Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
File: 2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa (raw, json)
Hash identifier: A4GtSnT+DDfOn9ZRdyALIEi1MvXCkaaE84DalelQMBo=
Subject key identifier: EF:8F:32:1E:D7:FA:EC:72:83:0B:DA:A9:27:38:39:CB:6C:9F:C6:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53C94C33CF246D06A1E289667D388377D12D767F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
Signing time: Wed 05 Mar 2025 17:41:14 +0000
ROA not before: Wed 05 Mar 2025 17:41:14 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c9:4c:33:cf:24:6d:06:a1:e2:89:66:7d:38:83:77:d1:2d:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:14 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:9f:ee:c1:fe:b5:1a:d1:6e:e7:85:c8:2b:
f1:97:f5:22:fe:2e:27:c1:07:bb:18:a4:fd:30:a3:
03:61:30:f1:ad:d5:ce:8e:c9:24:2e:77:d1:7d:de:
bb:28:f0:52:3e:ab:4a:0f:19:49:c1:a6:e9:ac:1c:
16:b3:34:d4:a9:89:ee:58:bc:0a:be:de:ea:58:ea:
65:8b:a1:d2:f9:dd:43:59:f2:6a:27:49:76:5b:47:
af:cb:06:8a:31:26:17:47:15:f9:60:a0:87:28:dc:
e9:7c:14:90:52:f4:21:ff:8a:8f:51:f6:7a:03:16:
be:9a:9a:e7:28:15:b0:32:a0:93:1e:ee:f9:d5:cb:
83:d6:69:3a:6c:1e:ad:6b:9b:04:f3:04:2e:4f:f5:
43:f0:4a:d1:27:de:a5:57:a2:97:9b:cb:72:66:63:
bd:70:83:e9:e9:d7:ea:82:54:ed:63:ba:68:f5:6c:
a1:9e:f4:d7:b6:6f:10:06:df:cf:d5:c2:e8:c8:ab:
88:82:7e:13:be:9b:72:ee:41:8d:16:49:f8:c6:18:
ef:8e:89:40:0d:95:c9:ad:66:68:ee:0c:af:31:8c:
1b:af:34:7f:4e:e7:30:72:54:d0:4f:65:0e:6b:66:
a5:0d:06:4d:05:d6:8a:31:f5:f0:38:2a:d8:85:4f:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:32:1E:D7:FA:EC:72:83:0B:DA:A9:27:38:39:CB:6C:9F:C6:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/35
Signature Algorithm: sha256WithRSAEncryption
62:51:d9:84:9e:bf:8f:00:b7:f8:28:3e:0d:88:71:96:f5:80:
88:17:0a:2d:c8:33:d5:22:fe:fb:ef:fa:06:1b:d7:6d:ad:8a:
68:b2:85:bd:d0:11:43:87:60:3e:37:55:d0:08:ce:d6:5b:87:
3f:77:19:8d:6b:01:35:78:7b:ef:4c:cb:62:7c:03:13:dd:ce:
f9:24:13:21:78:e3:c5:7d:79:c4:c8:94:59:0a:75:ee:90:b7:
b5:9f:29:c5:a2:4a:85:41:a9:3e:4c:30:6c:cd:75:09:29:35:
d1:43:52:b9:1b:0a:d7:f3:6a:d0:e0:c9:5c:d1:6b:03:5b:03:
fc:a5:51:86:a0:5e:24:26:ee:07:70:f9:9f:bc:aa:a5:46:13:
57:cd:76:ce:4d:81:e2:05:e0:d8:10:25:f0:2b:8f:a7:ec:1f:
2b:f2:d2:81:4b:e0:c1:da:fc:af:c8:ff:b5:13:65:50:69:79:
14:b1:7f:e3:00:be:c0:15:f8:c9:a2:66:80:01:f0:47:8d:32:
10:b8:57:c1:b3:01:06:8b:c8:37:70:bb:d3:e9:a5:61:f5:82:
c2:5c:69:00:0e:98:55:62:e5:8f:11:2c:14:dc:a4:f5:c2:76:
63:e8:3e:6e:6c:c6:30:8c:51:ce:28:6d:75:5c:93:03:5e:85:
f2:e5:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:28 2025 by rpki-client