Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
File: 7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa (raw, json)
Hash identifier: 5OS+N/meDDIJ7hkrLCGuRU10rqQkqOTkqFFmKljk3xE=
Subject key identifier: D2:37:E7:52:3B:DA:2B:C4:FB:79:35:A4:28:39:6E:E7:34:CF:2C:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31FDBB724B7BBE65B948ED7E62D9E5AEFFB3D4EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
Signing time: Wed 05 Mar 2025 15:01:14 +0000
ROA not before: Wed 05 Mar 2025 15:01:14 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:fd:bb:72:4b:7b:be:65:b9:48:ed:7e:62:d9:e5:ae:ff:b3:d4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:01:14 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:5a:99:21:15:6c:35:6a:c4:d0:69:37:c3:
17:61:a0:e1:2c:5e:47:20:f7:74:9d:5b:ed:40:16:
73:fa:e5:18:8c:46:1d:aa:92:19:2a:ef:fc:29:e4:
24:35:aa:c4:d7:15:1d:27:3d:9b:ca:09:41:b8:69:
b8:a4:6f:7e:57:a2:94:a5:eb:ec:72:a5:7b:21:30:
73:8c:b9:34:ed:ae:61:d3:d5:ec:8b:95:4d:b5:66:
9c:04:c4:b7:7f:55:7b:5b:11:fa:34:36:76:d1:dd:
cc:66:e6:b5:b0:f5:e1:cc:9f:1f:c7:14:82:d9:e6:
a1:32:52:42:3a:05:bb:e0:64:42:4f:11:01:e0:ea:
af:5c:17:f9:87:b1:21:b5:5f:e6:3a:59:43:23:e7:
df:9c:08:29:cd:aa:54:dc:b8:ce:ee:0a:64:3f:f2:
b3:6e:5e:a1:7d:72:51:71:8c:3c:b1:79:27:2b:16:
c1:39:4a:e4:cf:a2:28:84:a2:8d:7a:6a:c8:85:dc:
37:48:4c:4d:2e:7a:51:cf:f3:ab:70:94:cd:e1:c3:
74:62:82:f5:7a:27:94:a2:aa:81:3b:18:6c:85:52:
16:7f:0f:63:c3:cf:ec:f7:7f:78:91:a3:05:4b:36:
f9:74:91:c7:9c:7c:3e:9c:7d:b8:bb:b7:97:68:50:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:E7:52:3B:DA:2B:C4:FB:79:35:A4:28:39:6E:E7:34:CF:2C:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7258ab8a-d51b-4c5a-b45a-d1e7d93c1d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a040::/48
Signature Algorithm: sha256WithRSAEncryption
ae:67:c4:a0:12:e4:d4:cd:f8:03:1e:1e:6b:b6:4e:18:16:c4:
7d:43:5b:d9:91:db:49:90:8f:b1:a0:f6:39:96:96:46:45:4d:
3f:a6:8f:57:36:51:11:23:9e:77:96:ed:60:b7:06:e8:16:2e:
ef:7d:5b:a6:7e:b3:f8:44:ec:97:b6:c8:50:82:79:57:d7:d1:
21:4b:f4:df:8a:25:60:23:7d:f7:34:df:8a:39:d3:70:11:d0:
8e:cd:fd:cb:81:98:13:dd:10:d1:e2:e2:e8:fb:f5:f9:46:ff:
33:56:3a:21:f0:e9:2e:a2:40:81:2b:ff:33:33:6f:0f:e3:7c:
19:be:01:b0:2e:6d:cd:42:29:ac:73:6f:81:53:90:78:ea:70:
de:48:81:e4:f0:f5:d1:6e:03:89:2e:a7:12:64:cd:fa:02:52:
4a:35:78:7e:c3:7c:b3:11:9c:d4:17:d4:ea:1b:7f:0f:d9:72:
56:ed:fb:f6:f5:43:57:26:3b:79:8f:55:40:86:b0:38:f2:ad:
06:7f:f4:4c:8b:8a:63:02:2d:17:f2:41:f3:03:c7:8f:b4:86:
eb:55:a7:0d:9d:27:95:c7:22:1d:df:d6:cf:11:26:c8:6c:38:
b7:bf:7a:54:7c:a7:36:e0:7e:c9:20:a6:aa:4d:2a:43:9d:56:
70:4e:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:56 2025 by rpki-client