Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
File: 5f28c807-572d-4641-be39-53109963f4c3.roa (raw, json)
Hash identifier: lOBUMypVX2hqFuJ8c8fSzpEnmSsUPF1Q/yJsB354MsM=
Subject key identifier: 6E:67:E0:F2:EA:12:33:7E:58:CE:6D:9D:66:DE:D5:C6:83:32:5C:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 246EB65CC1FACE67874028027F5188AA163B3DC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
Signing time: Wed 05 Mar 2025 17:20:50 +0000
ROA not before: Wed 05 Mar 2025 17:20:50 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6e:b6:5c:c1:fa:ce:67:87:40:28:02:7f:51:88:aa:16:3b:3d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:20:50 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:11:1a:dc:c2:92:ce:7f:8b:b6:a3:1d:ac:
e9:4a:60:de:2e:9f:d6:90:d9:c9:75:2b:4d:e2:74:
49:44:aa:fe:8a:3f:b2:34:4b:64:9b:43:a2:37:40:
3b:48:ad:8f:e2:ad:26:6d:02:88:51:b5:28:56:5c:
f7:67:8c:7a:a7:59:ed:08:85:19:a1:e7:b1:5d:10:
b2:6c:9c:b8:ee:79:14:5d:95:5c:53:25:5a:bc:f9:
c5:3a:f9:04:5c:66:6e:4b:35:a3:26:5a:ae:43:a3:
bf:c9:12:85:e7:1c:ab:fe:85:35:3d:9e:17:aa:f0:
9b:f5:62:cd:28:21:be:37:59:2b:67:ec:f4:78:81:
7b:12:c1:e4:4a:5e:13:eb:d3:0b:fb:e9:2f:90:d4:
c7:1e:d6:e5:e2:77:99:95:6a:df:a4:45:88:98:3e:
ad:64:3a:d0:4b:e9:4a:5b:6e:2e:fa:d2:14:72:77:
ad:60:2e:8c:a9:32:0b:24:5a:a2:1e:e1:22:df:80:
df:ee:98:07:2d:08:cd:1b:aa:d0:90:90:b9:fe:ac:
38:f2:90:85:0c:58:71:65:47:64:19:2d:3f:04:af:
cb:f6:30:16:74:9d:93:04:8d:02:99:91:01:2c:05:
d8:45:78:81:5c:7d:97:17:69:f5:88:d1:c5:a9:1b:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:E0:F2:EA:12:33:7E:58:CE:6D:9D:66:DE:D5:C6:83:32:5C:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:a000::/40
Signature Algorithm: sha256WithRSAEncryption
25:0c:2c:c1:5a:82:54:30:45:68:54:7c:ad:ff:92:7b:34:4b:
f4:9c:bb:44:a1:98:ba:81:00:22:c5:7b:42:a3:8d:36:f7:4f:
ef:3a:b3:26:85:ea:a8:48:d9:56:ad:70:4e:c7:a0:07:2b:e3:
3a:ad:1a:bd:6b:91:52:ca:d0:5b:75:13:f2:6d:1d:ed:cd:63:
03:93:4e:d7:96:aa:fb:9a:2d:64:44:8f:cc:ef:2f:44:61:d8:
4d:2e:a5:c0:c6:d1:1e:16:54:f2:57:72:b0:d8:a7:84:96:24:
d2:63:f4:ba:ec:d2:5c:77:98:c4:46:fc:7d:77:df:4d:0e:b8:
0b:6b:ce:86:71:e1:d4:73:3f:9a:cf:d6:f5:83:d6:19:07:c2:
34:64:4e:53:2c:0d:5a:eb:28:97:c5:40:c7:8a:80:f3:be:05:
ec:5d:a5:7d:73:c3:c9:26:57:92:31:29:d2:2c:04:7a:3a:2e:
a8:37:d4:0f:94:44:10:ea:56:bb:ba:8f:04:f0:4c:a6:c7:45:
8f:37:ce:36:70:d9:48:7c:01:73:05:0e:bf:57:14:8f:3c:d2:
bd:c6:03:46:97:5c:15:15:2a:02:33:44:96:d4:85:88:c8:6e:
51:53:0d:58:1c:5b:57:76:10:02:90:07:15:2f:15:e1:01:7d:
d7:1b:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:18 2025 by rpki-client