Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
File: 0b360e2c-382b-4420-8550-330a58e946ee.roa (raw, json)
Hash identifier: 4sfw03ecRPw93qrDu3FyqIpcvowlSpgoATbJEPXYJrM=
Subject key identifier: F3:BE:37:50:E7:CD:D3:22:C7:7D:09:BF:18:84:B4:32:A0:D8:95:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DBF66F9187312982680A04636ACCCB53AAC3393
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
Signing time: Wed 05 Mar 2025 17:31:10 +0000
ROA not before: Wed 05 Mar 2025 17:31:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bf:66:f9:18:73:12:98:26:80:a0:46:36:ac:cc:b5:3a:ac:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:4e:e8:cd:89:b1:07:3d:e0:99:ed:1f:d1:
df:04:fb:06:84:87:62:59:d0:4c:1a:eb:bd:79:98:
e6:35:85:d5:ee:16:89:ea:db:44:11:4a:73:90:dc:
c6:36:19:76:35:7f:6b:29:af:7d:0e:eb:bd:88:a9:
ac:41:00:d3:f5:82:e0:3d:cd:3e:81:15:72:ae:3b:
7c:f2:f1:dc:7e:1f:31:6e:1b:3e:d5:02:68:71:b1:
3f:49:83:af:09:5f:5f:ae:e9:19:b0:ff:cd:be:4e:
66:da:e8:31:8d:1d:45:ce:38:1f:48:f6:c3:86:3a:
e3:1f:e6:f3:0f:b3:00:44:1f:6e:0d:a8:a2:6e:6f:
bd:c7:01:f6:a3:08:b3:4a:56:3b:92:8b:ea:85:c1:
e5:25:41:a7:2a:21:5c:84:04:33:5e:19:cd:88:39:
5b:ad:ff:30:ff:61:da:db:d0:11:59:4e:30:a5:e3:
74:85:67:21:22:14:bb:7b:b5:d3:0c:bf:a3:df:3a:
9f:62:b4:0a:9f:aa:74:48:8c:15:fe:a6:76:ac:be:
fd:f0:1f:ab:15:a0:b7:ba:87:2a:52:99:4f:b4:8d:
56:39:8f:28:40:1d:e4:f2:46:ea:9d:a4:06:6a:42:
a5:54:ca:bc:be:0c:e2:8b:3c:3d:48:b2:8e:aa:fe:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:37:50:E7:CD:D3:22:C7:7D:09:BF:18:84:B4:32:A0:D8:95:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:6000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:51:91:ff:77:70:a8:58:a8:a6:b6:8b:38:31:01:ae:32:bd:
4a:50:f2:14:4a:61:c6:b4:12:27:86:1e:3a:e0:ea:3d:31:ad:
72:a4:dd:f6:76:0a:dd:00:b8:c2:79:6e:ad:69:4a:48:9b:1b:
e1:22:09:ea:5b:31:08:b2:1f:2f:72:7c:39:a9:d5:64:14:34:
89:0c:5b:1c:50:24:2b:98:00:dc:73:82:7d:c8:6d:ad:50:f1:
c9:96:cb:dd:e8:38:65:d7:4a:9c:53:4e:92:bd:6d:6e:5d:7c:
69:a7:72:ac:b0:70:eb:20:e2:46:d5:9f:fa:ad:1c:ca:7a:96:
fb:ad:f8:90:e6:04:9c:ce:3d:0f:7c:72:4f:83:ee:da:9e:14:
f1:4c:fd:f2:85:76:af:6a:98:e3:13:72:ed:5a:57:59:00:db:
f7:17:7a:a4:70:68:06:98:b3:20:14:0f:78:4e:a5:5a:bd:6c:
69:af:b5:18:97:24:e1:f8:d8:eb:0d:18:40:0a:e4:f0:4b:2f:
e9:a1:c2:ff:7a:19:c6:00:07:97:3a:68:9c:e6:35:ae:5e:fb:
f4:0b:bd:2e:3e:85:50:5b:fa:be:9e:26:2e:ff:f8:ab:9e:33:
ee:1f:35:5d:c0:b9:73:06:e7:2a:9b:f6:6e:cd:db:36:58:ad:
d6:d0:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:24 2025 by rpki-client