Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
File: 4622ab3d-f2d8-4bec-a18b-b056342928a8.roa (raw, json)
Hash identifier: ZKjEQPkv7ncOV4JCGEyOgXgqPJNeiL4ioljZFPsOD1c=
Subject key identifier: D7:D9:7D:4E:8B:0F:9E:51:F1:87:5C:39:B5:F9:74:BA:68:6E:5F:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A0BE3BA26B5AA197A93297E3E6611E64CF2303C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
Signing time: Wed 05 Mar 2025 15:21:24 +0000
ROA not before: Wed 05 Mar 2025 15:21:24 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:0b:e3:ba:26:b5:aa:19:7a:93:29:7e:3e:66:11:e6:4c:f2:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:21:24 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:fd:39:76:2f:3f:ed:59:59:4d:40:3a:01:
9f:c3:b2:8a:b7:3e:ea:44:6c:18:3d:b7:63:ba:7b:
a2:86:5b:16:ae:ed:1f:eb:1e:e0:85:3d:90:c2:ae:
50:3e:94:cf:eb:7e:16:e1:19:1f:34:fc:a5:a7:29:
f9:99:61:d8:08:2a:2b:fb:bb:f0:c4:03:01:f8:49:
dd:d6:09:23:65:62:87:f5:ea:c6:06:7a:d8:b8:72:
fe:04:1d:47:28:3f:0b:4d:c1:f6:cb:fc:4e:79:43:
e0:5d:69:63:6e:2e:2b:3a:b8:2c:42:96:be:92:d5:
97:49:dc:ef:54:73:e0:73:3b:04:48:29:0f:86:0b:
fc:2b:c9:36:17:db:74:92:0a:13:28:25:a1:43:6a:
85:17:fb:47:1d:fe:bc:45:83:ec:98:98:26:41:63:
d7:fc:ce:34:0b:0b:ca:85:64:3f:a9:eb:d7:ae:85:
50:19:c4:19:f2:ff:bd:e3:37:10:70:81:7b:42:05:
bd:a1:f0:5d:be:03:ca:e6:ba:31:4a:2a:7f:1e:8c:
95:20:40:21:ef:19:c6:8a:83:39:b1:05:4f:b0:e7:
9d:5f:18:42:49:23:2e:ec:af:24:cd:8e:62:55:46:
a8:1c:63:a1:a6:9b:7f:36:9f:7e:33:c1:aa:56:f2:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D9:7D:4E:8B:0F:9E:51:F1:87:5C:39:B5:F9:74:BA:68:6E:5F:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a080::/48
Signature Algorithm: sha256WithRSAEncryption
88:ac:25:20:3b:ae:87:b7:d2:3a:2c:bc:48:d8:6a:9a:b7:38:
b4:31:bc:b4:da:59:da:ae:81:3b:d0:84:e3:da:60:00:67:e3:
1c:49:e5:96:f3:f7:a6:53:a7:54:93:81:f7:eb:8a:fa:05:d8:
4a:25:79:ab:c5:33:69:31:12:c9:a2:d1:de:a1:f9:77:86:1b:
30:b5:07:ad:ea:93:36:1a:a8:53:3d:10:88:e0:24:50:33:e8:
8c:fd:90:08:41:49:3f:56:fd:b0:43:e2:34:41:54:e3:39:6c:
37:07:7c:08:ef:7e:a4:28:eb:35:19:5b:a8:9b:bb:c6:57:d0:
81:fb:f0:fb:83:53:eb:b3:3c:26:05:f1:d0:90:7c:44:99:0b:
11:f3:e0:21:24:55:ab:15:18:3a:25:50:7e:51:30:68:fb:44:
ef:3c:3b:e9:1f:9f:aa:5b:e8:73:d7:c8:75:b3:d7:b8:2b:f4:
36:f6:9e:a2:1f:4e:69:e4:57:06:74:09:07:a4:de:ed:47:47:
0a:dd:9c:4e:18:55:d9:99:d7:12:d9:17:b2:05:3e:27:f5:74:
2f:96:df:09:d3:04:95:93:60:06:19:c8:ad:b7:1a:4b:ca:ce:
34:96:59:d6:26:12:1f:23:74:44:d2:b8:83:f8:94:8f:b9:37:
26:12:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:15 2025 by rpki-client