Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
File: 15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa (raw, json)
Hash identifier: 8VWtyFbG2QtGLrzsUAACulczPwl+J+5YmQxSDExZfaM=
Subject key identifier: 2B:42:92:91:6E:87:10:77:56:F3:2D:56:77:0D:E1:3B:A6:BC:45:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FA39A59F2FFC5D28A5D59EBFA752673DEE7D978
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
Signing time: Wed 05 Mar 2025 16:00:44 +0000
ROA not before: Wed 05 Mar 2025 16:00:44 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a3:9a:59:f2:ff:c5:d2:8a:5d:59:eb:fa:75:26:73:de:e7:d9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:00:44 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:a6:66:dc:54:3d:65:cd:33:1a:66:ed:fc:
97:ad:f7:53:bd:dc:d3:79:18:4e:88:1d:35:8d:54:
7b:3f:38:12:9b:4f:0f:97:5b:c7:04:e3:4e:86:fe:
85:8f:ff:04:91:61:e9:ac:ea:48:eb:98:41:84:1f:
8d:8d:9a:78:be:ac:a6:41:4b:fa:4d:63:15:8b:2b:
42:5c:b5:c5:98:d7:f9:97:99:88:37:51:03:26:40:
ce:e6:0c:13:70:a4:18:46:f7:0b:d8:02:26:22:cd:
50:c3:16:02:70:c6:7a:ba:ba:ff:66:ea:ce:bf:e2:
8c:89:b2:6c:2b:30:e1:d8:f9:6d:cd:77:5a:03:7c:
c8:67:72:e3:d5:72:c8:7e:ac:df:0e:60:88:5f:48:
a4:a6:34:d0:03:f3:fd:ac:17:26:e8:69:60:ef:54:
65:d8:19:35:08:54:91:81:05:b2:97:51:ea:01:fb:
79:15:f3:26:5c:d7:41:72:57:da:61:45:6e:f3:a6:
25:c8:12:b4:af:dd:4b:31:2e:19:96:55:39:a4:91:
fd:5f:cc:f1:80:1c:36:ea:a9:dc:7a:f4:34:65:d9:
90:17:3f:cd:88:08:4d:eb:44:76:9c:49:22:8c:e8:
b4:c4:f6:c4:23:ce:f0:fe:40:23:94:ff:fa:ef:c7:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:92:91:6E:87:10:77:56:F3:2D:56:77:0D:E1:3B:A6:BC:45:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
21:02:40:59:54:54:0e:38:3d:5e:16:3f:70:16:88:86:10:b3:
1b:af:41:c8:50:43:af:73:8d:c7:08:e9:3d:3f:a2:79:f1:86:
fa:74:e4:63:e5:7e:07:49:51:58:24:b9:c8:65:aa:da:ab:5d:
fe:44:d9:29:f7:04:2e:96:8a:65:78:c0:43:21:d1:ee:58:b7:
4b:65:29:b6:4d:8c:06:da:6b:f0:65:e9:8f:0f:78:a7:c9:60:
73:b4:7b:de:d6:7a:74:c3:fe:76:b1:72:5f:c4:cb:22:61:02:
2d:92:a8:ba:16:0b:14:f4:61:90:5d:06:f6:50:d4:e6:f8:f9:
e2:99:38:b1:49:01:ae:f1:ab:13:24:09:9b:67:fa:78:22:03:
6f:cd:ed:7a:ab:c3:44:17:64:f5:b4:3a:f9:8b:2c:cd:df:63:
b6:76:f6:00:6d:0d:72:51:ce:b3:01:48:2d:39:36:e2:73:a1:
51:6b:71:df:09:97:42:ea:20:16:e9:eb:71:93:cf:d8:28:e0:
19:c5:d2:cd:f1:48:77:04:cd:67:99:23:fc:f8:7f:14:ea:95:
84:63:5b:1d:13:65:cf:c3:4a:cd:58:e5:63:52:ef:39:02:02:
5a:6f:bb:9a:0c:9f:fc:fb:29:4a:e0:84:f2:43:e9:41:5d:a5:
f1:18:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:35 2025 by rpki-client