Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa
File: 35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa (raw, json)
Hash identifier: hNv/bPgI9mlYmBgpQ5Dj9+5GwyR7T9+VgHqUu5Uri04=
Subject key identifier: D4:80:55:E4:63:13:27:4A:52:47:C5:05:D4:D6:BD:8A:94:ED:7B:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69F0638C317DF1ECB20F9203E3D0779F975125D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa
Signing time: Wed 05 Mar 2025 15:30:49 +0000
ROA not before: Wed 05 Mar 2025 15:30:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f0:63:8c:31:7d:f1:ec:b2:0f:92:03:e3:d0:77:9f:97:51:25:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:30:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:77:c9:9b:e8:e9:a6:39:b8:91:c2:8e:98:
cc:e8:24:84:62:08:51:b0:cb:a0:de:d3:49:e9:40:
cd:83:1f:52:c8:10:8e:5d:5e:1a:c7:e6:d5:86:12:
63:29:20:ab:7b:44:d7:24:cf:3f:4d:ea:9a:d3:e9:
97:1b:20:9c:5a:78:29:a9:10:fb:90:88:26:4b:d2:
1f:72:e2:00:ed:f6:a4:20:25:15:d5:a9:09:a2:5f:
62:34:4a:5b:4c:0c:93:22:65:76:4f:e0:2d:47:9d:
a2:c1:0b:1e:c5:7b:46:c6:be:fb:39:bc:56:64:03:
a2:8d:6f:fe:7b:76:8f:80:29:10:be:62:be:23:7d:
89:0c:71:eb:7b:e6:2c:1d:0e:7b:7d:ca:24:29:1d:
f3:4d:29:3f:e5:9c:b2:be:37:e4:c5:d5:24:b8:f1:
1c:ac:c4:5d:87:bb:ff:48:5e:a0:f9:1d:52:98:23:
d3:f3:d5:b8:77:64:11:96:8d:4e:73:fa:78:30:76:
2d:bd:80:e4:27:29:f5:38:a3:c6:56:ca:10:b5:af:
59:09:8d:b9:cb:3d:4f:61:b2:da:03:a0:dc:59:37:
e3:df:74:73:68:fd:c0:1e:19:5d:41:c9:e5:e7:3a:
43:1b:65:f6:06:1e:ec:5d:75:31:ff:27:5b:77:10:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:55:E4:63:13:27:4A:52:47:C5:05:D4:D6:BD:8A:94:ED:7B:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35ae0aa1-bb4f-48d3-9926-1e5852d54c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40a0::/48
Signature Algorithm: sha256WithRSAEncryption
0a:af:e4:fc:0c:bb:ec:3f:53:e3:09:c3:88:56:d6:0a:3b:af:
ae:32:c2:a0:01:3d:d4:67:46:8c:25:fc:0e:6f:6c:af:9b:d3:
41:81:80:58:38:7e:c3:c8:6a:a1:30:e9:bf:d5:65:5a:dd:a2:
16:19:d8:15:86:66:47:7b:41:01:79:fd:10:c1:48:0f:89:39:
5c:c9:35:35:97:03:5d:6a:9c:46:38:0f:fa:79:28:7c:84:fa:
c4:25:80:c8:d6:fc:4b:22:7c:e3:76:1c:82:7d:7f:d6:b5:33:
0e:04:d0:f3:f9:93:1f:81:33:7f:01:af:f7:f6:71:70:8e:fa:
14:77:c6:d1:e9:1d:e8:f1:80:6e:a7:a6:a1:5c:52:aa:31:90:
12:04:9e:40:e8:fd:d9:2f:ed:b0:1e:30:89:12:6e:14:d3:a5:
a6:8c:d7:82:94:30:dc:32:4c:f4:7f:c9:54:9c:38:cb:80:9b:
12:90:23:dc:b5:f9:fd:98:5a:22:8c:4e:ba:a1:9c:86:28:e6:
a0:eb:15:44:0d:ea:44:ab:92:92:cc:ea:0b:91:6c:05:ff:3a:
6d:c7:ed:20:2c:94:f5:c3:e7:57:87:e9:29:b8:13:b6:18:ac:
96:fb:51:79:d7:1c:85:f5:93:ee:5f:7a:81:26:50:e9:09:00:
49:71:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:21 2025 by rpki-client