Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e95266c-c25e-4290-89ff-746c48b05733.roa
File: 4e95266c-c25e-4290-89ff-746c48b05733.roa (raw, json)
Hash identifier: RjiZNr6hnt4nBvOsTbhvGq6OUW780CMigrve/pjchwU=
Subject key identifier: 0B:A3:26:F9:E8:2A:51:3C:39:A9:06:EA:BA:C4:4E:13:1E:D3:C2:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46C0647655249DFCBE474F5457EAADB0B41A377F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e95266c-c25e-4290-89ff-746c48b05733.roa
Signing time: Wed 05 Mar 2025 17:20:20 +0000
ROA not before: Wed 05 Mar 2025 17:20:20 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:e0c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c0:64:76:55:24:9d:fc:be:47:4f:54:57:ea:ad:b0:b4:1a:37:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:20:20 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:5a:80:05:c2:5c:95:ea:3b:d2:2a:13:b2:
2c:59:ca:48:b3:c2:59:27:74:91:93:be:8a:8e:47:
eb:d0:5e:5b:85:83:49:e0:7c:c0:0c:e4:bb:d3:e5:
c4:6f:ce:21:88:ab:a7:09:e8:b7:87:d9:8c:cc:4a:
4a:68:13:77:cd:cb:40:5b:0a:58:d3:3e:64:0a:02:
62:4f:99:f7:d6:14:82:3a:79:e5:d9:b7:5c:8a:7c:
08:6f:fa:a2:29:d9:51:09:cd:d2:8b:d7:8e:6a:1b:
1a:bd:32:14:f4:a3:92:90:a8:99:73:8d:10:f7:41:
c4:de:41:91:d0:0d:8a:56:78:0f:a2:65:a9:e1:86:
b8:8f:2c:73:94:14:ec:aa:39:fc:7c:b7:97:66:fc:
72:9c:1b:32:21:67:97:1e:57:28:5e:94:44:bc:07:
60:cd:f8:8d:c6:32:8b:33:00:de:3a:76:33:af:86:
7c:08:2e:9e:33:20:d8:f6:bf:35:3d:45:e0:cf:44:
13:59:70:8a:8d:9e:cd:3b:8c:9e:7a:1d:3d:e5:df:
6c:c3:a4:01:e0:12:1a:81:9c:3b:10:aa:fb:9d:91:
19:ee:da:4d:e7:e6:7b:77:9c:f2:87:1e:bd:a5:67:
c2:ad:df:61:1b:ff:07:10:39:36:4b:e9:10:14:8d:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:26:F9:E8:2A:51:3C:39:A9:06:EA:BA:C4:4E:13:1E:D3:C2:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e95266c-c25e-4290-89ff-746c48b05733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
07:9f:b6:e8:54:9d:0b:3f:c3:12:b8:ae:d2:ac:fa:c7:89:15:
ff:37:0f:db:01:25:ec:f6:a5:5b:14:7e:38:1e:c8:ac:ad:32:
13:7c:c8:2f:c6:cd:ad:a4:71:77:95:e0:70:f5:f6:17:c9:73:
0b:46:1b:e2:b8:2e:9d:f5:53:b5:16:86:d1:70:8d:78:1b:6e:
e4:5e:ba:c3:9a:87:ed:95:39:ae:9f:15:31:81:6a:d9:48:61:
91:8d:a8:7d:b4:2b:ff:0c:ed:a4:5a:3a:87:ab:1a:68:83:46:
d8:16:39:04:69:66:be:5e:e5:ed:80:9c:06:c8:d1:fb:fa:87:
39:55:cb:93:49:be:58:85:cb:28:30:16:42:2d:72:61:d3:74:
08:80:c4:5b:0f:47:02:77:7b:c4:10:45:82:84:09:3d:03:00:
35:a8:2d:33:cf:aa:f4:d9:a4:eb:11:8b:69:d1:7f:a5:74:86:
55:84:b4:6d:16:c0:b1:21:dd:45:46:8c:1b:29:c5:f4:c7:d8:
49:db:d8:4b:4b:c2:9a:23:5d:d7:e0:4a:f2:5f:06:1a:c9:db:
3f:72:f7:4c:1c:a9:d7:06:3a:01:a1:9f:af:8e:43:54:43:13:
fb:27:ff:57:ac:34:b2:b6:49:18:10:5a:c7:f0:c6:dc:0b:18:
97:c7:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:19 2025 by rpki-client