Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
File: 76a60505-d74d-4741-a42e-97a09bb6b2a1.roa (raw, json)
Hash identifier: +cbMoRdZSQR7IBDfUlFKconcuhZETPAAD9YdzH1uESI=
Subject key identifier: 4D:E1:7A:53:4B:0F:D0:05:0C:81:56:19:5C:91:8F:69:2B:53:47:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C78E2B13064938AAF4ADE4BBC0A8B3C7627D2D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
Signing time: Wed 05 Mar 2025 16:20:53 +0000
ROA not before: Wed 05 Mar 2025 16:20:53 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:e2:b1:30:64:93:8a:af:4a:de:4b:bc:0a:8b:3c:76:27:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:20:53 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:40:ea:a8:17:5b:3e:f6:e3:5f:34:14:f9:02:
72:73:95:45:5d:0f:5c:6f:3b:5f:86:e1:af:b6:56:
19:0f:88:56:54:c2:41:e5:db:87:fb:5b:d2:1f:c5:
30:47:5c:5b:ca:de:43:5b:94:51:04:8f:b3:ab:30:
f7:0c:43:98:bb:a9:d2:8f:9b:1c:72:bf:ce:71:9f:
8d:32:02:58:9a:c8:4f:95:ca:30:14:13:6a:5c:dc:
d3:90:2c:b7:b6:8a:e3:ac:c9:6d:07:cc:68:0b:b5:
da:1a:eb:0c:af:e6:33:c5:24:ee:90:e9:c0:fa:6b:
2e:6e:8f:da:04:88:e9:f1:b5:29:f7:f6:a4:da:f9:
37:c4:93:a6:d4:d8:c5:95:99:9c:98:49:5a:b0:bb:
3d:4f:d9:78:ec:23:8e:0d:9c:07:b2:0c:e0:47:db:
8d:76:ea:9c:49:82:2d:d2:d9:ea:a7:7e:5e:6f:a7:
e5:a7:bb:62:f6:6e:24:9a:d9:82:b7:cd:bc:2a:3b:
b1:07:8f:4e:ae:82:be:3b:71:2e:52:5f:e2:85:56:
27:06:15:0d:bf:5c:8a:56:5c:c3:f6:b6:3f:17:72:
59:85:dc:6b:21:5c:64:86:e1:c7:26:6b:4b:05:6c:
fa:14:f1:67:aa:0a:db:b4:8a:94:62:b3:f8:71:72:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:7A:53:4B:0F:D0:05:0C:81:56:19:5C:91:8F:69:2B:53:47:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8080::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4d:78:cd:89:83:65:1b:2f:14:f9:5e:3e:51:f5:41:ff:48:
0c:ba:23:06:24:9a:ec:86:b2:d4:49:7b:aa:4d:56:24:23:fe:
a5:cb:c8:55:6a:9c:86:8b:6a:06:a8:ff:8a:f4:32:d3:6e:f1:
69:cf:2c:4b:2d:cb:3c:f4:2e:da:5b:62:be:d4:d6:59:db:bb:
66:60:9b:dd:c8:ee:5e:40:80:92:6a:db:8a:33:27:1b:48:4d:
53:bd:9a:ca:98:a6:d9:99:4d:2e:8b:bf:1f:34:26:63:61:60:
40:b4:c9:c7:69:f6:34:47:ab:6f:8e:92:5a:b4:4c:d7:da:3a:
2c:9b:78:9a:ff:37:d0:6d:d4:c1:3d:ad:e2:01:8b:ed:88:73:
6f:c9:5b:c6:3b:69:1b:35:82:48:d0:16:bb:7e:46:76:4a:5e:
1b:11:08:c9:e6:45:5b:b3:65:b5:ff:0c:fe:7b:3f:42:3b:1a:
58:1a:99:e1:1f:1b:78:72:85:f1:b2:15:14:14:00:c8:8b:65:
bd:ed:a6:33:30:68:ec:45:4d:83:a6:1c:f1:ab:df:c2:bb:4b:
88:8d:87:d4:ee:9d:83:fc:7e:e0:e3:95:eb:d7:ed:37:48:ae:
90:91:5f:28:d7:e6:0f:0f:61:3c:11:b4:56:95:8c:1e:a1:1a:
ab:1d:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:41 2025 by rpki-client