Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
File: 7dbe70b9-8807-4382-b0db-753dfbe69012.roa (raw, json)
Hash identifier: ZtVX5XSi9PzSddy9PPBRJfciiSpEEjEM4lre2CbtEWk=
Subject key identifier: E6:31:4D:51:CA:6E:A1:B8:26:51:81:95:FF:40:C4:38:BF:4A:ED:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F33E35DA9A2E66E3FDD6F86157810AC9A08ABB6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
Signing time: Wed 05 Mar 2025 17:50:10 +0000
ROA not before: Wed 05 Mar 2025 17:50:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:33:e3:5d:a9:a2:e6:6e:3f:dd:6f:86:15:78:10:ac:9a:08:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:50:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:a8:ac:7e:b4:5d:23:b1:c0:58:23:a0:04:
e3:44:74:dd:4c:05:95:74:e3:e3:14:7c:95:1f:1f:
c4:ce:a7:10:9e:e2:9e:00:6a:b0:3b:57:36:af:85:
54:47:f4:5f:8a:8b:34:f7:90:57:6e:60:18:ba:22:
b2:dc:eb:13:72:7e:b9:24:29:63:7a:11:2a:6e:d0:
ee:7f:b7:6a:42:4b:c6:65:51:0f:2d:95:e0:57:5f:
d7:48:85:8c:9b:f8:94:30:a1:e2:b5:c4:4a:21:fb:
f4:d8:2b:ac:b8:74:76:d4:d4:d5:41:b6:a8:a0:9b:
a1:31:de:1f:04:f6:6b:db:18:45:7a:20:ea:5e:7d:
8c:78:e8:2e:74:65:b7:2e:d8:2b:c5:ff:d6:80:d5:
72:b6:00:e6:01:d6:dd:29:5a:ac:a4:39:64:74:dd:
9f:28:f8:f3:bf:40:22:58:22:84:f4:4e:04:24:66:
9e:aa:5e:6b:9a:7d:de:87:4e:79:5b:b8:a1:59:91:
3c:9b:67:36:8e:95:6a:f1:a5:d4:f8:34:b9:b5:0f:
3a:c0:69:39:c6:6f:e9:52:6b:d9:31:06:aa:10:85:
0b:c3:0e:e0:3a:9f:ff:9f:6a:f6:51:8c:47:9a:59:
32:97:08:32:18:7d:00:7d:7a:5a:6c:b4:91:7a:53:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:4D:51:CA:6E:A1:B8:26:51:81:95:FF:40:C4:38:BF:4A:ED:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/37
Signature Algorithm: sha256WithRSAEncryption
98:09:79:cf:35:86:21:9f:a7:e6:de:59:ca:16:4d:74:ce:88:
1e:7d:0a:02:e0:3c:48:1f:64:27:c6:f9:d2:1f:b2:8b:0e:03:
e8:32:4d:5d:0d:d2:b9:8b:ea:c9:3b:b3:4d:43:3a:71:bb:14:
56:65:b9:fd:3b:7a:ae:0e:de:4f:c5:9d:26:ba:82:3e:a4:b7:
66:41:42:49:09:37:ce:85:3d:76:22:a1:49:93:c4:b0:4c:06:
10:7e:85:8b:75:ac:e0:76:04:6b:10:b4:b7:7b:b6:89:2e:56:
a0:5e:8c:1c:f5:8d:e4:30:7a:9b:99:a9:00:e7:ff:7f:89:91:
f4:96:11:7a:2c:ba:61:63:62:dc:8e:5d:62:f4:1f:67:9c:2b:
ee:1c:57:33:2f:67:2c:1c:5e:41:62:56:04:91:a4:13:5b:d1:
44:8d:b7:90:f9:c9:72:98:37:53:cf:cc:b4:08:b6:77:16:82:
03:b1:26:59:d8:47:6b:5b:b2:29:c8:17:a9:6e:d1:98:f2:05:
9f:72:8b:95:12:8e:f1:40:8b:2d:2f:23:68:81:e5:94:2f:3d:
fc:d7:0e:46:37:c4:ae:e5:6b:3f:81:f5:6a:36:34:06:04:91:
10:5d:f2:c7:a1:da:ad:af:10:8b:8e:3c:37:56:df:e9:79:c9:
42:c3:93:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:37 2025 by rpki-client