Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
File: 375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa (raw, json)
Hash identifier: O9m5G5CkJCEoAlUBxImGItdQ4iTvl3ojjKdyDXJcXgk=
Subject key identifier: B6:65:CE:0B:9B:E4:15:6F:66:D9:53:A8:66:26:9A:24:CC:75:20:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4803C9972A15D6D2F92B7E05D6B102B45BFC9432
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
Signing time: Wed 05 Mar 2025 17:21:49 +0000
ROA not before: Wed 05 Mar 2025 17:21:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:03:c9:97:2a:15:d6:d2:f9:2b:7e:05:d6:b1:02:b4:5b:fc:94:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:1b:cd:2c:cb:fc:5a:58:29:2b:be:07:93:
80:ea:70:03:19:0e:94:e7:d7:eb:fc:fd:c2:f0:09:
9a:01:94:eb:3b:ea:f0:eb:3b:38:85:6e:46:c9:d4:
fe:36:7f:62:1d:06:0a:b1:8d:d8:6f:ea:b0:47:ad:
f5:4d:5c:54:7d:94:cc:7b:6f:60:b0:bd:04:25:7b:
0c:7e:5f:a7:0a:28:e6:f5:fd:33:09:5c:69:9d:34:
cf:5b:9a:6d:34:34:10:67:84:74:58:bd:09:9a:e8:
25:2c:5c:2f:9a:b0:f5:4f:48:ae:95:9a:e5:bc:c5:
13:63:91:4f:d9:2a:19:be:17:ea:61:24:56:72:8b:
7b:66:39:5f:23:49:87:58:4e:e1:26:20:2a:4a:e6:
ad:db:b9:b7:35:0e:aa:ee:a5:58:be:28:7e:d0:97:
44:6f:04:7e:79:7f:2e:ec:97:31:88:da:9a:46:74:
10:7c:2c:e0:5a:38:e1:aa:09:07:31:ba:1f:79:24:
2b:a1:0d:3c:96:62:c2:d2:81:fc:3e:55:ee:0a:0b:
00:63:aa:d3:12:52:b8:79:7c:72:5c:8b:c4:05:58:
e1:e6:87:f6:54:fd:7b:c6:07:fe:8c:57:a3:6c:69:
8c:e5:6d:6d:12:bb:57:c5:66:ac:41:8e:75:5c:42:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:CE:0B:9B:E4:15:6F:66:D9:53:A8:66:26:9A:24:CC:75:20:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c4:93:4e:a3:4d:93:9f:4d:36:70:23:c1:4e:a2:93:a1:3d:74:
98:e6:e3:7e:cb:b0:53:37:4e:3f:fd:23:9d:3e:45:26:2e:8d:
ec:ec:ec:92:45:a3:f2:e8:25:bc:eb:9a:de:a5:50:d9:73:d3:
c2:fa:d2:13:da:aa:a6:bf:cf:09:81:73:5b:45:15:5b:dd:8f:
9e:af:5b:22:83:d1:73:ce:83:5a:9c:34:35:b1:f9:9f:5f:5d:
1e:3d:12:3c:f7:4e:37:79:a7:f6:47:a5:d8:5f:b8:9e:52:23:
10:ca:23:b9:01:8c:d2:14:be:79:c2:c8:6f:86:16:50:f1:60:
91:31:fb:d7:7f:f6:1d:61:30:b9:1d:3b:45:1f:30:2a:2e:53:
1a:ad:0c:62:af:8c:01:47:c2:e7:98:b4:b5:96:4b:d9:53:2f:
97:36:2c:75:30:86:27:8c:58:f3:50:32:4d:ff:f2:8b:23:cc:
21:22:3d:ae:32:0b:7f:b6:16:e3:e3:c8:05:44:ec:a0:c0:5e:
c4:03:75:c1:9b:ae:13:32:b2:76:82:57:d8:06:1e:ea:d8:d6:
6a:6b:f9:e3:f3:6b:4b:36:fe:9c:db:63:e0:71:57:9f:fa:ed:
13:68:bf:68:bc:05:90:d2:ca:ea:52:8d:08:e5:03:18:84:76:
fd:b3:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:28 2025 by rpki-client