Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
File: 366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa (raw, json)
Hash identifier: YyOeXjAPiQzcyi1ehHuxR4IMdQs3VLmhgAB4TYDXfws=
Subject key identifier: 6D:7F:A8:35:0F:71:BA:18:13:6B:60:2A:25:C0:69:DD:05:16:3B:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22347D21D91EF22B1D1D81F71D29B424432FA34E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
Signing time: Wed 05 Mar 2025 15:31:12 +0000
ROA not before: Wed 05 Mar 2025 15:31:12 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:34:7d:21:d9:1e:f2:2b:1d:1d:81:f7:1d:29:b4:24:43:2f:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:31:12 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:00:4a:2a:f8:80:9b:dd:0b:04:40:96:0c:
8a:03:af:01:c8:d7:40:e0:fa:73:73:e3:ad:d8:88:
0a:08:d7:d6:a0:b7:67:d0:26:37:c1:15:6e:2e:d8:
32:10:41:fa:a0:80:28:3d:65:cb:30:cc:77:af:51:
4e:ff:5a:a7:85:5f:c9:9d:9d:05:51:5b:90:f3:94:
a8:b6:63:2e:3c:d6:00:d3:96:21:38:e4:16:76:8e:
a7:8a:a1:57:0f:3f:f9:78:10:9a:20:02:33:18:bc:
9c:c4:18:1b:e2:62:1f:0c:d9:8a:29:76:0d:5e:a1:
62:8b:bd:82:0b:da:b4:39:93:0a:f1:3a:0a:63:78:
b1:ae:84:c0:81:e0:00:19:99:01:3f:a1:6c:3d:de:
80:74:6b:3b:2a:4b:7c:e3:b9:68:7a:69:b1:d5:aa:
8d:e6:13:b1:25:74:a7:f4:6c:1f:d0:d5:db:c0:fc:
04:9f:1c:f5:93:43:d6:8b:5f:03:e0:ac:ff:5a:05:
50:b8:1b:2f:58:2f:1d:4e:30:98:e7:09:7c:7c:9b:
41:f8:97:17:cb:a1:13:2d:2e:7d:ad:5c:ff:4c:dc:
a9:fa:88:fa:f0:4d:fb:9b:3f:ea:c4:04:bd:ba:91:
70:ef:cf:ab:1d:7a:aa:79:d0:89:cb:e9:e8:42:ac:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:A8:35:0F:71:BA:18:13:6B:60:2A:25:C0:69:DD:05:16:3B:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4040::/48
Signature Algorithm: sha256WithRSAEncryption
9c:22:99:3c:06:73:c8:7c:8e:f8:8e:f2:37:5a:e5:86:18:8f:
24:a8:da:42:90:76:45:48:f2:39:e2:17:aa:81:7e:85:79:8b:
0e:2d:2c:ef:a6:0c:71:26:79:e7:5e:0b:d0:b4:ac:e5:ee:4c:
d5:06:91:7d:fa:3d:86:a8:b1:85:51:bf:8b:67:5b:a1:d8:b2:
fb:83:f5:a4:79:ad:68:e4:af:af:1c:b7:74:4e:e0:27:f2:36:
17:da:ca:f1:39:d1:91:7b:d7:bf:da:ad:9b:3c:c7:0c:d9:bc:
42:fe:cb:aa:51:d1:69:87:05:32:05:d8:7b:dd:44:5e:e0:ba:
f8:6a:05:4a:fd:98:04:b0:40:19:c8:d8:bd:c5:ff:36:ae:b0:
3b:08:ba:90:eb:ea:d2:cb:18:48:3f:f1:7f:8a:0e:53:63:4f:
77:68:d1:d2:26:d7:bf:9a:60:07:51:d0:1f:95:3a:c5:04:d7:
e1:87:99:4e:29:f2:7f:5c:3e:dc:9f:14:69:61:62:be:31:87:
6b:62:0c:ee:43:9c:92:01:a8:36:30:f8:e8:82:24:30:95:98:
5d:05:d2:3c:28:7e:1e:04:c2:a3:21:4c:3d:0c:1c:26:5c:1a:
fa:f4:b6:27:74:17:0c:4d:98:7a:b4:41:c5:8b:14:16:bf:8a:
94:76:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:50 2025 by rpki-client