Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cbc7f13-5b0c-4d20-904d-f526feedb7c7.roa
File: 2cbc7f13-5b0c-4d20-904d-f526feedb7c7.roa (raw, json)
Hash identifier: XyK5KMNPHJxTMqQ6wR6FqQfFzc9wvWlNwY/HToApZko=
Subject key identifier: 99:F0:01:FB:8F:8D:B6:48:7E:95:FC:78:A9:9A:F6:41:AA:A3:76:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: D6EE9E70ADA9B578488FE9802CB0B225C84890
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cbc7f13-5b0c-4d20-904d-f526feedb7c7.roa
Signing time: Wed 05 Mar 2025 17:01:03 +0000
ROA not before: Wed 05 Mar 2025 17:01:03 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:50c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d6:ee:9e:70:ad:a9:b5:78:48:8f:e9:80:2c:b0:b2:25:c8:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:03 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:ae:74:29:ef:84:9d:92:91:75:fe:76:ca:
4f:54:35:bf:54:f9:56:ce:5b:6f:02:24:ca:32:e8:
c5:08:b3:19:2a:d5:5f:53:f4:ff:19:20:89:b4:7f:
eb:89:64:36:a4:a5:71:b0:72:4e:5a:bb:3c:b8:88:
6a:6e:c8:17:7f:c5:8d:96:fc:e3:37:2f:41:7a:52:
6d:37:19:e1:c8:2a:e3:05:e9:ca:89:5c:df:3f:d5:
ca:1d:34:ce:ac:ed:cc:b5:da:cc:b7:61:35:f4:28:
66:a1:a3:8e:bf:1b:0f:a5:f7:84:cd:44:0b:0c:6f:
b0:a7:8b:83:9a:0b:cf:0e:a4:7e:92:3b:4c:1a:1e:
97:a1:83:84:61:ee:5d:b8:af:28:d4:24:9a:7e:ef:
4b:e1:f5:4f:65:6c:ff:7d:15:1b:2e:fa:5e:6a:40:
b7:5d:78:bd:1b:72:4a:97:69:41:07:06:42:3e:15:
c8:ea:ff:4a:a7:af:7c:38:e9:95:37:b1:c5:c2:9b:
63:ee:39:a1:c8:11:91:ca:0f:14:83:2e:3b:60:3f:
14:ff:e5:66:d7:65:df:d4:f2:bb:59:af:80:87:36:
63:3d:7d:8d:44:72:8d:f7:8e:cd:d7:72:6b:24:f3:
da:2a:c6:d9:03:6c:f8:f3:6a:20:d2:23:69:15:b7:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:01:FB:8F:8D:B6:48:7E:95:FC:78:A9:9A:F6:41:AA:A3:76:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2cbc7f13-5b0c-4d20-904d-f526feedb7c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:50c0::/46
Signature Algorithm: sha256WithRSAEncryption
94:a0:14:12:ce:78:70:e1:5e:74:df:2b:19:da:48:21:cf:c2:
cf:e8:75:43:ff:82:4e:08:c4:da:6c:b9:18:f8:fb:c4:18:9a:
06:af:4a:fd:e3:7c:0d:9a:fc:05:74:de:c0:ca:1e:89:1c:e3:
34:19:82:86:c8:7f:51:f3:33:54:d7:7e:fe:e1:94:58:db:c5:
e1:83:3d:5c:cb:7f:27:ec:70:db:46:24:7d:d9:a8:18:98:1a:
48:e2:dd:86:55:35:7a:ce:9e:83:e5:cd:3b:58:3e:4b:39:66:
19:1a:f8:d1:a1:1b:ab:46:3a:1c:6a:c2:76:1f:6a:26:af:3a:
fa:f7:dc:24:a2:8d:73:a5:24:9c:08:08:69:03:2d:05:d6:41:
f9:80:96:0e:74:74:a5:36:2b:33:82:fb:d0:3f:bc:4a:28:9f:
00:0a:8a:d7:09:88:40:18:81:2c:e3:82:e9:38:e6:d3:be:0c:
66:21:3f:7a:aa:b7:ab:1b:a8:12:d8:a9:22:c8:aa:01:91:96:
b3:50:9e:2c:e4:cd:7b:18:11:d9:b0:cb:b9:4d:2b:c1:82:68:
13:ad:15:3c:23:8b:32:ad:a8:60:4a:e5:b8:17:a0:4b:ac:98:
28:48:cf:b5:5b:33:47:07:4d:90:2f:0e:0f:35:ea:89:53:81:
72:84:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:17:57 2025 by rpki-client