Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
File: 36e6bf1a-660d-40a9-a561-406ff743fc37.roa (raw, json)
Hash identifier: 9HsJ743GoAvCuem11NbJ1pWZsQJM9wc6emAWYBJPwWM=
Subject key identifier: FF:42:E2:F2:D5:0E:F6:7D:D7:AD:E4:83:0A:3A:CF:B3:89:10:5F:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05BE8E955BBE63C4EFCCB32014204D87DD3DAFB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
Signing time: Wed 05 Mar 2025 17:32:04 +0000
ROA not before: Wed 05 Mar 2025 17:32:04 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:be:8e:95:5b:be:63:c4:ef:cc:b3:20:14:20:4d:87:dd:3d:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:32:04 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:30:81:33:26:dd:70:19:e4:f8:f7:00:9d:
b8:a3:3d:57:71:f6:8a:ca:ac:85:5e:05:5d:5a:4f:
72:ac:b8:cb:4e:87:cf:4b:eb:ff:c9:c0:2c:a7:99:
0c:4e:a4:ae:0b:29:2a:fd:a8:e6:92:a1:2c:cc:f4:
8e:b6:f9:e1:06:48:b2:0f:1e:0d:fb:4d:c7:df:31:
9b:3d:5c:52:ac:c4:e1:8b:17:0b:d8:ed:7c:d3:46:
4c:67:e0:3b:c6:1f:bf:08:07:27:a6:57:ed:7e:15:
17:b7:7a:07:30:12:ab:cf:9c:27:9f:37:8b:72:24:
5e:8d:c0:cd:7c:96:5f:f7:e4:9d:ca:4b:59:15:44:
c6:50:87:80:a7:83:19:3f:3a:a0:ab:ce:7d:76:de:
ab:84:e0:c5:91:e7:de:6b:5d:d8:bd:98:c8:e2:b2:
a4:31:fa:ae:b6:eb:fb:a9:8a:28:97:ab:7c:47:c4:
59:74:2c:07:07:d8:24:d1:5d:f5:a7:13:cf:f6:5a:
49:bc:0d:55:72:f1:0d:44:53:44:69:47:ba:fb:d1:
46:9a:b6:82:ed:55:9a:3c:53:2d:2e:4e:1a:fb:3f:
72:9e:7a:75:fa:dd:9d:2d:5e:da:f9:fe:9d:5f:83:
09:6b:f6:57:4a:92:0d:6d:66:06:c9:1a:5a:9f:d2:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:E2:F2:D5:0E:F6:7D:D7:AD:E4:83:0A:3A:CF:B3:89:10:5F:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:33:07:a3:a8:c6:00:14:32:d1:7c:73:b8:24:bc:96:69:15:
c4:bc:9c:c1:4f:e6:91:35:d3:77:ad:be:34:96:53:74:7b:61:
36:1c:c4:2d:2c:75:d5:4d:5b:1a:0f:8f:6b:cf:18:da:77:60:
80:40:a3:2f:fb:00:3c:c7:e2:3c:66:0f:8d:4e:df:56:48:12:
af:7b:74:ac:14:ca:b0:e6:4e:a0:ac:06:49:3a:7a:cd:74:0d:
88:9a:31:70:24:d2:89:92:c0:c9:b5:df:fe:9c:af:d8:55:11:
2f:7c:c1:73:c2:b6:50:f8:a3:c0:85:f6:e2:70:bc:ea:a0:e8:
ad:a0:71:cc:c6:8a:78:1e:91:c2:e4:1b:f5:b0:32:42:e7:45:
32:12:ee:7e:e2:3c:fc:7b:3c:dd:27:7b:1e:fd:48:9f:cb:dd:
cf:d9:65:84:99:51:f2:f6:b5:e0:36:aa:b4:f6:93:68:3f:21:
5a:eb:b0:ea:08:86:21:b0:dc:46:89:22:90:b9:4e:98:28:9e:
d2:e1:03:1b:3e:52:34:b3:76:b9:61:34:c8:d2:f2:c3:be:54:
dd:d9:82:8f:06:de:2f:cd:bb:f5:a1:0b:b5:2e:98:ae:a9:6f:
d8:3e:89:b6:6a:a1:1d:36:a7:bd:cb:5a:10:fd:9f:1d:1d:51:
8e:78:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:40 2025 by rpki-client