Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
File: 7a5c899e-1564-4329-8939-7004d7b754c8.roa (raw, json)
Hash identifier: GhDJsxdCeuTv4SJtSlN3plEDOO5yCVZPhqR8o66Wapk=
Subject key identifier: 9D:47:E7:DE:7D:2D:48:03:F5:E5:7E:4E:45:A7:98:A7:1E:D5:99:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A75B8D71BE37338EA003185DEB8D0B5E615ACD7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
Signing time: Wed 05 Mar 2025 17:31:07 +0000
ROA not before: Wed 05 Mar 2025 17:31:07 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:75:b8:d7:1b:e3:73:38:ea:00:31:85:de:b8:d0:b5:e6:15:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:07 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:0b:05:c2:a4:d7:64:00:87:51:9a:ea:d1:
ec:bc:69:35:aa:04:3e:1e:3f:f5:bc:a3:b0:79:fe:
61:f5:49:65:0d:3f:db:31:b9:18:63:a7:6e:c3:b9:
97:77:9e:fe:0a:e2:e7:7d:4a:56:e4:29:c8:ff:fc:
f8:ff:31:aa:4a:72:8d:cb:86:3c:b4:87:b3:26:37:
ac:55:58:76:95:2a:07:25:57:d4:ad:5a:1c:27:9b:
d3:48:1c:bf:8b:ae:b6:b5:24:74:97:00:34:61:9a:
ef:0a:46:b0:4a:e0:ba:77:fc:51:73:de:22:99:4d:
8c:58:b6:05:ab:8c:a2:45:99:2e:6b:38:a7:3a:f1:
56:92:22:17:57:5b:9e:1c:43:e1:13:2c:19:8b:13:
d6:d8:ab:08:f0:14:b8:a2:5a:92:af:9a:67:4c:0a:
cb:13:9d:86:ee:d6:fe:8c:04:3b:54:ea:2e:66:ef:
7f:54:31:b2:4d:3e:f0:8e:c2:d1:e8:73:49:7a:f9:
35:dd:b2:21:f4:c1:36:e7:16:1f:8a:6f:da:25:5e:
88:58:6f:3b:00:41:1b:eb:90:f7:99:d1:bc:75:c8:
3d:bb:a4:8d:ee:0b:20:a6:bd:de:ef:7e:e0:cd:3f:
31:b2:01:43:83:c3:a8:94:c7:6f:aa:21:a7:25:d5:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:E7:DE:7D:2D:48:03:F5:E5:7E:4E:45:A7:98:A7:1E:D5:99:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:9000::/40
Signature Algorithm: sha256WithRSAEncryption
83:5e:d8:f7:80:8c:20:44:b0:b2:bc:2a:e2:71:5e:4b:79:da:
8d:6a:77:75:46:23:a9:b9:dd:54:93:f8:3d:88:71:c9:18:4d:
da:40:b4:7f:8d:3f:7d:01:30:a3:10:3d:1d:b0:81:fb:10:ab:
96:e8:c1:54:a8:a5:ee:6a:ba:b5:fc:61:27:b0:bf:4d:bd:50:
a8:03:20:87:ed:e2:94:ff:75:32:65:39:c7:da:4d:8d:40:8f:
a0:c2:00:bf:29:73:9f:a8:93:b3:ec:a3:af:43:a4:97:cf:9f:
f6:28:3c:73:bc:ae:1e:ac:c9:5a:6f:e4:f7:bc:8b:c1:50:c8:
28:ea:9a:87:5f:52:9c:88:c7:48:fb:51:4e:3a:4a:a3:10:c8:
88:47:be:80:32:23:9a:23:d5:5a:38:f9:1d:46:b6:68:cf:dd:
41:63:e6:07:20:4d:08:04:49:ca:4a:9b:1c:57:1f:f1:72:a4:
63:bc:9d:b7:ed:f9:d3:3b:c0:3e:c8:d4:b5:44:0c:3a:31:d5:
30:0b:0c:7d:af:b2:2e:a4:4a:fb:be:79:68:ca:ed:31:6e:b8:
7f:0e:72:f0:80:02:c7:11:f8:31:ce:7a:61:e6:8c:17:75:e5:
22:95:0f:40:ca:30:03:73:c3:63:84:9f:8f:6c:fc:30:ed:47:
4b:43:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:07 2025 by rpki-client