Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
File: 7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa (raw, json)
Hash identifier: WxJynF3h4zkL6Zn2Z0vLKeNktnNjZBH6u7ogBuy7Z0w=
Subject key identifier: 70:8C:10:E7:1C:7F:5F:18:FA:76:46:DB:B4:98:26:8B:AD:66:BA:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F3732D49BFADC0AA679204DC6EC475E9CF5A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
Signing time: Wed 05 Mar 2025 15:00:13 +0000
ROA not before: Wed 05 Mar 2025 15:00:13 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:37:32:d4:9b:fa:dc:0a:a6:79:20:4d:c6:ec:47:5e:9c:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:00:13 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:df:3f:4e:e0:26:b2:a9:30:87:ec:7f:5e:
66:22:30:a5:d3:76:cb:7e:b0:b6:c2:24:6a:d3:04:
97:3b:1f:e3:c8:20:3c:02:27:7e:38:60:4c:24:1b:
2b:93:b9:b7:c4:86:4f:33:a1:15:56:61:e8:51:d3:
c4:14:50:48:32:80:5f:52:bc:9d:4a:24:5b:9f:5f:
47:b9:22:d3:09:5b:97:ad:da:26:44:d3:43:b8:19:
08:1d:f7:bf:a4:d5:df:7a:f9:3d:a1:b8:3d:5e:3c:
19:fa:e3:2c:20:bb:95:e8:79:ab:d2:f2:97:45:5b:
77:ad:a4:3b:97:e8:91:d6:cc:b5:61:2c:fa:39:1a:
44:2c:80:91:8c:cd:b2:e4:ce:be:32:93:97:57:ea:
7e:f1:bf:91:b5:5a:dd:c0:e3:71:29:83:7e:6a:9f:
b7:af:7f:c7:83:b6:63:51:a9:c9:9d:73:31:42:30:
d2:b5:c7:cb:3a:cd:40:29:5f:25:c3:fe:46:55:16:
7d:a5:45:bb:70:33:1f:5b:47:83:79:40:f8:2d:86:
4e:50:a0:7d:c5:65:74:be:39:0b:4a:4a:bd:da:76:
b7:7c:e5:e2:e0:b8:8b:f6:9d:51:e4:73:6a:2f:e7:
80:17:0b:e3:3c:50:04:93:e8:49:57:1c:04:e2:c1:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:10:E7:1C:7F:5F:18:FA:76:46:DB:B4:98:26:8B:AD:66:BA:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
65:59:08:00:4e:82:43:60:ae:11:74:d6:c2:d9:f2:d2:1b:d5:
b1:3d:ea:87:97:e6:e3:58:29:94:aa:3e:48:0b:66:91:fa:dc:
ab:7c:53:d1:ab:52:00:9f:16:cf:4d:bd:07:f3:f6:14:0c:3c:
2b:6a:53:d8:98:a9:a6:03:78:6b:cf:b3:61:fa:ab:5b:0d:8e:
db:7a:6c:39:50:bd:0e:0b:2f:e8:01:ea:4e:d6:a8:f3:1c:01:
da:10:44:f8:5c:1d:91:07:46:01:b9:61:61:ee:d8:e7:18:7e:
7b:2f:06:a4:36:33:13:32:a1:e2:ba:54:09:fa:c2:61:5c:c2:
8d:8d:c9:6a:d4:59:47:08:69:c3:71:14:80:8a:68:a8:29:0e:
98:3c:03:d3:84:49:04:39:a9:6a:c6:a4:4c:22:2c:b1:6e:66:
ae:57:aa:73:e3:7f:1b:c6:70:c2:4c:0c:cb:ff:2a:04:44:f3:
de:e1:87:df:41:a3:a4:05:35:da:ca:f4:2e:d6:dd:d8:d6:6c:
2c:d4:76:ab:6e:a6:78:07:9a:23:02:ce:f9:ea:5a:24:68:b4:
c0:6d:95:b6:6c:c0:74:2f:87:b1:e5:3a:82:66:a8:0d:e2:92:
85:1c:7b:ad:a3:36:55:9a:d2:6c:a6:90:99:b2:56:ff:03:b7:
9c:bb:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:04 2025 by rpki-client