Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1214f6bc-ac91-4e1b-ac85-14db120d0303.roa
File: 1214f6bc-ac91-4e1b-ac85-14db120d0303.roa (raw, json)
Hash identifier: v8VHgId0K1vLCxKkkkHAk16f9XW12w1g/ur9owbzBXE=
Subject key identifier: EA:7F:64:C2:2D:EF:14:DB:69:2B:9C:7D:62:CD:7D:F5:87:21:E6:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3786C9553C9614738AA9C973EC015C3601F37910
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1214f6bc-ac91-4e1b-ac85-14db120d0303.roa
Signing time: Wed 05 Mar 2025 15:30:55 +0000
ROA not before: Wed 05 Mar 2025 15:30:55 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:86:c9:55:3c:96:14:73:8a:a9:c9:73:ec:01:5c:36:01:f3:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:30:55 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:87:c8:f4:b9:93:1b:d9:34:3e:95:11:a9:
52:70:60:be:aa:70:42:ec:99:36:64:9a:b4:e9:b5:
f9:3c:b5:c7:ca:44:ce:28:7f:64:6f:db:34:37:d3:
5c:46:60:ff:10:35:b1:c0:fd:22:58:c0:dd:ea:1d:
b7:94:c2:68:3f:13:8f:ff:a9:74:27:b8:ad:62:dd:
cc:c8:ca:9b:9b:c9:18:a1:b4:a3:70:0f:2c:74:24:
49:5b:1d:f8:14:c5:ba:46:db:40:9b:c6:9b:7b:ac:
8b:16:61:54:7b:3f:b9:8f:4e:d6:64:a8:58:fe:a0:
1a:d4:17:91:d0:4f:21:2f:c8:82:a3:37:b7:a7:79:
38:6b:cf:f9:38:3e:2d:d3:8a:b3:17:dd:d2:25:6d:
3f:91:bb:dc:b4:b1:d2:ed:26:e7:a5:d5:ef:71:b1:
2f:5f:0c:30:44:97:a7:e3:78:04:48:ea:70:f6:1e:
fe:2e:95:bf:81:2b:28:29:74:0c:4e:ce:2d:d6:ef:
56:5f:70:a6:ef:2e:a8:16:50:97:5b:1a:4b:27:e6:
59:ce:57:30:a7:27:5b:dd:79:7d:44:30:9f:34:24:
63:f2:fd:93:17:a9:29:d4:c4:6b:00:a7:c0:87:44:
62:04:0a:df:0a:07:1b:50:b6:f0:63:71:6a:3b:1e:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:64:C2:2D:EF:14:DB:69:2B:9C:7D:62:CD:7D:F5:87:21:E6:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1214f6bc-ac91-4e1b-ac85-14db120d0303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a080::/48
Signature Algorithm: sha256WithRSAEncryption
b1:91:4e:9b:76:46:8b:d4:51:a5:52:45:5d:44:7c:f0:8b:ce:
0c:38:27:4a:7c:83:95:64:6b:2a:c4:60:00:5a:42:5e:c3:1e:
df:79:cc:d3:d5:18:5e:35:cb:58:14:d6:ae:33:d8:fc:74:d7:
bc:87:0f:7b:cf:53:f8:3b:c9:cf:90:54:c2:0b:58:64:0e:e5:
3d:7e:8f:d3:ab:b5:cb:3f:b9:b6:4a:dc:7a:1d:24:9a:10:67:
cd:7b:45:91:2a:aa:47:0b:a3:b2:42:40:e9:b4:de:a3:26:f7:
95:cc:f4:e1:31:4a:d4:cf:6b:b9:d2:75:15:af:58:c5:f1:16:
78:2f:50:7f:03:cd:49:dc:6c:a6:88:34:c0:02:8a:76:7b:b6:
a9:1a:5a:9e:fe:0a:0b:e7:72:1e:d5:92:ba:86:24:4a:6c:8d:
08:67:d3:5f:55:e4:54:b3:75:9f:f2:09:7f:58:56:51:e8:cf:
65:64:3c:bf:ef:68:0a:44:a3:c3:dd:44:31:8a:20:c1:51:f5:
82:85:8e:e0:96:f6:bf:12:ba:96:23:cf:24:5f:37:cb:f5:d0:
41:35:b3:1f:3b:da:53:4d:c7:d2:8f:f1:ae:0f:0a:9b:3c:f6:
7b:b5:8e:f0:11:f4:49:25:2e:6f:8e:6a:77:8e:4e:7c:e2:f5:
fc:5b:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:04 2025 by rpki-client