Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
File: 3c7c4703-2876-4e04-b857-8c0298bd0897.roa (raw, json)
Hash identifier: FnEt5IeoEyjpSgkeJzQAn3yElpTgHfUltxmu1/5SxU4=
Subject key identifier: AC:9F:4F:51:89:CD:EA:61:4B:76:FC:29:C3:7C:BE:2C:7E:C6:A4:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29C5E65E9E4FCB392D80EF8D077B49606224FB50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
Signing time: Wed 05 Mar 2025 15:40:29 +0000
ROA not before: Wed 05 Mar 2025 15:40:29 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c5:e6:5e:9e:4f:cb:39:2d:80:ef:8d:07:7b:49:60:62:24:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:40:29 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:19:a4:2c:89:16:0d:2a:fd:0e:c3:3c:35:
e3:e9:b5:3b:8b:53:0d:8b:2a:e4:e3:ba:59:aa:8f:
e1:cf:76:f8:73:22:b1:94:64:6e:7e:45:e2:60:9c:
e9:33:21:18:e2:32:14:83:5a:2d:83:08:bf:ad:f4:
ba:7c:39:ef:a9:54:75:2d:27:42:14:18:aa:66:05:
87:a5:05:3f:71:65:38:f9:13:b6:da:c5:4a:b1:3b:
89:9f:13:27:f7:fe:15:76:cf:75:17:d1:07:bb:4c:
c9:62:ac:99:35:1f:ce:0a:4e:c6:a0:2f:c4:35:2e:
b6:05:c5:15:f1:31:ea:43:2f:76:db:bf:b8:85:3e:
8f:09:d6:7f:23:4f:f2:12:0b:4f:2d:bc:ca:43:66:
bd:42:bb:2e:c9:53:ea:be:45:f0:00:09:c8:75:54:
ee:bb:17:4f:45:be:52:00:74:2b:97:99:64:ad:94:
fd:ab:df:74:bd:80:bb:1f:10:2a:1a:7a:4b:c9:3a:
f8:e4:9d:4d:f9:23:e0:2c:92:a0:65:b5:bb:f9:47:
42:20:8c:3f:56:a1:88:4a:78:5f:3c:25:82:a9:38:
3b:3c:e9:80:d7:7d:be:1e:ac:65:4a:57:12:4f:d3:
2f:75:f0:f9:9c:82:c3:dc:b9:37:c3:5e:de:5d:5d:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:4F:51:89:CD:EA:61:4B:76:FC:29:C3:7C:BE:2C:7E:C6:A4:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
70:0f:19:7a:08:78:cc:f8:ed:6f:9b:8b:ce:24:4c:49:0f:de:
27:b7:99:7b:71:67:a8:75:ac:12:2e:d3:4f:5a:c1:58:15:32:
c1:c6:79:94:91:ff:39:4d:a4:86:ec:23:07:82:cf:e7:e4:34:
24:c3:5e:1a:8f:58:da:bc:d1:d7:a2:96:d1:38:48:f3:36:f3:
1e:1d:03:24:32:fe:79:a4:8b:86:5c:b9:f5:a0:5b:74:70:eb:
d0:6e:89:1c:48:9b:8d:21:78:e3:0c:26:00:de:cd:ea:1c:d0:
54:95:17:b2:58:ce:62:45:38:15:28:34:c6:95:31:ff:31:bd:
7f:95:a8:db:d1:9a:63:67:ab:6f:bc:c4:c8:d0:55:6a:c3:13:
c6:f0:e4:e3:48:71:76:39:82:44:06:af:8d:cd:0a:f3:51:f7:
e7:59:83:9b:08:6d:cc:db:fa:26:5c:60:39:86:1f:e9:81:26:
25:5e:83:61:13:30:28:f4:a2:0d:12:a6:6e:82:ae:02:5d:6f:
75:a4:2e:41:f3:fd:b5:cc:6b:aa:e0:e1:f7:40:1c:70:4a:55:
c4:a1:18:51:64:86:2e:a6:c5:36:14:79:52:52:d8:ff:cd:28:
3c:16:dc:f5:ff:3c:34:ea:9a:d3:69:8a:7e:a3:68:11:e6:1b:
ac:7d:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:21 2025 by rpki-client