Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File: 37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier: /hy8vB2O5ZBvpf14JmWHr9ZTLDE7mArPA7rBwOVAkK4=
Subject key identifier: 8E:F6:95:3D:95:3E:D0:26:63:4B:B7:B0:84:CC:2C:B3:ED:23:77:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A4094129AA14CDCEF0AF933466A5A30341E94F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time: Fri 21 Mar 2025 15:01:35 +0000
ROA not before: Fri 21 Mar 2025 15:01:35 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:40:94:12:9a:a1:4c:dc:ef:0a:f9:33:46:6a:5a:30:34:1e:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:01:35 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:3a:b0:bf:30:11:d4:a0:c8:bd:14:fb:0e:
8c:27:7d:a5:dc:f4:bf:74:71:63:e4:91:92:3b:f2:
b6:9c:d6:a3:a7:e2:96:bd:28:98:87:bb:f3:8b:2c:
a3:17:72:17:85:3b:4a:c2:ba:1a:4a:d0:7c:b1:a1:
25:f8:76:ca:a4:4f:bb:1f:d2:b7:9d:67:cc:28:82:
8b:1f:0d:b1:9e:c6:6e:d2:87:3c:fc:03:7c:68:07:
fc:d1:23:55:bf:fa:0e:13:de:32:34:28:b4:4d:c8:
39:e2:92:a5:c7:8b:ad:24:6f:75:68:15:0b:6c:a1:
a2:56:91:86:52:ed:61:04:9c:0c:39:e0:c0:1c:b2:
81:a1:d8:95:2d:4e:8a:d7:1c:ca:09:18:ac:1e:e0:
5e:ac:b0:ed:01:f7:9d:fa:cc:b1:9d:9f:d0:ba:36:
2b:f1:0f:91:17:4c:cd:a1:15:2e:bc:b6:97:4a:04:
16:75:df:2c:36:ab:0a:fd:41:c7:03:e4:1e:85:9b:
05:79:58:75:fc:8c:f1:9a:76:5b:f3:a1:11:bf:84:
6e:b5:30:fb:65:80:16:94:5f:ac:6f:f8:6b:83:79:
36:b4:9d:17:e4:70:d4:69:4d:3e:1a:b4:55:2a:7c:
d3:6d:f4:f7:f6:21:dc:98:67:df:df:1f:8c:45:2e:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:95:3D:95:3E:D0:26:63:4B:B7:B0:84:CC:2C:B3:ED:23:77:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/48
Signature Algorithm: sha256WithRSAEncryption
40:a5:5d:f7:a8:fc:30:61:5f:47:2b:32:95:8f:e9:57:c8:45:
f5:19:a7:c6:57:ac:51:a2:2b:8f:ac:cb:23:f5:a7:6f:51:f1:
4f:d0:97:ec:ca:df:18:75:b2:80:8f:cd:30:59:e3:34:08:b7:
72:e0:fc:2f:e1:e0:49:e5:40:11:fc:2b:01:1d:4e:0c:12:b5:
af:9e:99:da:e6:90:6f:2d:68:b9:47:5f:56:4d:52:15:dc:d9:
4a:b0:3d:ba:c7:1c:3b:5d:bb:65:6c:1a:65:0f:3b:11:f2:b2:
5d:f7:81:34:d3:04:d4:0e:44:9b:b6:2f:01:b9:01:75:22:df:
da:b1:2d:68:10:1e:ae:f3:bb:cd:a2:42:ed:c9:13:30:c5:8c:
9f:05:86:94:18:dd:20:6b:3a:19:04:67:e3:65:98:ef:55:70:
6b:bf:e5:6a:32:ee:6b:ab:17:d6:8f:bf:1b:c1:cb:91:2c:b9:
77:ee:2a:be:d6:42:d9:d0:c5:90:61:fa:cc:bc:7c:ca:3a:d8:
27:5a:27:49:9b:0c:3f:6d:5a:93:7d:71:1a:6c:01:c9:35:58:
75:38:6d:73:29:c5:41:87:b1:f9:26:0a:38:2d:30:9f:9b:95:
90:36:e6:fd:2b:6f:eb:e9:f5:4e:2f:d1:6a:1a:a1:4d:33:17:
e7:96:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:29 2025 by rpki-client