Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File: 93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier: v+tit/0ONKPOaA4JJ2iDlGBigswmnRrsYIto5G+s3oo=
Subject key identifier: 2E:92:DF:FB:A8:11:73:4A:35:64:30:AC:B8:5A:09:83:94:F0:CC:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FE95AA75DB75409ABB813ED96D9C671619854E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time: Wed 05 Mar 2025 17:40:21 +0000
ROA not before: Wed 05 Mar 2025 17:40:21 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e9:5a:a7:5d:b7:54:09:ab:b8:13:ed:96:d9:c6:71:61:98:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:40:21 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:39:af:a8:37:d6:a5:c6:8d:57:8f:1f:0a:
0a:32:20:54:ac:a3:2f:7d:f9:ac:56:b4:28:d1:25:
5e:e5:7b:b8:bc:13:22:7b:c5:58:56:34:bc:f8:d6:
48:7e:ed:6b:12:33:56:21:23:12:26:5d:a0:87:20:
3b:de:5b:56:16:7a:36:bc:14:ba:fb:e6:91:e3:e4:
b4:5c:85:26:df:70:94:2a:ae:93:b3:38:89:3c:fd:
6c:43:17:44:dc:03:57:1d:7a:e1:90:62:0f:3e:d6:
b1:70:0b:43:c0:22:1c:a0:15:ac:06:77:c4:10:da:
bd:f9:22:87:49:35:a7:6c:b8:50:03:f2:ef:39:ad:
ff:f5:0a:7f:c9:a9:b5:3b:06:b5:40:45:43:2f:cc:
d6:23:2d:45:43:07:5f:f8:39:e2:ae:44:59:79:a1:
12:7b:cd:52:a2:c8:c7:6b:af:83:14:33:52:dd:b4:
17:44:6f:6d:7f:eb:e8:e6:11:44:09:9a:13:2f:8e:
50:f1:3c:94:61:a5:b1:7c:c8:f7:34:89:32:2b:2c:
95:ad:15:94:8a:e3:c2:a2:64:74:0e:fb:0b:2a:b1:
e9:2e:b3:47:6f:f4:ba:6a:1f:91:c0:74:91:c1:35:
b0:ae:36:4b:05:56:ef:f4:a5:ea:66:bb:c3:8e:b9:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:DF:FB:A8:11:73:4A:35:64:30:AC:B8:5A:09:83:94:F0:CC:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:400::/38
Signature Algorithm: sha256WithRSAEncryption
ae:52:f6:17:96:33:fc:81:65:48:1b:69:c2:8e:3b:ff:c7:66:
87:e5:41:3d:1a:e2:ed:26:02:26:38:48:ef:a2:9b:98:f4:1f:
31:35:da:7a:a8:02:ba:45:73:c7:31:49:32:65:4d:e7:80:05:
a1:62:0d:32:4e:43:fb:4a:50:1d:79:06:92:1f:58:0e:f5:55:
7d:88:64:3a:b6:2f:89:e8:61:d5:16:39:80:19:d3:fc:79:60:
e2:2a:ea:6d:f3:29:31:6b:a6:c2:a2:7f:94:0a:f2:f8:34:cf:
b2:75:60:ce:eb:80:a1:fc:3f:6a:ee:fa:77:a9:d1:c9:a4:67:
f6:8a:37:0c:80:97:6a:81:9b:8b:78:d9:fb:7b:25:c1:9a:22:
0b:75:65:1d:b7:f7:19:6f:24:4a:45:35:a9:80:60:38:77:50:
52:70:46:f4:76:4c:1f:45:21:ed:de:26:81:c9:c7:05:ea:70:
f4:0c:c9:bc:af:8b:4b:d1:6f:41:e5:62:b5:43:7a:bc:23:0e:
01:c9:75:1a:77:5b:3f:a5:a8:ba:9f:92:55:76:c5:98:9d:a8:
9b:c8:aa:2b:d5:b6:61:c0:00:67:3a:23:7e:77:47:d5:66:ac:
92:4a:ec:ff:f0:1e:4d:b8:f9:06:5a:99:de:5e:c9:d1:34:77:
5e:b9:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:27 2025 by rpki-client