Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: OEGMd4xrf0SKLZ/QI0f06k0NQ0Jb+Jj/umkk9elsTdY=
Subject key identifier: 16:E8:4B:2E:2C:76:1E:BA:54:A4:31:61:77:05:13:0D:EB:75:65:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67678013928AA0201F786D2DAB71BF50FD287164
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Wed 05 Mar 2025 17:21:46 +0000
ROA not before: Wed 05 Mar 2025 17:21:46 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:67:80:13:92:8a:a0:20:1f:78:6d:2d:ab:71:bf:50:fd:28:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:46 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:94:de:a7:91:7b:a4:36:83:6b:41:0c:c8:
84:92:b8:f3:48:b6:df:83:08:e5:f0:e8:72:a2:ea:
0a:cf:68:30:6f:00:8f:2f:25:51:3c:d6:1e:85:a9:
bf:dd:af:30:2c:ec:2e:92:28:22:f4:a4:f5:fe:b5:
8d:8d:5e:4e:be:dc:0b:52:7b:84:e8:4e:24:53:1b:
23:e3:e8:a5:97:22:77:f6:6e:32:64:6a:72:95:4f:
b3:85:2c:a5:f2:11:cc:0e:60:f4:d2:ab:dd:86:c0:
91:e5:63:d7:9d:a3:21:fd:cf:28:3c:66:af:0c:30:
a0:b0:29:43:cd:89:d8:19:11:b6:f4:82:dd:4b:cd:
0d:b2:f9:a3:55:0f:f9:b8:d2:ff:f6:ed:36:37:5d:
53:0c:1a:b5:00:7b:e7:2a:16:f0:20:a9:e5:c4:fc:
9a:00:31:2c:71:70:2e:8e:d5:f0:bb:54:0d:d0:66:
9b:c7:4c:ca:2b:87:12:2d:87:9c:7d:28:7e:10:e5:
4a:fa:af:69:8f:35:a9:36:11:f9:70:7d:2b:7b:aa:
c7:9f:bc:48:2a:a3:f9:1e:45:95:fa:1d:aa:b0:5c:
43:f2:66:0a:78:6c:20:ca:8f:17:62:b1:bc:65:35:
e6:97:35:9b:dc:9e:d2:3e:73:17:48:3f:e0:54:f0:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:4B:2E:2C:76:1E:BA:54:A4:31:61:77:05:13:0D:EB:75:65:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
64:39:f9:1e:bb:a8:a3:2b:3c:07:37:b5:23:91:09:d7:1f:df:
27:9e:ee:d4:67:ad:cf:f0:73:b6:e0:9d:f3:73:c8:8e:e3:2e:
bc:63:d2:16:c6:a9:84:5c:e7:13:67:7c:fa:6e:1e:c4:98:e5:
a2:45:aa:c4:a4:0b:77:75:79:ab:65:d0:8b:3a:d4:4f:c2:d5:
1c:1a:c8:34:e4:a5:57:a8:2a:56:2c:aa:82:23:45:a2:37:69:
2d:21:ca:3d:77:6d:40:9f:d6:eb:a6:e1:fb:88:a2:d0:58:e0:
d3:df:7f:43:6e:bc:9c:40:a6:9c:17:7b:d1:ae:51:ed:aa:01:
79:c7:83:82:83:9c:9a:1d:91:32:cb:35:7f:0e:55:b7:fb:7f:
fd:79:3b:70:c2:cf:d8:f5:57:2b:79:cc:71:72:e7:d0:8f:2a:
cc:48:44:ba:30:4a:4e:af:13:e3:57:0c:41:39:a9:63:88:2e:
d0:e1:f1:cb:11:9a:06:47:50:14:35:ad:7c:34:c5:1f:7f:a1:
ae:6c:84:54:22:80:a5:c6:f2:85:39:ab:13:d0:fa:0d:28:14:
fc:41:df:19:c5:71:52:1c:50:98:29:f7:6f:59:02:7d:00:ac:
45:bc:30:2d:9b:72:73:94:48:57:60:e7:58:6b:fd:70:d6:65:
ad:e8:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:20 2025 by rpki-client