Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
File: 6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa (raw, json)
Hash identifier: 8Lc6KhR1dLzS6rXABGTwvYfk18TXZvyIAL1Q2VXWAp8=
Subject key identifier: C5:1B:DE:BE:C7:7F:36:04:3E:9B:49:95:12:D6:58:30:B7:E5:6B:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 275845AC7F10EC8B1653A3ED5FAAB7F7A4060324
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
Signing time: Wed 05 Mar 2025 17:10:26 +0000
ROA not before: Wed 05 Mar 2025 17:10:26 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:58:45:ac:7f:10:ec:8b:16:53:a3:ed:5f:aa:b7:f7:a4:06:03:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:10:26 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:6c:12:06:30:87:6a:c9:57:cd:3f:9b:bc:
6d:e7:ee:c4:6b:15:7a:ce:1a:fe:5c:6e:7c:33:47:
9c:72:35:63:25:cf:89:e8:82:26:6d:ac:ff:9d:d1:
0b:07:db:5f:09:63:af:29:4e:10:26:49:2e:e2:2b:
12:d0:bd:37:e6:07:82:cf:0d:95:5b:2b:fa:3a:39:
e2:c8:a7:24:d9:3b:41:19:9d:1f:76:97:7e:d1:34:
b6:7d:2f:d4:07:8e:03:91:8c:b8:f8:57:dd:32:5e:
04:7e:d3:8c:a3:bc:83:4f:1f:5f:a4:d9:9e:45:85:
e9:01:37:e6:77:a4:70:28:a7:10:fd:47:99:11:65:
5e:49:ba:24:2f:7b:e0:ce:1d:8f:8b:75:be:61:fd:
89:34:56:90:03:10:07:1b:eb:5f:8b:5a:a7:c3:d5:
dd:b4:b9:2f:6a:78:de:2e:61:f9:85:88:7f:73:00:
53:45:e9:aa:09:69:86:b5:35:bb:e4:cc:c2:70:de:
3b:c6:bb:18:a0:e6:b4:dd:74:1b:7f:1e:b8:19:3b:
d4:28:01:40:ca:df:ee:8a:6b:55:20:8d:ab:3c:80:
80:f4:54:41:78:e4:50:55:58:54:78:8b:43:a4:7c:
8d:7b:11:0a:73:d4:7e:c7:a4:e6:db:36:63:bf:60:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:DE:BE:C7:7F:36:04:3E:9B:49:95:12:D6:58:30:B7:E5:6B:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
17:33:54:5d:43:f2:fd:56:66:99:a3:80:e2:ea:18:17:44:7f:
b8:d6:16:05:18:c7:eb:77:6a:0b:0d:85:31:33:e5:18:2a:a0:
8a:8d:8c:e7:ed:90:26:2d:27:78:0c:b4:d1:b6:e6:dd:98:78:
ee:9c:eb:2d:58:dd:74:5a:ed:57:9b:9f:97:92:ae:46:7d:58:
a9:40:ce:81:48:51:d4:9c:8b:8e:3f:a6:07:fd:4b:6e:3d:e7:
2a:ab:75:bc:d6:15:8b:4e:de:b9:58:f4:64:56:d1:5f:9a:d2:
a0:f6:74:6a:92:2d:0a:27:2b:fe:16:9b:ec:ff:f2:5f:36:62:
1b:14:9f:84:6d:f8:3a:f1:ec:5f:5e:a1:02:2a:7a:c2:12:2f:
eb:5b:90:27:8b:d2:b9:3e:4f:53:59:db:48:c9:a1:9b:c9:0d:
d8:ad:90:10:91:f0:e1:1b:3a:b3:fd:7c:46:a4:14:21:ee:24:
7a:02:66:d6:d4:18:1e:95:3c:98:0c:f0:3a:5a:07:8f:ed:2e:
bb:a5:14:12:25:4c:06:ba:55:07:58:d2:9a:b5:e5:ef:5d:fc:
40:cb:b1:4b:5c:52:0d:e9:84:9f:c6:c7:6f:25:89:d4:94:59:
80:f4:8f:f6:14:22:b8:35:d1:fa:9c:a8:1e:09:e9:5f:af:aa:
b9:7f:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:36 2025 by rpki-client