Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
File: 5b65b415-a397-41d3-99dc-207c8689d0ee.roa (raw, json)
Hash identifier: UVt/Pw9gy4dyXRaEduUHEuqFp4igIgoDYSaU4cZk3Ro=
Subject key identifier: 77:A3:A9:CF:DB:79:2C:C2:0B:5E:C9:37:7A:D8:9E:BB:ED:EC:09:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1953A31127C9514C7041B80A1C49A660F8003444
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
Signing time: Fri 21 Mar 2025 15:00:05 +0000
ROA not before: Fri 21 Mar 2025 15:00:05 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:53:a3:11:27:c9:51:4c:70:41:b8:0a:1c:49:a6:60:f8:00:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 21 15:00:05 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:2b:e2:e7:3a:7b:5d:22:81:65:0e:c5:30:
d1:2a:e7:f3:4f:f4:70:bf:1c:c9:92:65:91:70:40:
f8:5d:40:51:7a:55:8d:41:61:34:cf:e3:89:1a:10:
c2:82:88:8f:cd:ff:80:54:32:75:31:9a:82:7c:a2:
71:7c:cc:df:df:82:e2:7c:6f:b8:c8:b2:4c:bf:0b:
2f:94:18:2b:cb:b5:bc:90:b3:96:b8:ee:fe:ba:f8:
02:a7:f6:fa:2d:f4:78:3f:b9:a9:3c:c8:00:b9:f5:
d5:13:5c:6e:b8:62:54:d8:ad:2f:67:ba:2b:64:86:
2d:98:eb:f6:50:40:73:35:d1:12:72:35:bf:76:8e:
f9:9c:8c:96:3f:31:58:0d:b3:d4:e9:1c:7f:32:b1:
f2:12:43:bc:2c:a1:ad:59:34:6e:08:08:ea:34:15:
f6:39:83:00:fc:7c:45:59:ad:fd:6e:31:c2:03:ea:
17:f3:7d:67:1f:8f:54:c1:b0:83:e4:63:4c:ad:5d:
05:df:39:0f:a1:41:7c:55:55:64:81:30:75:bd:97:
11:d8:b2:d5:b4:0a:b9:8a:ed:91:2d:39:41:92:eb:
f1:1a:14:cf:ef:53:1e:c6:30:e4:fa:f5:51:71:5c:
fd:4f:3d:ea:b1:a8:4f:bf:d8:6c:bf:e1:f9:88:f8:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:A9:CF:DB:79:2C:C2:0B:5E:C9:37:7A:D8:9E:BB:ED:EC:09:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:7f:5d:28:51:74:51:6b:31:22:e5:65:32:cd:1b:96:2b:61:
9b:dd:96:97:a4:2e:64:f9:1b:0e:82:fb:f2:9a:00:3e:9c:0f:
62:8c:63:96:84:49:26:fa:84:dc:f9:8f:d4:ff:91:c3:63:76:
8b:dd:9a:0c:a7:6d:f7:bf:bd:81:bf:a9:83:2e:ef:94:b1:c6:
8f:78:55:ac:97:6e:38:c8:9b:d5:90:c6:75:d7:c7:b6:f3:42:
a7:7e:82:54:81:25:8b:d6:01:60:1c:f6:0d:63:34:07:4c:38:
51:72:ac:e3:78:ab:5d:67:e9:6d:07:72:9f:72:44:66:2e:ff:
41:29:07:72:43:0a:4b:a0:c0:71:9c:04:5a:41:ba:fd:ea:d6:
ad:36:d1:62:e1:a5:35:cc:3c:5d:1a:10:c7:a0:69:9d:d7:f7:
4a:1e:55:fc:06:92:39:28:1f:6c:ae:25:14:af:78:f1:69:e9:
f6:ef:fa:21:4b:30:25:7e:51:98:0c:33:47:3e:6e:24:f7:93:
ba:ea:e3:60:42:45:ac:f9:48:4a:93:be:15:51:c4:36:32:f4:
fd:91:06:7f:1d:59:1c:06:74:dd:93:18:89:fe:72:78:2a:02:
10:be:62:d9:8b:77:72:f4:d8:f6:76:0a:34:23:17:e0:bd:8a:
a0:ea:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:44 2025 by rpki-client