Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d7d0d8-ed13-4bde-b4f6-2b6730ba5d51.roa
File: 33d7d0d8-ed13-4bde-b4f6-2b6730ba5d51.roa (raw, json)
Hash identifier: P7jHV6BcBhd4r8nj1NEDjUZmckTwjpz8lpI8iF2XefE=
Subject key identifier: 9D:CD:38:82:A7:EB:9B:51:A7:A6:3D:5C:7E:5A:C3:F4:AE:95:C9:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46479DE968EC4AFD1ED2CEE62BADE13BC9831DF0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d7d0d8-ed13-4bde-b4f6-2b6730ba5d51.roa
Signing time: Wed 26 Mar 2025 19:37:07 +0000
ROA not before: Wed 26 Mar 2025 19:37:07 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:47:9d:e9:68:ec:4a:fd:1e:d2:ce:e6:2b:ad:e1:3b:c9:83:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:37:07 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:de:ca:a4:21:13:d8:fa:31:f8:58:8f:3d:
f9:9c:a8:58:fb:a1:d4:a4:43:79:d4:a0:8b:ff:6f:
bd:16:2a:11:c4:c2:4b:52:88:78:dd:a8:d6:8b:11:
55:43:0a:7a:83:65:8b:3c:3c:db:09:6a:8c:0a:ad:
c6:72:b7:04:56:9c:c5:61:b6:1c:ac:74:fe:80:f3:
d7:fb:b7:0d:ad:45:c1:d7:07:ce:36:41:10:7e:b9:
09:28:22:cb:8c:24:36:18:da:64:5f:1c:46:d6:00:
b1:0e:b3:f5:a1:c9:e3:01:3a:b5:ce:04:6c:5f:41:
cb:85:8d:4a:fe:18:e1:ce:21:ac:fe:16:5d:56:1a:
23:2f:f5:7b:eb:ee:c5:45:5b:73:55:d9:f4:3b:0e:
9c:d6:ec:50:d0:3e:95:5a:46:43:8a:84:e6:0b:2a:
6d:68:a5:84:b6:c9:b7:39:fc:0a:9e:7e:7d:c1:49:
04:5e:9e:cf:54:48:53:b8:cf:60:4e:c7:71:5d:f7:
c4:c8:37:bf:ec:78:34:10:49:5d:69:e5:e3:b8:ef:
73:06:45:42:c0:af:8c:05:74:8c:18:de:66:0f:1e:
30:8e:9d:6c:5d:7a:21:5f:c7:18:6a:53:e3:9c:db:
73:af:cc:fa:2a:82:16:08:f3:b3:35:7a:79:4f:2c:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:38:82:A7:EB:9B:51:A7:A6:3D:5C:7E:5A:C3:F4:AE:95:C9:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d7d0d8-ed13-4bde-b4f6-2b6730ba5d51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:800::/40
Signature Algorithm: sha256WithRSAEncryption
1f:57:22:7b:7d:1e:35:f4:ef:d4:0f:69:eb:60:61:b4:df:e1:
96:b4:6e:9b:44:85:a1:3c:79:31:b3:65:2b:5b:f7:53:34:1a:
2d:1f:d5:6d:7b:f8:fc:8a:f4:f7:8c:f7:e0:ba:8e:95:49:4f:
fc:66:ea:ea:76:31:3e:df:cd:b1:e2:e9:d0:10:cb:77:6a:40:
87:d1:2b:70:07:35:48:63:96:ab:1b:5f:1f:d3:c9:05:e5:91:
30:56:82:b0:7e:d4:4c:54:28:8a:bc:6d:7e:01:3e:3d:fb:ee:
02:7e:f1:37:53:f2:af:4f:08:f2:d7:0e:5a:7e:6e:9a:ce:2d:
10:65:48:3c:e0:9e:bb:86:72:96:f4:fb:91:a9:cb:25:1d:56:
ed:00:c0:9d:6b:c2:e9:71:b4:58:52:92:7b:e9:6a:11:1c:56:
d0:16:f6:7a:0b:9e:1b:e1:3e:4e:53:a7:8e:54:d7:a1:ef:dd:
57:69:e2:07:8d:c3:62:9c:ad:e3:49:6a:b0:3e:4b:69:d9:58:
9a:7e:3b:9d:1c:d1:f7:52:e6:14:8b:fa:f1:8a:d1:7b:2b:d6:
bf:4a:a8:c1:b4:55:1d:4d:64:dd:0e:93:5c:e0:ac:3c:7e:ac:
6d:07:b9:cf:7e:6c:2a:4b:64:3d:a2:4b:6f:11:09:5e:40:d7:
8d:3a:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:17:53 2025 by rpki-client