Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
File: 3401cced-770c-4585-9f39-cb17444bbb38.roa (raw, json)
Hash identifier: Ij5fgbt6L+3duUFzD49qr8NU+pYJXlZqgZez+V+WQIY=
Subject key identifier: 35:DE:97:55:82:35:9D:72:3B:AE:91:04:30:2A:AF:48:E2:BE:7B:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3687C73A6669C4B017FF62826056A5A93551882C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
Signing time: Mon 17 Mar 2025 15:40:32 +0000
ROA not before: Mon 17 Mar 2025 15:40:32 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:87:c7:3a:66:69:c4:b0:17:ff:62:82:60:56:a5:a9:35:51:88:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 17 15:40:32 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:60:9a:99:b2:0d:2b:2e:9f:a5:21:8c:de:
7c:52:af:79:b1:02:69:b5:ff:1b:74:95:cc:7f:14:
45:f0:fd:f8:53:4a:7d:61:f9:2f:d7:a9:77:56:20:
49:59:9b:73:cb:de:0c:d4:bb:a9:e9:db:54:6a:bb:
bc:4d:f2:d2:61:8d:9b:01:e2:77:82:0f:97:f0:3a:
83:56:96:31:d3:5f:20:c3:9b:19:86:0e:6e:b4:55:
c8:cd:a5:2b:af:a8:5e:5f:1f:39:ae:78:e0:0b:59:
53:ca:c7:b6:51:8a:79:35:e5:80:b5:ab:4f:91:24:
31:39:97:1f:8b:1a:91:a6:08:5a:66:d9:fe:98:ce:
a5:e5:17:27:3e:0d:29:24:df:37:89:66:55:d4:2c:
26:61:c8:5b:23:61:b7:d8:39:38:c7:4c:36:e1:b1:
cd:1e:50:71:7d:40:e6:ab:60:5d:fa:41:5e:dd:f9:
ac:6f:f0:11:dd:39:b6:8b:17:d8:89:dc:3f:f2:04:
3c:57:cb:d0:05:db:4b:eb:4d:d1:a6:5c:f3:e1:bb:
c5:47:60:0f:0b:66:ac:35:78:da:23:0d:57:28:8d:
e3:d0:85:94:ff:79:84:21:0a:f0:24:33:24:ac:be:
40:ed:bf:92:1c:e4:b4:97:62:a3:9d:95:96:6c:b4:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:97:55:82:35:9D:72:3B:AE:91:04:30:2A:AF:48:E2:BE:7B:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032::/32
Signature Algorithm: sha256WithRSAEncryption
58:b4:ac:2a:a8:ec:0e:a3:79:75:ff:cd:03:35:8a:5b:be:20:
00:b3:35:1d:5b:a9:9d:8f:21:2b:7f:d8:3c:c2:79:2f:ac:dc:
f9:51:e7:97:e0:68:f9:34:de:42:e9:a2:1d:a0:29:b5:c0:4a:
42:df:e5:5c:a8:b4:50:c4:4f:30:32:f5:8e:0a:f6:20:c2:e4:
c7:7a:28:bb:3e:77:a0:ea:fe:68:12:b9:de:f4:2a:b2:f3:5e:
f3:f3:ba:c4:b7:22:80:8b:c0:f3:e1:e2:b1:f4:59:b2:02:98:
86:dd:db:39:29:a9:bb:af:a0:53:18:0f:94:03:4d:a2:de:17:
dd:6a:80:24:d0:a0:2b:5c:78:5c:c2:3f:69:ba:cb:15:9f:1c:
f7:9a:96:c7:97:6c:41:03:60:8c:28:4a:90:33:b9:bd:07:bc:
d0:d9:18:f4:17:0d:0f:39:11:b0:bd:10:5c:39:12:3f:2f:82:
94:74:5f:e7:b4:b6:9b:e8:b3:16:b3:bd:23:e3:d9:38:64:ef:
a2:2a:9f:35:b5:eb:a8:37:58:27:3a:0e:27:7c:38:67:51:ba:
2f:4d:f6:08:fd:ba:cd:cc:e5:fa:51:ef:78:8b:ae:4f:62:a1:
d7:a4:13:57:8a:88:47:fc:82:be:dc:f7:d4:66:a2:1c:59:61:
c9:a5:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:07 2025 by rpki-client