Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
File: 0d8c280f-edb2-45fb-9207-8226dc900bb1.roa (raw, json)
Hash identifier: wjkScWHZ89yh26CgEW4b21jL+AOSgrG6+RNUdMKCKV8=
Subject key identifier: FA:F9:98:85:E1:4E:90:01:5D:F4:C1:77:E7:95:0F:8B:83:0A:B2:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06EFE0F27AF74704B809C6A8309CFE582AD9A44B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
Signing time: Wed 05 Mar 2025 15:50:46 +0000
ROA not before: Wed 05 Mar 2025 15:50:46 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ef:e0:f2:7a:f7:47:04:b8:09:c6:a8:30:9c:fe:58:2a:d9:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:50:46 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:13:dd:23:98:68:f4:51:01:ca:96:af:83:
b6:72:a4:f4:1d:e6:40:a6:2d:ed:2f:5e:06:bb:e3:
a7:bc:24:eb:e2:64:d4:c5:e1:ee:fa:f3:31:fa:af:
f7:9f:81:38:f8:7f:87:c0:1d:75:3b:42:d0:81:09:
3e:24:b1:e7:64:c0:4e:a6:71:82:06:0c:ea:6c:27:
e4:d6:3e:43:3c:a6:36:50:3d:6d:cb:af:55:d0:32:
a9:5f:85:6e:5b:49:65:eb:cd:8a:58:8b:03:06:9c:
f9:46:9d:b9:24:ae:d5:ab:b9:fc:42:17:6f:24:66:
86:d6:38:5e:f8:aa:a3:99:60:d2:d2:e5:1e:10:a9:
73:55:14:1c:93:91:43:01:12:d6:c0:82:d4:73:9c:
1a:f6:ec:ae:4c:fe:f3:bf:24:cf:90:38:9c:49:39:
73:b1:87:10:f3:67:6e:b2:3b:e6:2f:d1:d1:89:18:
c0:d3:2e:04:79:44:9d:57:76:63:20:e8:ac:84:ee:
ad:01:bf:f8:7e:74:1a:bb:b4:f3:ac:57:12:52:11:
f8:86:30:7f:68:4a:91:10:9e:e4:42:d3:ef:d8:23:
78:70:41:ce:33:1d:af:4c:a9:16:2d:ef:75:92:79:
74:df:3f:31:ae:44:11:c7:bc:64:da:52:97:1e:30:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:98:85:E1:4E:90:01:5D:F4:C1:77:E7:95:0F:8B:83:0A:B2:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5080::/48
Signature Algorithm: sha256WithRSAEncryption
b8:3a:3a:6a:04:d9:c2:ee:8d:7d:47:06:34:5b:59:a6:4d:31:
5e:79:11:f0:bf:02:9d:8b:0c:48:84:4c:2e:2a:75:8f:00:02:
d1:d6:74:32:64:33:87:32:82:69:f4:10:90:58:1d:2b:fc:5b:
4a:34:45:fa:94:c8:44:34:14:7b:cf:e2:46:a0:6b:57:06:cb:
50:89:3b:09:52:0e:b1:30:ed:b1:3b:07:65:fe:94:98:61:22:
46:f6:3f:f8:62:e9:5d:a5:fc:85:16:1f:2d:5e:2f:2e:cd:74:
8b:7e:95:bd:5f:52:24:2f:5a:20:9f:8d:1d:5a:b1:de:a7:66:
1b:37:dd:6b:7f:84:e0:57:77:cb:a6:7b:91:29:26:97:4a:08:
7b:85:0b:03:86:c1:2b:9e:6d:c2:1d:e6:12:bf:cd:8a:32:a0:
e9:72:28:43:27:93:4e:d7:f5:6c:46:4f:70:6b:46:3a:77:b1:
dd:cb:a9:ae:bb:40:a7:3f:95:e4:4f:ad:0d:7b:19:7a:9a:04:
78:65:4e:ee:1b:ec:56:ea:f4:38:04:94:74:f9:3e:7d:1c:2a:
69:1d:23:cf:ea:00:98:d1:dc:88:e3:cd:89:12:de:50:35:6b:
60:4e:8f:76:24:f9:80:ec:31:f3:d5:05:b9:7a:33:41:29:fa:
a0:f1:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:24 2025 by rpki-client