Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
File: 15a3a252-e83b-4245-9585-281ac1a7eb4a.roa (raw, json)
Hash identifier: OcAD/idKkiOhmh2+YDap4l9aTFhX/cyPX6bsoUbYnmg=
Subject key identifier: 27:51:4F:9B:F5:04:BC:38:BA:8D:01:B5:E6:AA:38:01:EE:39:01:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44813234E508203464C06336EDC3F70BE7311F33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
Signing time: Wed 05 Mar 2025 16:10:56 +0000
ROA not before: Wed 05 Mar 2025 16:10:56 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:81:32:34:e5:08:20:34:64:c0:63:36:ed:c3:f7:0b:e7:31:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:10:56 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:06:a3:67:4d:37:1b:75:d4:6d:a1:99:98:
83:e8:98:90:c1:e9:c6:ed:08:0e:f6:ce:0a:39:15:
e5:d4:e8:d4:26:99:8e:e4:f2:4c:e6:f6:6d:f6:05:
24:cf:b7:65:10:d6:e8:04:20:ca:45:bd:6e:02:ea:
7b:dd:c0:0a:20:47:66:2e:51:3a:a4:de:80:a6:b6:
bf:f8:2a:74:2b:12:0e:c9:e6:b7:a7:67:49:73:8a:
db:9c:9b:ac:e8:1b:1c:6b:09:55:c0:04:9d:d2:fd:
b6:37:94:07:f0:dc:40:cd:a9:50:86:a8:be:55:e2:
02:db:ae:f2:98:1c:90:3c:a1:7c:38:d4:b3:5f:db:
c1:34:c0:55:67:3b:25:9d:bc:be:ca:19:96:2c:b3:
2d:e5:22:65:2f:b4:d1:9f:01:d7:d8:26:ee:08:16:
3a:07:1d:0d:fb:4f:3d:b2:e9:e5:56:d3:c8:a1:ea:
f6:9f:56:47:25:7b:f7:10:ef:fd:72:c0:9d:a0:7a:
f7:31:b4:1e:46:9b:8b:6a:8a:74:b7:2c:5c:01:cf:
8e:2e:0f:a9:61:74:ab:04:6b:51:1c:6f:38:83:36:
e7:c9:2f:47:7a:28:be:8d:32:b5:f8:8d:3e:3c:87:
ad:dc:84:35:e4:0b:4a:ff:ba:bc:d1:43:6c:ed:83:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:4F:9B:F5:04:BC:38:BA:8D:01:B5:E6:AA:38:01:EE:39:01:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:53:eb:13:85:61:f0:a1:4b:73:08:c8:e3:fd:70:f1:c9:22:
05:bd:17:ea:d6:67:7d:22:f8:e3:85:66:a1:de:d1:b2:4b:0a:
01:cc:80:c0:c0:22:e5:74:67:ea:e7:e5:fb:61:18:2b:81:02:
3a:b6:01:59:a6:dd:e5:8a:62:5e:59:21:c0:97:57:4f:e5:68:
0a:60:3d:7e:0d:f1:af:43:eb:5f:ab:34:e3:4a:ab:7d:7c:e9:
c0:2d:69:a2:e8:b8:b6:a6:42:49:93:c4:31:3c:4b:6a:db:df:
b4:82:27:1d:a8:a8:9b:19:2c:19:bc:ef:08:fe:9b:3a:c6:d8:
c7:19:bf:74:56:0f:d1:53:61:40:eb:75:a4:71:30:a3:68:b3:
60:27:77:3b:65:ca:49:05:2a:ba:f2:bd:78:3c:5d:09:12:4c:
02:59:12:c9:64:ee:32:cc:d6:49:79:28:70:6f:f6:9f:9e:7d:
d1:5b:64:5d:8d:ab:9b:9b:f0:56:0c:78:c6:1e:af:32:cd:f7:
67:9a:ed:17:52:5f:cb:14:77:fc:8e:b4:92:7b:8f:c9:67:1c:
a0:7d:7b:ad:1b:c6:3d:60:34:80:d0:c0:f7:0e:f7:6f:f1:c2:
ee:3f:76:8e:2e:a0:1d:1a:37:e0:ac:b1:59:07:38:11:19:29:
85:2b:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:16 2025 by rpki-client