Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
File: 0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa (raw, json)
Hash identifier: yWlYL5IfhnPHXzsReuAcfsNanUi1eHiigg1762ebl+s=
Subject key identifier: 51:80:59:BA:19:C4:BD:76:65:97:5B:97:14:FB:CA:0C:9F:C2:C6:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 432D316044574A755AB21995553C831873521A12
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
Signing time: Wed 05 Mar 2025 17:00:31 +0000
ROA not before: Wed 05 Mar 2025 17:00:31 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2d:31:60:44:57:4a:75:5a:b2:19:95:55:3c:83:18:73:52:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:00:31 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:6a:eb:a9:73:30:ad:4c:5a:64:3e:e5:f7:
99:07:78:13:d4:17:d4:b5:e4:9e:e2:cc:16:7c:f7:
bf:b0:8e:89:ff:bc:7e:44:da:8f:c5:bb:e0:cd:c9:
a5:15:d2:90:c3:11:47:db:5b:0e:75:86:2e:b9:b8:
3b:a8:a3:3a:7c:a9:70:ca:b9:a4:57:66:09:b2:ec:
d3:30:bb:10:3e:ee:dd:96:e1:22:7f:ac:0e:b3:65:
8a:0f:32:f0:08:63:4c:45:cc:38:00:59:7a:c0:7c:
cd:1e:0b:9b:a5:59:0f:6d:b7:2f:0d:be:cd:c1:9d:
53:7c:11:96:54:07:19:c9:a0:a0:bb:4e:e8:03:ea:
b1:6e:ca:ef:85:0e:20:d2:f8:1f:f6:99:31:9f:32:
f5:3a:3a:5e:a2:12:ef:87:01:4a:b6:b5:0a:e0:46:
17:c6:51:20:ee:cb:33:5a:e7:4d:93:55:61:74:0e:
2c:67:bf:1b:9f:0d:b6:19:02:08:bd:d4:44:85:e0:
9f:cb:dc:42:31:28:bf:34:06:fd:e4:9e:61:fb:a2:
45:7f:42:f4:ed:04:ba:f8:5f:dc:0d:44:80:c7:9f:
2f:aa:97:69:d3:67:25:50:0c:c9:8a:ac:c1:a8:bd:
9f:a9:0a:8b:05:ce:16:59:3e:8b:62:71:39:42:fd:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:59:BA:19:C4:BD:76:65:97:5B:97:14:FB:CA:0C:9F:C2:C6:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a65ddd8-326d-4006-bbfb-d7274fd7fae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2040::/48
Signature Algorithm: sha256WithRSAEncryption
45:81:9f:35:b3:92:14:15:49:ad:e3:ac:10:5c:9f:b8:ee:58:
fd:1c:6f:a6:a7:1b:c6:2f:22:92:27:3f:eb:d1:97:7a:b4:73:
c0:8e:f2:05:97:82:7b:33:58:97:66:47:50:a2:fb:e5:72:21:
bb:15:be:16:54:10:b1:42:38:4e:1f:7a:5a:33:2e:bd:a4:48:
b9:f9:83:21:18:c1:8c:fa:45:16:15:a5:74:67:49:dd:e8:0c:
a0:2e:42:c7:e1:a3:00:58:7e:ac:9a:9e:b1:7e:47:84:45:61:
3f:cd:c2:5c:d1:cc:90:b6:48:6b:1a:56:90:21:ad:2e:2c:82:
73:bc:25:f4:9a:37:8f:82:48:2b:52:d3:88:4a:d4:6a:e2:92:
a4:74:79:aa:a5:43:0c:1c:8f:a6:fc:75:92:9c:44:95:4b:76:
be:86:b1:39:6a:a5:5c:24:5c:34:4b:15:e7:c1:4b:2e:3a:cd:
95:21:c7:d7:94:71:f1:a0:54:f3:f8:62:26:7a:58:e9:f5:77:
b3:55:4b:8a:cd:b9:04:a0:59:13:ef:bb:e8:cf:33:f7:d2:f9:
8f:76:0a:a6:34:0d:cc:c7:b9:79:20:a5:49:90:b3:4f:a8:57:
82:83:65:83:0b:58:85:8d:78:e6:7d:34:ed:51:54:3c:37:ab:
33:4e:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:26 2025 by rpki-client