Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File: 36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier: vZ3lyO30jS0lvW0NCQ9z9k08ijq1dORIrvOl1GaLJ7Y=
Subject key identifier: 3F:1B:E7:0D:B5:23:65:FB:11:8C:70:6B:48:8F:AE:71:C0:97:D0:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6292D5614AD5659FABA48590B881A4B7370CDDEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time: Wed 05 Mar 2025 16:50:03 +0000
ROA not before: Wed 05 Mar 2025 16:50:03 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:92:d5:61:4a:d5:65:9f:ab:a4:85:90:b8:81:a4:b7:37:0c:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:50:03 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:c3:34:19:a3:01:14:fb:a5:41:3a:16:d7:
c9:fa:c2:03:48:77:4b:16:08:cf:d5:3a:13:98:85:
02:b8:17:07:d3:01:c8:62:e6:55:79:c6:15:d8:6f:
3c:43:dd:6f:b9:e4:3f:19:c3:db:2b:0e:83:39:28:
72:d1:cb:c8:a0:72:be:83:39:f8:1b:e9:24:59:55:
24:a5:81:f3:cc:0b:6a:cd:70:22:81:40:1c:2e:56:
b8:95:83:32:3b:3e:51:ae:a6:2a:d9:f7:e2:68:ce:
2d:f7:74:f7:c5:b6:95:43:7a:57:e6:57:f3:f5:5f:
83:79:a3:11:7b:a9:71:b6:de:1c:9a:68:fe:07:e5:
69:17:28:23:2b:1b:02:f0:64:70:8d:8b:13:9a:82:
6f:f9:e2:b5:f3:f8:70:00:a1:ce:f1:83:e1:cc:6c:
3c:92:08:6a:0e:cb:f9:34:a0:d9:f4:53:e4:c6:06:
35:5b:4b:5c:60:ea:c8:1b:cc:73:d0:61:04:d5:1d:
1e:3e:92:e9:55:b5:2c:df:3f:40:31:c2:56:98:1e:
43:dc:d1:5b:c5:f6:dc:a0:29:88:72:36:dc:4e:d6:
4b:e2:16:7d:a6:0c:23:d5:49:f6:35:51:48:54:b6:
ea:e1:64:bd:67:09:f3:fa:ae:53:b0:b0:64:01:9b:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:E7:0D:B5:23:65:FB:11:8C:70:6B:48:8F:AE:71:C0:97:D0:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a020::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c2:c9:ba:8e:bb:9d:0c:18:1f:59:dd:f5:93:94:90:b7:a9:
24:4d:bd:92:91:ad:67:a9:6b:8a:b5:4a:90:e1:2f:aa:22:70:
b3:e5:e8:fe:78:d8:83:f1:2d:a9:f9:47:8c:49:2f:78:3b:cf:
d0:55:55:09:35:5d:f4:59:dc:e6:5e:df:4c:8c:9b:15:36:cd:
33:b5:5e:1c:4f:fe:12:ef:75:a1:e1:eb:62:da:a1:10:a8:a4:
ee:70:60:54:25:49:2c:cb:26:e4:6d:13:17:79:17:7a:ba:fd:
a9:9b:f8:ad:20:5f:c3:33:42:38:72:0f:be:58:a0:b7:73:b2:
7d:de:d2:24:61:c9:e3:76:bb:e1:55:02:7e:24:5c:bf:b1:73:
91:ea:3b:69:83:dc:5c:ec:09:37:60:34:f4:fc:b1:91:2b:77:
07:f8:f1:76:28:c8:66:f3:d3:a0:2a:d4:e7:c8:33:6a:86:99:
98:67:b0:45:4f:22:28:eb:75:b0:a9:3d:b2:47:cd:09:0c:57:
f1:7c:cb:e7:26:c9:3e:75:26:7e:9a:26:73:dc:02:cb:ad:1a:
07:45:15:08:8c:82:19:29:fe:07:6c:26:6b:da:86:98:39:e4:
1f:00:ab:0c:8f:e0:2f:9e:94:3c:b2:fc:68:18:c1:26:c5:51:
b2:1e:62:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:30 2025 by rpki-client