Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
File: 6ee98048-5141-4b16-8b8c-269a397f53ce.roa (raw, json)
Hash identifier: XxPIPUQGxRqNZSdia2fyj0Xgw53mf0Q07jbw1dexjJk=
Subject key identifier: 0A:B1:A7:93:AB:E4:7F:F2:8B:11:A3:92:0E:75:A9:2B:81:1C:16:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BB80019386C9DB7C64D743BC1DAE4B2EF362F1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
Signing time: Wed 05 Mar 2025 16:00:08 +0000
ROA not before: Wed 05 Mar 2025 16:00:08 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b8:00:19:38:6c:9d:b7:c6:4d:74:3b:c1:da:e4:b2:ef:36:2f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:00:08 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:5a:54:43:17:9a:eb:3e:5d:4e:60:21:16:
28:51:12:6e:08:4f:ba:4d:9f:1a:58:74:2d:cf:57:
df:b5:4a:c2:09:39:ab:99:83:bb:72:de:1b:ba:48:
f4:48:5f:2e:28:d9:e2:02:d6:5f:3d:95:ca:94:5c:
20:99:a5:41:ea:2d:4d:75:80:a0:28:47:4c:9b:6b:
86:0d:c4:99:8a:61:e8:9e:49:b7:f6:f3:e5:c7:dc:
61:68:e4:70:bc:d7:95:9c:4f:79:15:04:e8:f0:a3:
96:a2:60:6f:75:7d:dd:92:ba:d7:fc:cd:78:c5:11:
e6:17:dd:b0:40:e7:b4:eb:46:e2:f6:80:b7:0e:e1:
f9:fb:5a:bf:bb:f9:56:47:b8:3e:86:d2:09:71:a7:
72:9e:7e:52:0a:1f:f3:e5:a2:45:1e:81:b4:f7:c0:
97:d4:a0:b2:c8:08:35:0d:21:85:5e:f7:2f:1d:21:
de:19:54:21:60:83:ae:94:f0:dd:1a:44:35:18:7d:
7d:f4:4e:af:51:79:81:47:97:8d:ac:2b:b7:da:1c:
2a:bf:f4:c1:09:62:1e:6d:8b:45:9d:c5:d4:71:36:
ec:d3:2f:e3:b0:b2:3b:c1:72:3a:2e:4d:15:7a:85:
cc:7d:48:33:eb:e3:4a:f6:2f:35:7e:71:a8:c5:6c:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:A7:93:AB:E4:7F:F2:8B:11:A3:92:0E:75:A9:2B:81:1C:16:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4080::/48
Signature Algorithm: sha256WithRSAEncryption
36:34:98:d1:d3:87:33:23:46:0b:e5:b4:1a:42:81:cd:06:a9:
03:81:58:d9:81:7e:c8:c1:28:55:20:ba:c2:4c:11:f8:61:26:
9e:82:f4:e5:2c:20:01:76:67:be:cd:b7:f9:fb:df:e3:90:d3:
29:db:d2:64:13:b2:6b:13:e7:81:34:8f:81:77:b6:8a:fd:ae:
c7:e1:30:1b:22:47:1a:8b:3e:b2:e8:12:0e:30:a0:18:e2:57:
84:69:34:c5:58:03:cc:b8:e8:cc:dc:4f:4b:7c:a7:33:23:fe:
3a:79:89:91:14:e5:2b:e0:c5:13:d7:24:81:18:81:7e:f4:88:
cf:a5:49:9a:b3:b6:42:65:d3:c0:b3:3d:cf:38:f3:25:48:af:
56:2e:f2:2c:f5:fd:05:d4:f6:73:89:45:d3:92:ca:77:59:98:
75:2b:b3:7d:a3:0a:4f:41:17:61:b7:30:53:d2:37:4f:e4:2c:
a3:a6:ad:b7:64:53:23:bf:12:de:7f:cb:be:03:52:f7:ce:ce:
16:30:2a:63:ff:8d:40:45:7a:21:3e:45:c7:9b:3d:da:2c:76:
9d:61:b5:f8:46:ce:2c:e7:ab:a2:98:03:b1:d0:b8:a6:b5:f6:
14:80:f0:3c:b6:1e:64:eb:21:46:6d:88:fd:1b:82:4f:76:44:
d1:75:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:22 2025 by rpki-client