Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: Up2B0g2VgFz1kElbWAgYPxbYp3w7u3b3E70ARQcbG1k=
Subject key identifier: 3C:D4:DF:A6:C4:9E:69:97:68:A5:00:C3:0C:30:B9:6B:4F:5A:CC:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 013F7D2C3B4B12E1EEFD988555AED44EEF516A06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Wed 05 Mar 2025 15:00:49 +0000
ROA not before: Wed 05 Mar 2025 15:00:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3f:7d:2c:3b:4b:12:e1:ee:fd:98:85:55:ae:d4:4e:ef:51:6a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:00:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:30:f4:c3:4d:5d:29:88:fd:89:f1:a2:98:
ca:80:bb:8b:b1:b9:e8:b5:5b:25:17:c9:08:da:12:
7c:01:01:85:54:60:23:41:b8:81:a1:ec:3c:1d:94:
af:06:b9:80:11:d1:f4:71:c1:c6:f4:20:75:93:35:
52:a3:20:f3:1a:65:6a:a7:82:51:a3:da:a4:90:38:
b8:03:86:51:c5:6d:35:0f:6c:61:98:fe:cd:d1:1e:
73:f6:2c:00:05:57:c3:ff:8a:01:3c:f1:63:f3:11:
fc:0e:01:bc:28:c3:06:61:33:fa:9a:3d:db:3f:f5:
7b:22:b7:73:08:fb:e5:a1:d6:17:db:b0:31:85:77:
3a:32:1c:f9:5b:98:e8:ae:00:f9:21:86:40:9d:34:
c6:43:47:53:94:89:1d:f6:21:5e:d6:ba:17:0c:69:
94:61:e2:f7:86:d2:8b:cc:18:72:1f:75:7a:7b:90:
aa:aa:55:18:23:4d:84:07:66:68:1f:5c:8b:d0:8b:
b0:5c:33:3d:cf:97:21:0c:d1:71:b7:6c:cb:4f:0c:
c8:15:5f:b1:40:06:19:14:38:d5:5a:db:4b:1d:23:
22:f4:18:ce:a0:69:5a:7b:31:c2:01:45:ae:13:fd:
07:0d:fc:1f:5a:77:ab:0b:cc:91:c4:7f:fd:d1:69:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D4:DF:A6:C4:9E:69:97:68:A5:00:C3:0C:30:B9:6B:4F:5A:CC:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:9b:b9:f1:ad:70:e2:8c:39:9f:21:f4:51:01:b0:bd:b0:88:
15:a4:b5:7d:1b:d9:c8:40:27:2b:10:23:1b:5d:9d:03:93:56:
16:71:d6:ab:fa:76:6d:24:61:5a:74:2b:15:f2:77:55:3b:1a:
d9:bd:52:f2:5c:e5:96:97:19:e2:90:e7:76:94:c8:8a:64:59:
48:8b:a3:a0:71:a6:b9:65:97:88:79:53:aa:64:24:54:49:f8:
f9:af:d6:39:a5:dc:0e:fa:fe:29:f8:87:22:b3:c5:b4:ff:c8:
96:70:e6:d8:63:34:52:ee:6c:78:48:bb:75:c0:2d:cb:68:fc:
ea:dc:6d:e0:a6:04:3c:a7:b5:d0:cf:50:99:72:13:43:67:4f:
3d:ca:c6:e5:90:cb:ba:5b:b8:ed:8a:74:3e:71:f6:5a:82:16:
8f:08:90:d0:fc:97:c4:b9:ac:f7:f8:40:fb:bb:e3:8c:6d:a1:
fc:08:b0:6e:16:d8:c8:9d:dd:c7:7a:51:91:05:0d:65:81:01:
f6:ba:2a:30:5b:bb:3b:dd:32:6d:80:c7:40:db:40:52:25:ac:
63:35:78:f4:fb:bc:77:a1:d2:79:90:4c:c8:63:7a:cc:52:d2:
50:e7:67:36:f8:4b:43:93:54:df:77:69:69:d0:ef:0f:0e:40:
91:c9:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:54 2025 by rpki-client