aa:80:e0:0c:f3:71:26:ff:
c3:a4:9f:ac:80:2a:09:62:28:1a:97:25:c9:75:ff:97:5b:25:
7a:6f:b6:b1:bc:2b:38:0a:6c:51:67:8f:bd:94:15:c2:44:fa:
90:30:d1:e3:02:d8:e1:3c:b2:29:13:8c:4a:eb:70:b1:bf:6c:
d5:cb:33:e1:2a:9b:1c:0f:e1:cc:fe:66:79:3d:ad:28:8d:3d:
09:a5:c8:db:93:bd:a0:b1:e4:75:31:9d:68:a2:e0:ab:63:98:
ae:a5:54:db:ae:b3:11:ad:f9:66:a3:e4:6d:0b:c0:d6:4a:12:
38:af:ce:d0:aa:ba:fa:85:74:3b:70:8f:52:1d:8f:a1:de:ef:
70:ba:1a:95:d5:60:0f:17:e9:53:ea:cb:f8:50:70:b2:c2:1f:
d9:26:2f:02:45:e4:63:c0:a6:81:e5:4f:be:38:e2:12:db:42:
8e:a0:6e:a5:b2:08:95:44:ed:f7:05:1d:7d:32:c8:4e:cd:b0:
04:c3:c8:3f:7c:55:ef:e1:73:8a:6d:2d:05:e9:dc:6b:9c:2a:
6f:e4:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:41 2025 by rpki-client