Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
File: 68f2af14-43e2-4447-a8a7-f8fe713e249e.roa (raw, json)
Hash identifier: KA4LbHg5wwYmUFZPUI++J6KUavyua2w4vbH03JTbjkM=
Subject key identifier: 5C:EB:A9:D5:E0:A7:D3:95:84:0D:B1:52:C6:96:70:D0:3A:7D:75:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 796397BA38024AD184EEF77CE97F6BB165191BC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
Signing time: Tue 11 Mar 2025 00:10:35 +0000
ROA not before: Tue 11 Mar 2025 00:10:35 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:63:97:ba:38:02:4a:d1:84:ee:f7:7c:e9:7f:6b:b1:65:19:1b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 11 00:10:35 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:70:21:da:b0:f9:5f:d2:d9:1b:85:35:c5:
fd:d9:ac:b3:3f:4c:b5:80:71:83:08:5a:e7:64:5f:
82:73:ce:95:3b:8d:c5:b2:62:f4:c7:f2:2e:a8:2a:
e3:5d:2a:89:69:96:cf:18:d7:a6:ae:2d:dd:34:37:
1b:2d:00:a8:ff:19:81:a6:5c:95:5e:3a:53:da:13:
de:a9:b4:77:80:2b:da:ef:43:8f:a0:70:1a:c6:15:
78:d5:89:d4:df:b3:35:e4:b7:55:2f:5d:20:51:13:
c0:89:6b:37:57:26:95:5d:38:14:a3:04:fe:e6:71:
4c:74:9f:82:96:b1:ae:c2:6a:0b:ca:d5:42:72:29:
f8:31:f4:aa:83:84:80:7b:37:d8:42:b8:a7:5a:b4:
ad:2b:4e:26:46:3f:60:d3:30:50:b3:c6:d9:09:ff:
96:51:05:61:ee:23:42:b5:3f:7d:f3:0a:f3:34:1d:
7f:e2:26:f9:b1:7c:89:b7:aa:f8:6d:75:f2:64:3c:
26:9c:1f:55:76:df:18:99:e8:d1:e8:cb:31:27:12:
59:a3:24:34:a2:5f:c5:30:26:bf:51:25:5d:8d:18:
92:d1:29:3b:90:57:12:af:35:90:ab:d4:6c:44:b9:
15:34:e2:4c:7c:47:8d:b0:c1:bb:70:ab:b7:80:46:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:A9:D5:E0:A7:D3:95:84:0D:B1:52:C6:96:70:D0:3A:7D:75:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f:800::/37
Signature Algorithm: sha256WithRSAEncryption
36:d0:64:02:ee:69:72:0c:a2:cf:fd:35:5e:7e:b3:76:6a:0a:
46:59:6b:e3:6b:02:45:73:5a:e7:52:70:8e:a1:0b:36:ce:b8:
17:aa:36:fc:97:20:29:d3:a3:67:44:4d:f8:8e:18:80:42:96:
55:b0:79:0a:73:de:e6:3a:22:a3:64:f8:1b:b1:4f:04:4b:39:
07:64:ec:bb:0c:33:c7:c3:b6:bb:66:a5:f6:70:07:6f:5b:f3:
ee:de:f0:35:9d:1f:44:b3:71:f4:1c:c0:f2:e5:22:a8:4c:9b:
eb:43:ce:4a:51:8b:36:1e:6f:79:e3:0c:b6:14:e9:cf:43:24:
33:de:40:fd:aa:f6:ef:88:44:18:ca:63:2c:7b:86:e0:f2:14:
ad:65:38:35:f6:87:cd:20:66:09:1b:f6:97:79:46:15:b9:69:
4b:3c:b9:6f:9a:e2:35:d3:4c:bf:9c:a8:4c:26:65:f0:94:89:
7c:44:c4:3a:f0:82:8b:64:db:4f:f5:c5:50:40:61:ab:5e:f8:
f9:54:53:cd:ee:87:df:25:d1:b1:f8:3b:3a:57:d2:8f:8f:5c:
6b:9d:d3:5a:eb:03:2a:ab:ea:17:aa:3f:b3:3c:b0:95:87:69:
f3:9a:d3:bc:ad:77:08:d3:58:ff:55:15:2b:0f:65:79:27:31:
ff:62:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:34 2025 by rpki-client