Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
File: 37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa (raw, json)
Hash identifier: C1/f9rT4uTG1ClOOKLVXtqNMr+zejGTN6tRbAfR0GxI=
Subject key identifier: 9A:F9:D1:06:40:FD:BB:10:E0:77:2C:2E:4A:E2:B7:02:C0:3A:90:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47BC8D08FBBD0C1DC1772813419632F46E19B3B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
Signing time: Wed 05 Mar 2025 22:06:57 +0000
ROA not before: Wed 05 Mar 2025 22:06:57 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bc:8d:08:fb:bd:0c:1d:c1:77:28:13:41:96:32:f4:6e:19:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 22:06:57 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:4f:dc:52:c3:66:41:18:e5:cb:b9:68:9d:
0d:fb:92:fd:bc:0a:6b:63:26:a2:18:89:98:61:6a:
9c:7b:5f:80:56:9f:32:cf:86:c1:85:f0:6e:fb:05:
38:70:5e:e6:2c:a3:bb:1d:36:bf:3d:09:3f:25:f2:
67:39:1e:2a:75:e2:61:21:61:ad:0c:38:81:ca:57:
99:ce:e4:3b:a9:9d:48:cf:48:64:79:b4:72:95:65:
1d:24:6e:f7:c3:2d:a8:ca:33:fc:21:67:8d:ce:66:
e8:d7:0f:63:1e:12:f6:07:a2:eb:d5:99:ff:85:9c:
e7:51:47:2d:4c:d1:3c:3e:38:61:6e:46:50:66:92:
07:9c:df:d7:6f:6e:f7:76:c7:31:a7:8a:12:39:c9:
12:4f:1f:32:d0:bb:81:a2:20:02:a3:03:47:3d:a0:
24:2b:1f:59:af:cb:1c:51:f4:30:03:51:01:4b:d0:
35:94:a2:e7:d6:9d:cd:6e:b7:a7:e1:b8:17:0d:c3:
75:fe:11:ec:88:a8:7a:d7:a4:52:9b:73:00:ac:66:
da:6c:ac:2e:06:48:89:dc:58:7e:5e:0f:55:c2:00:
16:66:1f:55:00:68:c0:19:50:40:4c:88:33:fc:86:
c8:4d:5d:58:95:e5:1a:48:27:a4:9d:54:9f:8b:86:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:D1:06:40:FD:BB:10:E0:77:2C:2E:4A:E2:B7:02:C0:3A:90:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:83:b1:b8:ec:46:2f:42:02:0f:af:85:c7:ab:91:79:e0:55:
97:e9:cf:cf:39:f7:45:6a:a6:cc:ef:14:93:f3:df:5c:9b:3a:
eb:e4:bf:eb:3e:ef:11:1d:ec:06:bd:cd:15:23:f8:51:e5:8d:
3b:13:50:dd:d7:04:d3:27:24:78:59:ad:68:2f:50:11:cd:b4:
0c:9f:1d:48:67:29:03:27:85:9f:f1:d3:f7:66:67:ec:78:d8:
ce:dc:79:d6:54:70:a5:7e:f9:8a:c3:04:54:94:e0:53:c0:6c:
d8:56:4b:a2:72:a1:3a:60:77:f1:c0:3e:9f:b5:18:37:00:69:
97:5d:9f:cd:1d:ac:41:47:2f:0d:4b:19:dc:4a:48:d7:89:8b:
dd:77:0f:0f:60:1f:23:31:c4:91:21:27:6d:ee:08:b2:3c:de:
ea:79:2e:96:ba:ef:fb:37:9d:bf:63:19:9c:8e:8a:d9:8f:fa:
7e:67:1a:bd:07:c7:20:bf:04:4e:23:33:c0:cc:40:b8:b4:46:
b1:bd:21:6a:fb:f4:b7:17:77:0a:d5:16:f5:47:eb:a3:28:2c:
41:e3:2e:35:57:e9:3e:c0:71:97:c9:9d:5d:59:a9:7a:3b:3a:
b4:a2:d7:02:5c:ef:bf:c2:a2:d0:a1:b1:fd:5d:88:43:71:97:
7f:84:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:53 2025 by rpki-client