Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
File: 53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa (raw, json)
Hash identifier: xwYj8ziOYT+TpNw+/BoxIbTgT1zmj8fIfwwDS67YdnA=
Subject key identifier: 7B:D6:F7:AB:7C:AF:20:79:C4:93:9F:0B:C0:08:0B:59:4D:97:AD:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 347943C1CF86F590B8F4E51B78A86007BB7E9B38
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
Signing time: Fri 21 Mar 2025 15:00:04 +0000
ROA not before: Fri 21 Mar 2025 15:00:04 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:79:43:c1:cf:86:f5:90:b8:f4:e5:1b:78:a8:60:07:bb:7e:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:00:04 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:35:72:e8:9d:d1:8a:f2:37:4a:c7:55:43:
b3:9a:2f:45:63:01:e8:76:6e:58:e6:ba:27:f5:02:
93:20:a3:84:ec:66:cd:47:90:8d:63:80:ae:7c:1a:
f3:35:f2:94:6d:7b:13:54:04:af:73:1d:8e:a8:87:
41:2c:3d:e3:3f:da:ce:4e:7e:4c:1c:0e:76:a2:b5:
0d:aa:f3:8d:06:87:0c:8f:e9:2e:ee:ba:cc:6d:00:
a8:e7:b2:9b:90:f0:61:40:8d:ae:b4:92:17:51:a6:
9e:0b:64:52:c3:2e:c4:ab:9c:af:23:3c:1b:be:47:
d3:de:ef:df:fb:62:ad:6d:b5:0a:4c:13:e1:6b:22:
a4:20:5b:72:9a:e3:97:95:72:5d:51:59:51:e4:79:
92:5e:80:a5:da:12:42:ce:1e:e8:41:66:2b:2e:85:
94:af:9c:1c:2b:7d:b3:04:90:80:3a:f4:91:16:96:
14:73:bd:9c:04:99:0f:09:b2:4b:fa:e1:1b:d5:e7:
e0:ff:14:3b:5b:63:0a:8e:07:d7:40:76:f6:a3:ba:
cb:42:36:44:13:de:1b:16:52:5f:d7:d7:6b:39:75:
17:2a:c9:20:a4:f2:4c:43:8a:b1:30:53:43:5d:31:
68:eb:5f:df:7e:a2:9c:c9:7d:b1:91:03:0a:86:d6:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:F7:AB:7C:AF:20:79:C4:93:9F:0B:C0:08:0B:59:4D:97:AD:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:2000::/40
Signature Algorithm: sha256WithRSAEncryption
14:2b:ba:6b:62:57:b9:44:49:37:59:70:cc:a4:bc:d9:5d:f4:
6b:3c:9e:2c:75:77:74:f5:1a:7e:5d:d9:fe:ff:8c:e7:a8:3b:
7c:b1:e0:19:b5:ca:5b:49:28:ba:ef:66:57:e5:ef:a8:d1:0c:
06:c4:9c:f9:33:9c:fd:8c:84:67:d1:91:fc:ab:39:fb:36:d4:
ac:50:eb:20:ca:48:11:e6:4d:ef:8f:64:1b:95:42:8c:47:95:
8e:87:98:9e:44:e2:53:8e:b2:be:6c:f1:a8:b2:16:c3:28:cb:
37:24:76:b3:01:a4:86:1a:07:3a:6d:87:3b:4a:09:db:1e:8b:
f6:29:91:a7:0f:bb:31:62:99:02:f1:aa:99:c4:9d:73:c8:f6:
27:d3:77:85:95:d1:9c:83:78:cd:d1:af:46:c5:e0:d9:5e:6e:
e4:1f:5a:1b:5b:3b:35:e6:11:a8:6f:25:26:29:b4:ae:cc:03:
67:18:4f:67:3c:bb:51:19:34:af:14:a6:16:8a:44:eb:6a:d0:
93:0e:07:5b:ef:77:70:cc:be:6a:5c:70:60:3f:c5:7c:e2:a7:
f2:7c:a3:02:8b:1b:31:bb:2e:0e:45:32:87:1f:c4:3f:da:1f:
a9:60:56:39:ca:2b:13:a3:ff:ca:e3:68:19:38:6f:2b:43:70:
5c:77:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:17 2025 by rpki-client