Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
File: 2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa (raw, json)
Hash identifier: N0x7GOnN8lHa4Ak7oHXCa+H4SUSrHfD0DOJdEnInO4M=
Subject key identifier: AA:1C:E8:FB:6A:C4:4F:AE:0A:DB:0D:B2:67:76:16:1C:D6:64:93:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C21C408398C1F0AC8F21F538E092CCE31973630
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
Signing time: Wed 05 Mar 2025 16:11:06 +0000
ROA not before: Wed 05 Mar 2025 16:11:06 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:21:c4:08:39:8c:1f:0a:c8:f2:1f:53:8e:09:2c:ce:31:97:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:11:06 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:7b:8d:45:68:f4:4f:fd:0b:70:9c:24:e5:
41:7b:80:f6:49:4e:f3:6e:f8:13:6f:bf:6e:66:fa:
05:44:d7:c2:50:9b:af:20:e3:d8:fb:3e:56:1c:05:
93:06:94:b7:ab:22:1c:65:94:ed:79:40:08:83:4e:
50:24:cd:0a:66:28:b1:96:b3:a8:b1:64:d9:9a:9e:
c5:88:f6:03:44:06:cf:ee:9e:e5:1d:b2:78:69:f4:
7a:af:16:fc:56:51:00:07:bc:8a:80:89:41:0a:a2:
e6:84:3a:ab:9c:f6:d7:1d:6a:78:ef:c6:08:d0:9d:
3e:4b:29:4e:50:a1:6e:3f:0f:52:be:a1:49:87:b1:
08:fe:6b:53:57:ca:78:58:96:51:b7:0b:da:60:49:
f7:1d:08:01:3a:7c:f9:45:50:aa:4a:d0:1f:71:8e:
72:b9:44:8c:22:eb:a6:1c:24:d9:fd:78:97:ff:18:
5d:cb:53:79:20:60:f0:b3:6e:5b:f3:5f:e5:a4:64:
8f:22:35:96:73:75:9d:3d:52:37:2c:b6:09:86:3e:
6a:22:15:15:97:a0:3e:37:aa:85:81:0c:c3:62:5d:
a0:6b:b9:63:d2:d9:cd:90:63:cb:06:6d:d6:7b:38:
fe:43:6d:91:87:f9:c1:98:f7:ae:65:4d:80:aa:0f:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:E8:FB:6A:C4:4F:AE:0A:DB:0D:B2:67:76:16:1C:D6:64:93:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1080::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f8:98:e6:91:ad:9d:6e:59:0a:48:52:c5:0a:aa:f3:b7:45:
64:4d:5c:68:cb:2d:b1:db:ce:a0:ad:52:4d:14:3c:d9:45:a4:
41:58:9c:03:92:79:86:0b:d6:f8:79:08:32:69:6a:bc:c8:e1:
72:57:91:d1:4f:65:ec:a2:95:84:4d:67:77:07:a6:e7:8b:c2:
ac:98:06:31:98:38:f2:25:c9:a6:a2:c0:92:34:1c:c8:0c:a4:
3b:19:d0:1a:a7:83:c0:c9:fb:a7:6a:d9:12:ec:8e:23:78:d2:
10:af:d4:7e:07:cf:54:27:b6:2f:d8:dc:f4:f0:f9:f5:1e:45:
2d:aa:03:a4:3d:9c:f3:74:e5:ff:10:2b:46:c2:49:c3:2f:55:
1c:70:17:ed:11:b2:a7:88:25:97:5d:22:d1:2c:e1:59:55:84:
6f:aa:60:3b:e4:76:1d:88:3c:fd:d9:1a:bf:5b:5d:3f:19:6a:
ea:5c:00:fb:9a:86:81:e3:55:12:d9:0b:3e:f0:8a:bb:fd:78:
f6:a3:b7:c0:95:08:91:de:c0:a9:d2:62:ab:30:94:b2:e7:f0:
af:e3:bd:68:e7:09:a3:8a:f6:25:93:1f:96:94:dd:87:90:40:
30:60:b8:28:e8:fe:c8:39:e5:cd:23:30:30:af:c6:de:b4:2e:
f3:52:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:14 2025 by rpki-client