Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
File: 6dd22553-f0bb-4053-b6a2-363adf7209b5.roa (raw, json)
Hash identifier: ntBRdSw8GEkeb7ZypXPenEVpz26ZBFl9ZRmsHLkn5oE=
Subject key identifier: B9:41:C6:2B:29:8B:C2:80:FC:6F:0D:67:C2:E0:9C:2A:4D:0F:FE:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 643FE47F3D6E2A3692C552E13E4C5C11EAA6F1DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
Signing time: Wed 05 Mar 2025 17:11:23 +0000
ROA not before: Wed 05 Mar 2025 17:11:23 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3f:e4:7f:3d:6e:2a:36:92:c5:52:e1:3e:4c:5c:11:ea:a6:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:11:23 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:72:20:00:c5:e8:43:d6:0e:b9:36:16:3b:
5e:2e:0d:63:33:f6:9e:c4:78:98:f6:30:95:3c:30:
4f:3b:87:f3:f4:6d:8a:33:45:88:8d:16:50:6b:d1:
30:83:09:ee:71:f1:cf:80:3e:d5:79:e6:b2:4e:84:
eb:aa:33:72:64:86:43:d1:bf:91:c1:df:a4:f3:34:
ec:a7:bc:d6:64:f2:bb:97:8c:c4:de:a3:c4:fb:f6:
ff:7b:35:ba:1f:62:94:a7:ae:95:1f:20:f6:cf:6d:
bb:d4:2e:9b:18:a2:a9:fc:42:4c:16:91:25:5d:27:
e8:f9:1c:7e:fb:40:48:ae:41:51:91:f6:48:96:6c:
83:69:7d:86:d3:da:6e:c4:ee:06:27:b7:b4:e7:b1:
28:1f:2d:2f:9b:30:e2:5c:f2:2c:ab:d9:60:63:b4:
7d:4c:42:2e:f3:33:23:e1:e3:22:6d:c2:b7:24:5f:
e0:e9:4e:4a:03:b6:74:2d:cd:05:73:c4:b8:0e:85:
69:2a:12:39:9f:04:e6:03:88:64:39:b8:6c:c3:3c:
74:f6:50:b4:ed:bc:e1:4f:48:92:6d:da:f8:9b:ff:
ce:84:af:e8:fb:a4:0b:76:0a:93:e2:48:08:f8:ff:
91:c3:be:9d:d6:eb:29:42:ee:7c:c9:b1:c4:da:80:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:C6:2B:29:8B:C2:80:FC:6F:0D:67:C2:E0:9C:2A:4D:0F:FE:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5080::/46
Signature Algorithm: sha256WithRSAEncryption
69:0f:71:11:53:c5:76:1a:af:40:d6:af:28:6c:6b:ed:db:fd:
bb:c9:62:f1:c6:fd:04:66:64:97:45:d0:a5:a8:21:b2:f3:d6:
c0:9b:87:e3:5f:68:7e:d8:d3:a8:3f:78:a5:0f:a1:c6:5a:66:
02:9a:b8:f2:da:48:7c:e0:d9:0c:51:ff:98:3a:da:0a:f0:52:
0a:bc:79:90:50:59:19:a4:7a:cf:46:df:5c:c2:56:79:7f:55:
28:0f:8f:6c:1a:92:cf:db:3a:f0:63:35:bc:4e:71:cb:a8:f8:
97:11:1e:f6:d9:1e:37:4a:9f:8e:24:9b:a8:ac:07:f9:ec:3e:
1c:d7:cb:3f:20:c1:1e:75:33:8a:4e:ae:20:17:9d:bb:cb:fc:
51:61:67:77:e9:38:22:e2:74:39:66:3f:a7:1c:15:c4:bd:69:
18:50:f6:5c:56:03:14:e3:2e:d7:4c:e2:86:f1:59:34:32:da:
ae:7d:46:20:8c:1c:68:b8:22:2f:7f:ce:49:94:a2:9c:0c:22:
90:a2:3e:56:5d:78:3f:6e:1a:08:a2:7d:11:5b:03:06:17:63:
4c:68:e6:e2:99:7d:f9:a3:57:95:a9:f4:e2:15:4a:da:d5:9e:
cc:e6:a0:91:46:ce:cb:3a:b0:8a:e2:a8:10:c9:d1:f1:6c:35:
fb:92:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:01 2025 by rpki-client