Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
File: 669652b6-0b22-49a0-b29f-dfb51835c988.roa (raw, json)
Hash identifier: E4OlEtCLUb8Lmnnc2FlataHefpF0j9x7+XUNMJANs04=
Subject key identifier: 15:4F:95:38:C2:4F:0F:1B:92:42:45:28:77:BA:F7:A6:DB:53:A6:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6976F95B8311E856F8B30F24D032DF2B32CE627C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
Signing time: Wed 05 Mar 2025 17:41:22 +0000
ROA not before: Wed 05 Mar 2025 17:41:22 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:76:f9:5b:83:11:e8:56:f8:b3:0f:24:d0:32:df:2b:32:ce:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:22 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:43:ce:1c:11:10:f0:b3:10:e1:38:1e:68:
dd:90:37:c3:10:11:a6:6d:3f:80:48:3a:c9:25:7d:
b9:2a:e7:7c:22:99:03:ce:00:84:77:cc:53:5a:3e:
76:32:92:17:25:8f:09:cb:45:09:61:e0:74:bc:92:
c6:26:82:25:20:c0:89:82:11:e0:24:4e:97:ed:f6:
b4:aa:b7:cc:ca:9e:b2:6e:89:3f:6e:9f:2d:03:84:
b4:7f:00:b5:dd:e3:cc:48:48:57:1a:71:ea:86:bc:
2d:a0:d4:27:18:2c:75:6f:fb:04:9a:16:e3:c2:12:
a8:f1:d8:c5:11:18:d0:2d:74:de:50:1b:7c:6c:c6:
cf:66:08:76:94:7a:66:bc:4b:ce:90:16:cc:8e:c1:
23:c8:19:67:5b:95:ac:a7:63:c5:8f:1f:14:a1:15:
8a:b4:57:39:c5:4c:dd:54:81:f1:d5:2a:95:14:67:
3d:9e:9c:fc:e1:50:14:6a:2c:68:9a:75:f9:2f:21:
3c:bf:af:65:5f:c7:d4:7f:21:4f:37:33:4d:c9:a1:
19:3e:0e:d5:33:33:20:79:86:46:84:03:bb:6a:b7:
d9:0d:11:28:02:7f:19:c7:e1:4b:54:6e:73:61:05:
de:1f:9e:0e:95:f4:67:57:e9:a5:82:08:7b:96:bc:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:95:38:C2:4F:0F:1B:92:42:45:28:77:BA:F7:A6:DB:53:A6:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/38
Signature Algorithm: sha256WithRSAEncryption
6a:94:b5:44:7a:9f:43:3f:d9:44:81:79:66:3b:84:ba:0a:a3:
8f:98:65:cf:32:fc:31:cc:e6:81:41:ee:f8:96:a5:2e:19:b2:
48:41:60:4f:7e:d7:e9:0c:1a:8d:5d:d9:07:9e:cf:3f:7e:06:
69:1e:81:12:95:97:4f:3b:68:a7:80:58:77:99:03:b9:5c:07:
1d:ce:86:14:27:e3:28:1a:6a:3c:4e:88:2e:13:cf:c2:9e:21:
d7:cc:18:e2:89:5c:62:0a:83:13:44:7a:9a:86:dc:7d:00:fa:
b6:d1:aa:1c:34:43:a9:f2:5d:06:ae:00:96:09:47:f3:a3:f0:
48:77:b0:21:75:48:01:ad:59:0d:37:36:09:c2:d0:54:7c:b0:
4f:d5:52:54:22:5e:a8:bf:b1:9f:3c:25:59:65:96:fb:a2:0e:
90:3c:f3:42:8f:16:4f:ac:12:2b:9f:23:37:2d:e4:0e:05:9b:
d1:e7:2f:a8:9c:b1:23:8a:42:f8:c4:1c:ab:07:23:54:c7:36:
0a:79:63:42:6f:70:8c:e2:17:e2:73:d9:5e:d7:19:16:b9:0a:
64:9f:3e:4f:4a:af:6a:47:b8:81:44:a6:93:0e:11:cc:6b:81:
81:78:d6:be:d5:f4:09:dd:22:df:69:6a:52:31:08:c5:ac:52:
fd:31:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:23 2025 by rpki-client