Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ecc8db5-41b6-42fc-9e2e-98540aadd80f.roa
File: 1ecc8db5-41b6-42fc-9e2e-98540aadd80f.roa (raw, json)
Hash identifier: S9KMyi4tAkY/oZuwlDCgP00w1xOxxQ5Xhl16/YCCGCY=
Subject key identifier: 77:B0:97:C9:D4:CD:BD:1B:87:E0:4A:0B:B1:E1:09:10:2D:14:D5:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E587FC39CDCE179B1027950A591D7854D9CB520
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ecc8db5-41b6-42fc-9e2e-98540aadd80f.roa
Signing time: Wed 05 Mar 2025 15:11:08 +0000
ROA not before: Wed 05 Mar 2025 15:11:08 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:58:7f:c3:9c:dc:e1:79:b1:02:79:50:a5:91:d7:85:4d:9c:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:11:08 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:f2:2b:94:f7:d8:00:a2:9c:7f:25:bc:b2:
7f:0f:20:51:c1:12:d6:e8:b1:00:0a:51:78:26:c3:
09:75:d1:33:21:01:9e:36:a9:bb:74:56:66:7e:4e:
2d:87:1d:fb:8e:4c:2e:50:4c:bf:d0:64:97:98:52:
ea:db:96:a6:b1:da:20:81:80:64:a3:40:67:37:78:
68:2e:e7:5a:a8:ad:33:f3:4b:ab:d4:8a:73:70:3b:
97:54:fc:34:3b:09:60:88:39:bc:ee:0a:71:df:1f:
70:43:95:f0:58:ce:3a:d6:f5:01:83:15:80:53:23:
b0:fe:c5:b8:32:83:4c:ca:45:cb:bb:af:87:97:f6:
d1:89:59:da:a9:bf:2c:95:b8:ba:dc:c1:71:cb:e2:
f3:20:72:24:42:51:e3:e0:94:de:64:d9:3e:aa:47:
a9:17:81:28:c7:42:8f:f8:01:9a:e6:fe:f8:95:ee:
03:39:09:45:76:22:e2:dd:e4:66:ec:46:d4:7c:3f:
17:28:3a:20:74:bf:cb:a8:88:95:79:19:05:69:56:
51:89:0b:05:89:7d:1e:14:d7:f0:07:de:d8:cf:ba:
8f:c5:8f:67:c7:b9:44:2d:1a:8f:ea:e3:65:b3:df:
9e:c8:2c:4e:fa:81:58:3a:1e:d0:f2:87:67:8b:a6:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:97:C9:D4:CD:BD:1B:87:E0:4A:0B:B1:E1:09:10:2D:14:D5:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ecc8db5-41b6-42fc-9e2e-98540aadd80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c080::/48
Signature Algorithm: sha256WithRSAEncryption
45:43:a4:dd:08:d2:f9:ff:1b:25:9a:89:62:f1:f0:b1:8d:51:
a1:05:9d:c1:7a:99:c0:1e:50:36:96:fa:22:de:42:48:8d:57:
42:fa:af:d1:ee:80:a2:7a:d9:f5:62:c2:a7:cb:60:0d:3a:b0:
c1:96:7b:09:94:81:a9:3a:08:03:48:18:9b:30:29:a2:99:c1:
65:64:9d:a0:1a:fe:38:ce:83:f9:4a:a5:35:e2:c2:ef:b9:8c:
11:fe:0f:08:fc:de:a8:ce:4b:4b:90:a4:21:3b:9a:52:7a:01:
fc:e1:93:21:97:16:9a:96:c3:f8:7d:19:11:c8:28:71:e8:e5:
70:85:51:e8:ff:b3:74:f2:3c:00:fa:0f:a0:60:51:a6:42:d7:
2d:ea:6f:06:33:84:ce:a0:0c:2c:84:85:03:67:c5:49:c6:bb:
b0:26:69:a4:1d:09:42:4e:2f:f5:82:92:7c:89:45:0b:58:31:
9c:4d:40:2f:0b:f7:33:df:5e:b6:63:d8:3c:88:7b:9a:54:41:
d4:24:f4:aa:ab:c8:8a:fb:1f:4f:c5:a4:fc:e2:a3:21:4c:7c:
58:82:a6:af:a1:30:01:fa:87:a0:86:4b:f3:6b:79:39:5e:1b:
c4:84:05:17:1c:a7:ab:f7:39:a8:75:d0:a2:df:2f:91:cd:cd:
e1:01:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:34 2025 by rpki-client