Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
File: 6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa (raw, json)
Hash identifier: pzRlEoaVSm6FUhm96aK8mV/gO8oPnF48xXVjGw5umNE=
Subject key identifier: 1F:94:AE:13:56:E7:16:E6:77:8E:36:05:AE:2A:0F:42:45:A3:F5:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24FBDD9DE0D860C96471F6AC032286559B842AB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
Signing time: Wed 05 Mar 2025 17:41:56 +0000
ROA not before: Wed 05 Mar 2025 17:41:56 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fb:dd:9d:e0:d8:60:c9:64:71:f6:ac:03:22:86:55:9b:84:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:56 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:00:ca:ae:df:77:d4:f4:c6:4e:48:71:30:
a7:c2:15:7b:3c:03:54:d1:42:48:a5:ed:17:d8:07:
25:05:08:c1:17:7c:6c:a2:34:74:8a:fc:f0:ea:9e:
e6:fa:12:c4:af:b2:83:b9:d1:1f:cc:21:58:01:6e:
d7:9b:de:d2:2f:52:ae:45:be:11:38:4c:6d:4c:e9:
3c:ad:67:da:c6:0f:03:1d:f1:b9:31:ee:8b:09:0d:
2f:4e:15:72:6a:ce:86:97:97:aa:9e:7c:62:37:a9:
c7:13:c7:b6:2b:90:66:5e:c3:36:22:94:03:19:ef:
de:e9:7f:89:76:ba:86:15:61:44:2d:a7:cf:4c:51:
ac:c9:28:2a:2e:24:81:b5:b4:74:51:f5:94:da:f4:
f0:29:ea:4f:2f:03:2b:f4:90:cf:9b:ad:ef:ee:db:
87:33:3a:1f:43:67:70:97:b5:98:26:76:81:32:32:
62:4f:ea:5c:92:d4:9a:c3:44:1a:ff:97:b4:70:0e:
8a:13:85:7b:b0:25:24:d6:27:07:7f:b3:8b:5e:72:
05:d3:fa:a8:19:04:b0:38:98:36:ae:4c:f1:71:4c:
8c:d4:16:7d:a3:ca:c9:2b:31:50:78:1c:f3:43:35:
1b:27:45:72:a1:e6:68:f0:69:b9:18:78:2b:73:63:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:AE:13:56:E7:16:E6:77:8E:36:05:AE:2A:0F:42:45:A3:F5:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e::/36
Signature Algorithm: sha256WithRSAEncryption
3c:9f:77:d2:c7:06:83:cb:13:71:27:e4:a5:f9:c3:e8:4b:7e:
a1:a6:45:6c:10:fc:01:8d:2e:d8:33:fa:99:ba:b2:6e:20:fc:
a2:5d:8b:15:3b:40:36:67:aa:37:95:a7:8a:b6:8d:ce:e7:4e:
d0:67:1d:27:a2:c9:d5:16:e3:6d:75:99:87:d0:59:16:d6:49:
45:2e:1b:80:12:20:e1:59:69:4c:51:44:1b:4f:bf:cb:c3:fe:
a6:f2:e6:9d:85:ac:07:2a:18:8c:14:d4:32:98:32:f5:03:aa:
65:00:2c:cf:eb:27:fb:77:b0:89:c1:f4:0f:20:34:a3:28:08:
19:9e:67:16:5c:ce:8d:ca:89:6a:fc:45:16:d8:72:d2:ad:ab:
7a:b7:d2:82:c0:6a:4f:a2:a6:c1:96:41:98:99:d2:64:e6:3b:
c5:45:fe:61:00:74:0e:31:6b:c4:fd:26:5d:7b:49:c7:4b:05:
72:0c:39:39:37:8b:98:bc:1d:d6:8c:04:4f:cf:e2:3c:ad:41:
11:c1:73:ac:7a:a1:1c:c4:1f:4e:60:b3:ed:f4:71:5e:1b:23:
d3:3a:dc:f3:dc:63:7c:f4:10:47:8d:3f:6f:09:73:74:40:b0:
1d:7f:da:d9:51:8a:85:53:24:37:9c:b8:18:d6:03:0e:5a:68:
5a:3e:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:51 2025 by rpki-client