Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
File: 8c99b00e-290a-4618-8076-435475c3020f.roa (raw, json)
Hash identifier: lIDxvyHuTZyrsTWXz6oMV0J5Rjxe8FwLIuGr9e7u6mY=
Subject key identifier: B4:77:3D:02:54:04:CC:AB:58:F6:FD:38:FC:20:7E:4A:E8:67:C2:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 387B856BD7CDE1A0F69EF3AB86427DA8616170E4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
Signing time: Wed 05 Mar 2025 16:41:08 +0000
ROA not before: Wed 05 Mar 2025 16:41:08 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7b:85:6b:d7:cd:e1:a0:f6:9e:f3:ab:86:42:7d:a8:61:61:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:41:08 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:fd:6b:1c:35:60:18:75:cf:9a:21:03:be:
50:f2:ca:af:29:83:37:0d:3b:c3:1d:64:65:8f:ff:
a3:8a:77:75:6e:45:41:34:fc:a1:4e:66:58:85:65:
b6:ba:09:04:02:d7:a9:69:52:7f:69:9e:f0:eb:2a:
a6:41:6a:5b:bc:6b:48:40:a1:29:ca:23:33:d2:29:
f8:f8:5e:a6:a7:77:7f:de:3a:92:0a:f5:4c:9a:9e:
12:a5:d2:86:e0:cf:88:a8:b4:c2:a2:4e:9e:37:8e:
37:81:eb:af:75:60:e7:af:7f:a3:f8:d5:ad:23:e5:
bf:a8:81:eb:35:95:0f:d7:17:da:bd:b8:45:06:50:
be:43:c3:d9:e8:e1:0b:5c:e0:ef:0a:7e:ba:5a:25:
a0:25:27:f6:40:fe:c1:be:3f:dc:0a:90:a0:6b:d7:
8d:bb:ef:87:8c:d9:1c:a7:ce:cc:79:fe:ba:28:12:
5e:0d:13:c2:79:ae:e1:7c:6f:02:99:29:e4:75:1d:
8a:b0:1f:59:e0:a4:3d:79:b6:7b:06:ce:d7:c5:d9:
a1:80:ed:b4:ce:39:de:49:d3:be:a4:ec:c1:64:9c:
13:16:0a:be:15:94:ba:f5:e4:e8:1e:a1:7c:95:76:
c5:da:ab:91:4a:8e:a8:94:22:c7:ec:d9:af:88:aa:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:3D:02:54:04:CC:AB:58:F6:FD:38:FC:20:7E:4A:E8:67:C2:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c080::/48
Signature Algorithm: sha256WithRSAEncryption
86:b3:36:4b:2a:44:8d:84:c4:0b:6b:55:09:2c:58:eb:90:a9:
09:7d:8f:c9:b4:87:ad:ab:15:53:d7:95:45:f4:e3:cd:c0:11:
2a:10:33:41:7f:43:98:5f:f5:76:0d:80:68:b7:43:91:88:ff:
98:9f:0a:06:80:63:3a:95:aa:18:bc:07:48:af:97:5b:4b:50:
00:c7:94:44:09:10:16:4e:9a:bd:60:11:36:eb:3b:d2:46:8a:
62:fd:09:e7:cc:e1:26:97:46:ed:d4:67:35:28:bb:5d:b3:5f:
26:2d:e0:89:e5:e0:37:f5:84:54:77:4f:73:c3:41:19:41:b2:
d7:bf:30:db:87:12:72:f8:0d:8b:57:10:1b:97:4a:64:ac:a3:
96:a7:1a:90:3b:bf:d7:dd:77:ed:86:47:1c:9b:24:ba:e7:98:
a5:fb:d8:66:e9:61:04:00:c4:17:37:16:af:3a:26:3d:04:f8:
12:aa:85:3f:f9:88:ec:7f:3a:fd:20:9a:bf:82:69:cb:70:da:
53:3a:41:da:aa:f2:5d:4b:f7:24:01:95:3b:6f:5b:41:bc:30:
60:9c:28:f7:71:96:55:22:91:4f:f8:40:f2:b0:92:6c:b9:cd:
cc:66:da:a0:a3:b2:ae:99:48:fa:d0:2c:b8:51:21:70:97:12:
e3:fb:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:49 2025 by rpki-client