Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
File: 5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa (raw, json)
Hash identifier: 9++NWnL6WLTZ1sQ3Ut8pGCXvs0b2uMeZLHuyp2i0V10=
Subject key identifier: FC:B3:E3:EB:6C:4F:28:3D:3B:06:C3:BC:B7:65:D7:68:CE:E4:5B:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 534F9805977E47221222CCCE12B784518F7DA5C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
Signing time: Wed 05 Mar 2025 17:31:15 +0000
ROA not before: Wed 05 Mar 2025 17:31:15 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4f:98:05:97:7e:47:22:12:22:cc:ce:12:b7:84:51:8f:7d:a5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:15 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:16:44:2c:7b:dd:47:51:5d:7d:af:44:8f:
bf:5d:e5:a6:3a:b3:d6:5a:b4:68:48:55:30:69:52:
f4:e8:bd:bb:b4:4d:17:e6:fd:a9:71:a0:82:35:d2:
c8:19:8d:5c:78:50:49:ca:6f:7d:4f:e6:55:78:b0:
e8:5f:b7:6b:29:cc:25:c3:3c:92:e7:01:0c:32:a1:
e6:ca:3d:35:a1:0b:76:fc:65:8e:17:5f:81:15:a7:
b3:c7:8d:93:94:8f:53:3a:fc:cb:44:af:92:2e:0d:
94:bf:f1:c3:f1:f5:52:11:be:52:1e:4f:3f:aa:8a:
ae:d7:d6:bd:15:81:18:d4:bc:af:3d:61:1c:ae:f8:
53:b8:34:13:05:0d:8c:a5:e1:39:ab:f0:36:82:48:
18:95:e9:0d:86:33:91:9f:0b:b2:e7:09:5f:68:43:
b3:1c:fd:71:83:ce:c2:34:9d:99:94:42:83:29:89:
e6:58:92:87:8c:a7:b3:31:8e:84:3c:65:18:d5:0b:
fc:cc:d1:aa:37:d4:86:8f:e1:ed:b0:66:58:af:02:
af:d6:85:b3:81:81:55:52:a8:37:66:21:65:ba:6f:
40:a3:c9:ba:cc:5f:4e:6d:29:27:f0:8c:56:3f:cd:
c2:ac:79:db:f4:57:36:2d:7a:da:b0:2a:e1:c7:13:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:E3:EB:6C:4F:28:3D:3B:06:C3:BC:B7:65:D7:68:CE:E4:5B:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:77:fb:22:02:b9:4c:79:05:48:38:17:ea:7a:bf:d1:ad:17:
92:8d:3c:5a:ac:a1:85:41:42:13:e9:a3:6d:1c:8e:2c:e3:6e:
c0:52:1b:76:e6:a5:70:b5:1f:db:a4:0f:b4:c4:2a:1d:86:3f:
65:c2:f0:fc:00:61:8d:74:ba:e9:ac:28:f6:07:11:8b:56:f9:
f9:60:da:e8:c8:17:50:3b:6c:59:c9:76:50:6f:03:ed:00:24:
1e:8a:09:db:3f:61:fb:63:c7:89:46:2c:59:2a:a5:f6:e4:4d:
ef:15:1a:19:48:0b:f5:0c:13:ea:8c:fc:41:81:60:d6:cc:94:
22:ef:fb:7e:cf:03:d3:2f:c5:97:3a:3f:f0:91:1e:f9:c2:a5:
a8:66:a6:6d:46:c4:34:ac:a1:29:b0:dd:30:62:c6:ff:22:33:
53:1c:b4:0b:cf:e0:49:90:b7:c9:e6:dc:79:29:0b:ed:7f:fa:
07:96:94:b5:af:b5:be:18:f5:0f:98:ac:43:32:a5:86:50:0c:
fb:e2:d0:f0:35:25:40:b2:68:1e:db:9c:51:b0:c0:09:af:60:
b7:b2:dc:f8:94:48:be:f9:73:08:2f:7c:97:42:11:2a:99:07:
27:55:a0:84:53:7e:9d:af:9f:91:07:67:20:e2:e4:7f:4f:d2:
d2:29:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:25:01 2025 by rpki-client