Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
File: 8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa (raw, json)
Hash identifier: Wm2PkioU/HxU/qB4QeKwL2mOw09R8VNSzm3ePftRun8=
Subject key identifier: B9:52:B7:29:74:B5:9B:45:E1:2D:B9:46:1E:5F:BC:E9:76:14:21:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B56436F7B3C2939322994B2EDC2D22D428F58E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
Signing time: Sat 08 Mar 2025 00:31:01 +0000
ROA not before: Sat 08 Mar 2025 00:31:01 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:56:43:6f:7b:3c:29:39:32:29:94:b2:ed:c2:d2:2d:42:8f:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 8 00:31:01 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:5b:c8:1d:37:d4:91:ff:a0:41:be:c8:3e:
87:40:a1:8b:6f:49:4d:78:94:e8:6b:9e:21:ea:7f:
0d:bc:59:31:e5:33:9b:37:c9:29:7e:b3:75:c9:35:
de:db:93:15:25:5b:26:fe:36:36:19:ad:d4:83:6c:
7d:3d:1a:9f:29:94:fc:42:96:3d:68:91:00:b9:10:
6f:c9:e1:7b:cb:ca:7c:10:eb:f8:b7:bb:8d:2d:c9:
ec:0c:11:6a:e4:b1:71:fe:82:5e:e4:68:f1:3c:74:
90:05:7f:2f:81:ef:c8:60:a0:a1:2c:40:de:5c:61:
2e:87:50:35:72:04:46:b1:c3:73:16:21:3d:d0:cf:
cf:5e:8e:be:15:1c:86:35:26:7a:b8:eb:51:46:1f:
7a:20:8c:fb:9e:60:b3:94:86:4a:5e:4d:3d:9c:b0:
d9:91:bc:4b:40:3f:81:2a:95:ad:f1:93:d6:e4:45:
fb:42:95:e7:67:e9:62:63:14:63:7f:e9:85:7b:6b:
d1:f7:06:07:57:c8:bf:5a:d3:1d:e0:64:25:ba:93:
bf:d5:c9:e6:a9:01:0d:da:8f:21:c6:eb:63:85:dc:
40:1f:a9:9c:b7:b0:6c:01:cd:47:06:15:8b:21:7d:
6d:77:8c:ef:16:fc:97:36:e6:f7:25:1b:11:73:6a:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:B7:29:74:B5:9B:45:E1:2D:B9:46:1E:5F:BC:E9:76:14:21:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
44:62:b3:4f:6a:59:1a:0f:44:d0:0a:54:39:7e:65:26:1c:5d:
50:3a:97:10:41:d8:fd:af:3d:5c:be:2e:0a:61:ff:59:49:8d:
89:72:27:61:5d:de:d9:1c:a4:9a:f5:bb:6e:6c:0f:50:b9:58:
b4:71:d2:2c:71:e8:fb:6a:6e:48:dc:5e:55:7f:57:d1:3d:26:
3c:90:8d:b6:2b:36:3d:3c:ea:81:e1:26:63:99:09:ba:8c:26:
23:11:e5:84:40:0a:ab:29:fb:36:39:57:a4:13:fb:7c:08:2b:
8e:8a:68:5d:a0:31:58:64:fd:d4:1c:81:5d:93:96:b3:3c:cd:
39:49:db:e6:69:51:b9:87:39:b9:f0:d7:11:92:2e:8c:c3:94:
4f:7d:41:41:5e:73:ff:39:08:bc:40:8e:f5:f2:5a:64:ee:71:
e9:b4:1e:39:0d:41:0b:b5:b7:79:42:76:6a:78:2e:2d:18:4c:
e0:e5:41:f8:c6:2e:8b:0d:d7:ec:9c:30:c1:bd:f6:3d:88:4b:
62:8f:ad:64:a2:f5:1b:04:fe:56:b2:9b:08:05:fd:61:34:7a:
0e:a3:fe:dc:a9:0a:e7:9b:8c:88:92:6a:1e:02:ee:8d:12:67:
e7:6a:68:12:e2:5d:23:ca:81:d9:24:d3:be:62:ce:ba:d9:d3:
ef:7e:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:50 2025 by rpki-client