Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
File: 6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa (raw, json)
Hash identifier: 3z3p5JipfWfK2Sc52OvqN0bx3VPj37DKcgoE/5Np3x8=
Subject key identifier: 9D:AA:9B:1B:CF:C1:05:86:F7:2F:FB:AF:B2:C0:1E:0F:49:FC:7D:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B2992358594CBB4FC49C7E4D0A6F6BB163B61EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
Signing time: Wed 05 Mar 2025 17:00:16 +0000
ROA not before: Wed 05 Mar 2025 17:00:16 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:29:92:35:85:94:cb:b4:fc:49:c7:e4:d0:a6:f6:bb:16:3b:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:00:16 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:da:2b:be:3b:2a:92:2d:7e:72:e6:54:db:
b7:dc:08:15:ed:59:76:85:b6:f8:9e:ce:7d:bc:f5:
f2:44:bb:19:db:da:66:81:b3:66:af:99:cc:d6:bf:
a7:96:7c:33:2c:8a:24:7b:e2:a9:66:37:e5:21:0e:
9d:be:18:9e:40:e3:62:3f:d1:f5:74:9a:f5:5e:ab:
7e:ea:ed:0d:68:04:c0:46:c6:da:23:20:e0:66:63:
4e:54:07:31:c3:dd:2e:13:ea:11:d1:57:e2:a5:04:
a3:3d:40:60:f8:9e:6e:b7:00:73:46:ba:7e:72:21:
5d:c5:56:69:20:ac:96:d7:34:6b:93:47:5b:15:6b:
4a:8b:ed:cf:7a:84:db:be:bc:bc:33:65:f2:f5:73:
e8:26:68:88:34:c1:a3:31:b6:bf:dc:a7:a4:69:06:
f6:3b:c8:ea:e7:b3:b2:87:9f:c4:78:d8:a5:aa:a7:
4b:68:6d:c3:cd:98:b1:2b:a4:ae:51:57:6c:4d:33:
db:fb:7d:88:8e:62:52:a3:7d:b3:79:4f:4d:8f:1c:
4b:05:ef:e7:80:e2:6b:20:82:83:1e:9d:32:17:5f:
91:1c:79:00:20:2b:f3:1a:cf:a5:91:7f:1d:64:27:
c1:fe:86:59:eb:21:c4:23:af:68:c5:e2:82:f0:18:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:9B:1B:CF:C1:05:86:F7:2F:FB:AF:B2:C0:1E:0F:49:FC:7D:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2040::/48
Signature Algorithm: sha256WithRSAEncryption
96:38:63:be:d0:05:70:a4:9f:f6:8a:9d:8b:8d:94:db:33:74:
a2:52:2f:7a:c4:25:b5:13:2e:b3:bd:ef:13:75:69:66:dc:b8:
0f:91:67:49:63:43:c6:2d:7f:b3:fe:c7:ca:1e:03:f0:69:59:
82:2e:6f:50:e1:32:50:55:3c:bd:cf:a4:51:ef:aa:ac:16:5b:
d2:28:26:61:f7:f4:d8:00:14:fc:54:58:ca:3e:b8:92:b3:57:
4a:c7:31:03:c7:d5:88:2b:89:fb:85:10:57:2c:76:4a:21:4c:
51:1d:7b:ed:fb:e1:e3:65:e8:f2:65:27:c8:59:eb:9d:c8:f9:
40:02:87:43:77:d7:50:ff:a0:e6:6e:69:b4:65:14:ad:c9:7e:
a1:05:71:3b:37:6d:1e:bb:a3:6f:f5:7e:c0:4b:ff:f5:7a:15:
4e:2d:ac:87:db:b1:71:1d:4a:c5:98:39:6f:e8:c2:8a:d0:16:
de:2e:cb:d5:96:1e:f5:51:11:ef:48:e2:f9:a7:de:5c:c8:20:
b7:ad:6f:58:c1:70:fc:37:06:d1:54:17:9c:9a:6e:8e:13:a9:
77:5e:2b:63:d9:1b:11:16:08:bd:ec:65:d7:ba:d8:e1:10:26:
f8:ad:24:44:67:a0:54:61:1d:50:8b:90:b8:e8:73:5b:b4:47:
cc:fa:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:00 2025 by rpki-client