Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
File: 42b92c19-37c5-4b41-b1df-818a1569d759.roa (raw, json)
Hash identifier: pssg99jLYFt6RQN04lq0XU/EBr+RFRhCZNGsv8qblp0=
Subject key identifier: D3:DC:78:84:FF:F1:6A:46:9D:5B:0F:F0:FE:15:5F:E0:4D:5D:5E:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54F5D3FB179AD8693DEF9A53B91509ACC12B6855
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
Signing time: Wed 05 Mar 2025 17:01:26 +0000
ROA not before: Wed 05 Mar 2025 17:01:26 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f5:d3:fb:17:9a:d8:69:3d:ef:9a:53:b9:15:09:ac:c1:2b:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:26 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:52:4f:dd:a2:97:a8:4c:13:de:d5:20:47:
9f:7b:45:bf:a7:70:71:a8:ec:fd:bc:0b:b0:75:93:
9e:ad:e9:bb:50:f7:de:43:79:be:6f:ad:ad:99:96:
d5:07:e6:3b:64:89:87:6d:86:9f:5b:20:ef:5b:73:
04:06:d5:c8:2d:67:20:4f:b3:5f:7e:ea:f7:ae:df:
5d:38:5d:99:42:e0:01:d8:c6:25:63:4d:f1:c2:72:
3d:d4:af:53:73:6a:c0:07:1b:98:18:eb:36:7b:a4:
59:33:58:8f:26:bb:3f:d0:66:5e:28:65:6e:47:d4:
ac:d3:b3:3e:a9:b1:b3:59:9c:96:b1:5b:39:cb:75:
fb:cb:9a:2f:a1:32:e8:4e:f3:9d:0d:d3:7b:e0:1d:
e6:ca:f7:be:47:dd:2f:b0:55:94:e8:91:28:30:84:
4c:5f:42:cf:73:f9:1b:ca:46:9a:15:69:e8:ef:c3:
50:ca:68:c0:7e:d4:fd:26:50:08:5b:38:f6:87:04:
58:96:79:35:61:ae:7c:2a:fc:e9:81:29:75:8b:41:
82:24:61:bd:ba:0e:53:98:ff:6c:95:d1:75:43:6b:
3d:13:fd:98:52:23:a3:e6:0f:da:d8:b7:4f:b3:a3:
df:fe:b5:31:a8:5a:08:47:28:88:83:2c:ec:d8:1b:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DC:78:84:FF:F1:6A:46:9D:5B:0F:F0:FE:15:5F:E0:4D:5D:5E:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2080::/46
Signature Algorithm: sha256WithRSAEncryption
b3:24:63:c6:55:7e:76:bd:69:70:4f:bc:a7:a9:ca:f6:49:05:
cc:eb:80:9e:ba:a6:5e:31:41:3a:00:36:52:cf:a1:20:0a:b0:
6b:09:67:ad:c5:93:1b:3a:a5:ba:51:64:89:b6:2d:62:64:aa:
a4:f4:88:18:06:9c:85:a1:a5:72:17:6e:11:81:c4:77:6f:c6:
19:18:4a:9e:77:cd:04:0c:1b:89:78:d6:24:43:d4:d7:fc:9d:
28:a3:9e:46:ba:88:31:98:b5:7e:20:6d:63:ec:88:5f:a3:97:
38:6a:f4:fc:7f:78:0c:5d:64:4f:ac:78:21:b8:ef:b1:33:89:
92:02:e8:90:91:97:62:d7:96:70:e2:fa:e8:bd:9c:f0:9e:73:
a7:4d:5c:54:bb:bc:d1:9a:b0:27:9e:8f:88:5e:b5:c1:e2:c8:
e2:ba:15:ba:e2:5c:0a:eb:47:e4:c2:70:df:b4:9e:5c:d9:79:
e6:e8:1f:d5:d7:4d:e9:34:32:61:49:b4:58:e6:3e:f3:fb:d9:
d0:73:d2:80:b6:8c:be:c1:97:87:18:51:bf:01:85:3e:d6:72:
4e:f8:1f:32:68:49:3f:10:66:72:d4:67:31:db:1e:e6:74:be:
13:b6:05:b5:27:48:0b:5a:07:b9:f8:1f:29:ca:7b:19:be:67:
f2:d5:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:36 2025 by rpki-client