Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa
File: 10aa39be-4f99-4b39-b428-f034a0b57d69.roa (raw, json)
Hash identifier: YlXCnkR6Z7mDAgh5H0OudSAIZnR6DmGrseT5LoW0nT8=
Subject key identifier: 29:4E:29:4A:CD:4F:98:B5:2A:55:51:D0:E0:80:E1:DB:29:E6:1C:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C5D4DDEB24CC220CFD2A842CCF2488F95F71077
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa
Signing time: Wed 05 Mar 2025 17:21:39 +0000
ROA not before: Wed 05 Mar 2025 17:21:39 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5d:4d:de:b2:4c:c2:20:cf:d2:a8:42:cc:f2:48:8f:95:f7:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:39 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:f4:0e:f5:ae:dc:d0:52:96:7d:aa:7b:8d:
b5:d5:03:bd:e3:34:ca:9e:62:17:5b:e3:29:77:c5:
38:39:de:ce:69:6e:5f:e9:1b:d8:d0:ac:d3:8c:3b:
8c:79:73:45:12:70:64:48:70:2f:54:1d:74:87:47:
3e:18:db:84:01:93:51:9a:a5:e5:0a:a5:11:f6:ea:
4b:1a:7e:29:9a:5d:fc:69:ce:2c:2c:19:92:60:73:
a6:8f:f8:58:bc:1c:36:25:f0:9f:9c:79:8d:29:00:
ca:78:63:40:44:bd:10:fc:75:e2:45:86:14:ff:04:
16:ea:72:17:d9:b2:f2:02:50:b9:46:c7:7c:39:78:
67:3d:46:df:b2:d6:53:69:5f:52:2d:97:21:37:17:
c5:35:1e:5c:4d:8e:0d:b5:4e:41:d3:f8:82:7e:d1:
36:97:cb:5f:5a:f3:57:3d:f9:88:ee:f3:85:a8:3a:
ce:58:f6:9a:8c:d2:1d:af:0b:de:9a:0e:54:f4:a8:
a5:a1:1d:a5:e3:c0:63:f1:84:c1:20:47:b4:7b:0f:
8e:09:b4:ad:48:0f:68:ee:b5:32:88:fe:57:fa:6c:
17:f1:4e:f4:59:c2:3c:53:75:d3:9e:86:1d:63:14:
e5:5b:ec:82:ae:25:4f:13:2f:2c:5d:d9:5f:15:c3:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:29:4A:CD:4F:98:B5:2A:55:51:D0:E0:80:E1:DB:29:E6:1C:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10aa39be-4f99-4b39-b428-f034a0b57d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:b000::/40
Signature Algorithm: sha256WithRSAEncryption
90:5b:78:ad:c2:44:9e:8a:0e:8c:73:35:96:a1:05:2c:47:44:
95:14:3e:f3:c5:dc:05:7c:d3:71:37:87:6f:ad:85:bc:11:11:
03:fb:bc:e2:9e:f5:5e:cf:f8:c5:ed:12:47:d6:e5:73:a4:3e:
4a:39:51:55:61:29:2f:d6:46:15:d4:5e:39:2d:f8:ce:ae:66:
e7:00:6a:7b:00:2d:e6:7d:cc:f3:4c:b4:25:d7:d4:8e:6d:da:
c1:a4:fc:ee:a7:3c:ed:cd:64:94:25:9c:16:9d:7c:8b:9d:93:
f0:a4:ed:86:8b:03:a1:5c:f3:3a:56:e0:19:e5:f5:b2:40:f1:
6d:2d:f7:48:74:fe:fd:01:5c:fb:73:2d:3f:d2:d9:1c:11:69:
e3:cc:b8:2a:10:b6:6f:eb:d4:96:02:23:27:5e:4d:49:54:4c:
5b:6f:4a:dc:9a:5c:a8:62:11:65:45:88:ee:0c:37:3b:50:59:
bf:d3:6c:4b:82:bf:29:ef:4e:44:c6:62:0a:19:e0:94:44:fe:
81:16:36:dd:40:36:f1:4c:c7:aa:75:86:d5:ac:fe:56:54:3f:
61:2b:42:ea:a6:88:a1:18:62:be:f3:13:3b:37:f4:51:f8:2e:
cc:23:ff:45:27:4d:ea:4f:da:b1:7b:19:97:21:fc:78:1a:3c:
ef:bb:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:41 2025 by rpki-client