Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
File: 238151b8-1527-4e3f-a1d3-da02d03534a8.roa (raw, json)
Hash identifier: p4vrignnQsTj/fcqQlOR10hOSAQObWvTh9Ndd0kpO2M=
Subject key identifier: 92:90:7C:FA:64:F3:74:D2:67:2A:31:B0:10:6C:50:11:6D:0C:03:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 524027FD726DC175E2A617D71AE450B0846C7405
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
Signing time: Wed 05 Mar 2025 16:20:08 +0000
ROA not before: Wed 05 Mar 2025 16:20:08 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:40:27:fd:72:6d:c1:75:e2:a6:17:d7:1a:e4:50:b0:84:6c:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:20:08 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:cf:30:e8:e7:51:45:54:a7:10:75:83:ca:
ae:fe:aa:4b:a6:e9:6d:fd:06:44:ec:50:59:48:9a:
ea:dd:12:bd:14:2a:30:c0:6e:b2:57:78:aa:a8:3f:
7f:78:8a:d9:55:62:af:0c:79:dc:27:9e:36:fe:75:
dc:64:4f:86:91:5f:68:25:4c:76:02:f1:a8:58:a2:
2a:54:a9:dd:6f:d0:cb:5a:fe:6a:35:ce:d6:0e:dd:
17:47:68:f5:e7:21:bf:a6:f6:e4:d2:a3:67:c3:ba:
4c:48:4b:2a:ad:c0:fa:74:a0:15:96:78:aa:c4:9d:
bf:78:82:f3:1b:0c:00:ba:69:f8:b4:75:b2:25:50:
af:ea:e4:e9:ce:96:1c:e8:2e:4f:33:25:bd:28:02:
44:75:45:be:31:f9:b2:1f:5f:48:ef:c1:c3:38:b9:
92:ea:5e:03:b4:d3:ed:3c:f4:c1:13:95:79:c5:63:
21:59:fb:c5:57:af:af:8c:1f:81:b0:4f:c1:bf:a4:
01:b8:f0:4a:8e:9b:59:4d:93:cd:7b:38:55:9a:e4:
2c:c9:cc:a3:34:82:88:15:8d:c5:5c:44:d7:e2:d7:
f3:2c:be:28:5e:15:4a:79:6c:b5:a3:d4:2a:82:59:
01:a8:f7:8b:07:9e:bb:fe:43:a1:2e:32:31:ef:8c:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:7C:FA:64:F3:74:D2:67:2A:31:B0:10:6C:50:11:6D:0C:03:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/238151b8-1527-4e3f-a1d3-da02d03534a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
5d:33:cc:24:88:49:7e:86:cc:fe:06:ce:c3:42:63:fb:e3:81:
02:df:39:2c:ba:69:90:4c:73:98:c1:74:2e:07:0f:5f:8b:4e:
c1:5d:94:8f:85:29:17:e7:88:b3:2b:fe:14:7b:32:e4:b6:27:
56:a3:bb:62:b2:6f:0c:f7:92:a6:51:03:17:3c:14:40:96:fe:
10:5a:78:09:cd:32:d4:94:a3:4e:6d:3c:f9:db:f2:ca:aa:e7:
bd:c0:07:b2:0b:53:2c:90:08:8d:d9:b3:2d:2c:a1:a7:e0:f0:
29:1a:c1:ff:b3:cc:1b:a4:14:be:36:66:c7:53:8e:d5:0f:85:
1a:a3:fa:6f:c9:f8:a2:05:cb:3d:79:e0:0f:bd:a8:d5:d5:df:
a0:a1:9d:ec:8f:f8:0e:86:e5:8a:c4:75:ab:c3:4d:30:24:77:
f4:d5:d9:04:b3:dc:cd:fc:bf:10:22:93:e1:47:cb:e2:eb:7e:
93:49:37:ce:0d:e1:c4:5d:2a:94:81:5f:3b:29:b2:e7:87:a7:
9f:b7:4b:22:c6:7f:a2:99:c5:da:1b:1a:a1:35:3b:37:04:9d:
61:03:1f:b9:5e:13:6b:72:8f:31:35:c2:a5:46:01:90:b4:a0:
67:f7:7a:e6:ae:17:bd:14:93:3b:f1:84:f5:f1:31:67:27:9e:
8f:13:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:22 2025 by rpki-client