Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
File: 5acd35f8-42dc-4211-8060-407321cbd4dd.roa (raw, json)
Hash identifier: L+bN+3oWu9r8z/WSgadS17AyEyqLnUSD12qjaTlbhOg=
Subject key identifier: AF:C1:41:DE:F3:B5:AB:6B:AA:87:7B:F5:09:22:CB:51:98:BB:6D:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E3A2E5B9E7E8BDED5AAD6F484FB71A58F3544EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
Signing time: Wed 05 Mar 2025 17:10:30 +0000
ROA not before: Wed 05 Mar 2025 17:10:30 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6040::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3a:2e:5b:9e:7e:8b:de:d5:aa:d6:f4:84:fb:71:a5:8f:35:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:10:30 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:f4:7f:c4:ec:07:05:a5:9b:77:16:1d:5b:
31:83:d5:a5:c1:bb:f0:55:0c:71:a3:4d:10:b2:4d:
e4:6c:e4:26:f5:b9:ee:0e:ec:16:70:e9:59:b6:66:
56:9f:68:6f:df:08:49:ac:98:ab:65:89:19:39:de:
5d:5c:ce:76:dc:98:70:11:4c:78:4d:2c:3d:a8:bf:
c3:18:51:ab:e5:93:6c:23:e3:34:33:ae:35:ca:e9:
4a:8b:ec:73:ee:af:49:45:15:b2:0c:24:1c:b7:6c:
b9:fd:5a:dd:44:63:b5:25:85:80:af:dc:0e:bf:51:
42:b8:79:94:3f:bb:1c:eb:65:53:f3:4e:93:83:41:
5d:76:ad:cc:88:e9:12:e7:cb:9e:54:45:f8:e4:d7:
a5:b8:86:c8:81:dc:dc:9b:5a:1d:75:f5:85:86:59:
88:a5:e9:5d:fc:21:39:dd:b1:da:d4:61:77:ca:d1:
cf:78:7c:f3:b5:34:1a:f2:7f:74:27:a1:f3:99:e9:
41:46:19:b2:b5:1e:27:a0:b5:44:7b:a6:3f:05:43:
65:98:1d:90:5a:d3:32:e2:8e:e7:f1:e7:36:7d:26:
cc:ca:aa:92:93:31:a4:ef:ae:83:6e:20:bb:72:70:
87:24:07:e2:78:8d:c0:4a:0f:4c:4c:d2:66:ae:33:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:41:DE:F3:B5:AB:6B:AA:87:7B:F5:09:22:CB:51:98:BB:6D:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6040::/46
Signature Algorithm: sha256WithRSAEncryption
34:4f:fc:22:05:53:b1:ec:9a:9b:0a:f3:72:d1:e3:0b:1e:35:
55:2d:9a:07:03:a8:9e:6d:ce:e6:a9:4e:1c:25:88:f0:47:cf:
a6:e3:f9:18:30:2e:22:bf:0d:5e:02:f8:ee:a8:e7:2e:f3:de:
52:a1:fb:f7:c8:88:63:30:b8:8f:cc:c7:fb:4e:08:97:2c:82:
37:4e:11:47:c0:c6:f2:eb:d7:06:77:3c:66:ab:d0:f0:4c:67:
9d:86:71:37:d4:82:f9:53:1c:20:8b:02:b0:31:85:98:22:ef:
e4:c0:f5:c9:d5:97:95:88:5e:3a:c3:16:cd:38:c4:91:62:f4:
26:e1:9a:f1:dd:c9:04:d6:c5:81:8f:56:45:54:3c:da:41:c2:
ba:98:f7:79:82:c2:61:8a:e7:ef:3b:1e:78:99:00:f2:51:a4:
7f:11:00:e4:8f:ff:75:9c:df:42:02:a3:80:8d:b1:35:a1:37:
08:3e:28:3a:c9:1f:53:5c:3f:02:0d:2b:f1:e4:f9:dc:04:a6:
2d:8a:34:60:e7:42:5d:ea:d5:2b:6b:31:d3:14:21:bb:b9:7d:
63:20:45:cd:d4:37:cb:e6:7a:b5:10:4b:c2:f7:b1:e1:d2:47:
27:06:c6:19:6c:68:7a:2f:c9:aa:fb:f5:1a:61:7d:a8:1c:92:
76:65:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:46 2025 by rpki-client