Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json)
Hash identifier: YcwxFrbLPyT55HIDN9rX8fZyNHkamb0Zql6oCQ/4Wmc=
Subject key identifier: BD:C5:81:93:23:41:29:2C:20:D6:D3:B5:6C:40:87:1B:16:E9:0F:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03DDC8F7391E8E7F57937F3447AC3B2F6DDCE646
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
Signing time: Wed 05 Mar 2025 17:31:04 +0000
ROA not before: Wed 05 Mar 2025 17:31:04 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:dd:c8:f7:39:1e:8e:7f:57:93:7f:34:47:ac:3b:2f:6d:dc:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:04 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:e8:cd:f6:2f:c6:48:3a:f7:b9:b0:a2:df:
b3:d4:25:02:69:39:7f:bd:d7:c0:a8:0e:24:0a:20:
8c:2a:5a:11:d4:e4:89:2e:36:ab:77:96:38:1f:b7:
ff:66:a8:0d:6e:c8:cb:3a:ca:f8:fa:56:fe:3c:5e:
7b:63:7b:4a:87:3e:ad:bc:e6:b1:cc:7d:e9:62:a6:
07:3a:ce:54:19:8f:ab:6a:f2:44:f2:73:28:fe:01:
1d:34:bb:11:f7:e8:38:25:32:dc:78:ad:48:3d:92:
c8:71:1c:b7:61:7b:c5:d2:54:09:52:77:01:ce:e1:
11:5d:0b:53:22:ab:03:2a:3b:2d:09:a6:ff:f8:85:
ba:2d:37:b4:81:2c:4c:4f:3e:2f:c0:fa:37:1f:4b:
78:77:24:cf:3c:1b:41:43:42:06:ac:c0:85:d7:c9:
08:73:6f:61:54:2e:e8:91:e0:cf:e8:dc:10:64:c6:
36:22:f0:4d:f8:bc:41:dc:e9:43:8b:f8:3e:4e:32:
6a:10:fd:57:5f:c0:c7:84:b9:49:da:c0:20:e2:5a:
dc:8f:71:b9:34:68:8c:f7:65:f0:de:1d:98:93:7e:
b0:5d:4c:d0:84:a5:7d:2a:fd:3e:69:89:74:59:5b:
c2:2c:2c:e9:4f:13:fc:4c:1c:c2:1a:93:8d:bd:19:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:81:93:23:41:29:2C:20:D6:D3:B5:6C:40:87:1B:16:E9:0F:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
39:18:93:c4:4d:f1:58:bf:42:77:52:45:91:7b:40:2b:15:91:
88:6f:5e:06:0d:98:3c:56:4d:9c:36:cc:c3:fc:a5:9e:71:76:
2a:94:1f:10:3a:01:c1:1a:7f:1c:6d:01:27:df:76:59:ab:f7:
56:44:54:0f:b1:fd:a6:b4:8f:45:5a:b6:6c:26:da:60:b2:25:
9b:9d:07:f7:b4:ae:37:25:5d:b9:bc:ae:24:7f:bd:fd:3e:77:
c8:e5:ed:4b:6e:98:62:38:f4:40:59:23:2c:ba:a0:eb:99:bf:
3f:2f:0b:ff:da:b1:e2:bc:9e:3e:5d:ba:ea:0b:f6:73:43:1e:
42:18:af:93:29:29:7b:2b:86:cf:11:0f:be:4c:9d:06:4f:70:
77:cb:41:d0:fe:bf:36:7c:83:9d:6d:0b:ba:db:79:82:4c:7f:
86:0f:2b:a1:44:1d:46:24:b0:19:a3:cb:85:c4:65:e0:90:86:
cc:16:86:be:f8:c1:42:c1:76:bf:0a:21:df:b7:9e:18:e6:80:
92:30:ef:db:9c:22:fa:49:f7:72:99:1f:b4:1b:8b:09:25:08:
81:8a:bd:cd:4e:38:f4:52:c4:ce:b3:63:c9:eb:71:f6:e7:dc:
9f:49:ef:56:46:3c:9e:9a:b2:08:1a:d6:bb:a6:0f:64:78:6e:
f8:90:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:10 2025 by rpki-client