Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
File: 94b69c02-a117-42df-89a0-b463fa809f2d.roa (raw, json)
Hash identifier: jM5muzkUEu/dGPKfmqxKAjtF4znI14HB2kVnka+8hEs=
Subject key identifier: 13:B1:B8:B7:9A:F8:BC:62:6F:75:0D:56:2F:B3:3A:1C:29:AD:F0:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CE52A8AC5CC937E4FAF41ADE7F157828505E5F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
Signing time: Wed 05 Mar 2025 17:31:48 +0000
ROA not before: Wed 05 Mar 2025 17:31:48 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e5:2a:8a:c5:cc:93:7e:4f:af:41:ad:e7:f1:57:82:85:05:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:48 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:09:de:21:39:69:ee:e8:c2:41:2f:cd:2c:
de:4c:99:ff:69:aa:1b:c3:b6:b7:86:54:49:17:d2:
d7:e6:9b:ba:c2:79:7b:dd:32:d4:3b:f1:e3:dc:c4:
93:73:14:bc:7c:c0:f1:c5:95:71:2b:12:4b:79:d5:
fa:fe:27:94:a2:53:d2:c2:6a:98:ec:96:d4:b4:55:
ee:6f:31:58:21:31:4b:ee:11:1a:b4:1e:a0:60:ce:
37:e7:17:f7:e5:6d:53:2f:27:45:19:5a:5a:00:9d:
20:0a:f5:b2:ad:57:86:69:aa:bd:9f:16:4d:c1:f1:
88:7c:d0:3a:8f:e3:a7:fd:d6:d1:2c:f2:d9:3f:dc:
a0:bb:d0:7c:b3:b5:3d:be:12:94:4f:1b:ad:76:bb:
db:3f:fc:e0:2e:b4:4e:d0:7c:b3:22:d8:a1:6f:ad:
80:6c:82:90:0a:aa:48:cb:97:bc:07:38:b0:db:9a:
44:ac:3f:d6:85:ae:b5:fc:2d:18:e7:29:3d:52:66:
71:c9:ac:c4:05:b3:69:6e:c5:35:eb:5f:13:ea:91:
5a:7b:86:5b:15:61:53:b7:d0:5c:a8:d0:c1:51:65:
66:1e:57:e9:01:70:57:39:24:14:8e:26:59:88:ac:
6b:48:4d:4c:2c:5d:3a:59:ca:27:07:84:bd:65:ff:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:B8:B7:9A:F8:BC:62:6F:75:0D:56:2F:B3:3A:1C:29:AD:F0:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:2000::/40
Signature Algorithm: sha256WithRSAEncryption
85:ef:0d:76:6f:02:bd:43:db:cb:0f:d7:ef:01:00:a2:c4:1f:
e4:f0:7b:6e:df:ea:68:a1:a8:be:8d:2e:60:43:8b:92:c0:fe:
5e:1f:dc:8f:1d:63:e2:02:4e:b5:eb:2c:58:b4:5f:6b:30:c0:
9b:76:55:3d:0f:e8:d3:2c:bd:64:9c:c8:7f:d5:bf:0f:93:5e:
46:87:a5:03:33:e8:5c:25:67:24:46:9c:ad:6a:01:2f:cc:30:
08:cd:5c:8c:9e:cd:34:35:93:1b:cc:e7:4b:de:1a:0e:91:8a:
01:85:61:8b:b8:0c:f5:93:4f:74:a9:78:47:f7:09:56:c3:2e:
0c:85:1c:b9:26:29:44:bd:b1:59:db:27:a7:6a:f3:cd:2e:04:
64:1c:35:9f:c1:2e:2c:54:6b:01:d8:47:62:0d:7b:5c:7e:4e:
49:bc:39:37:3f:cd:a4:60:cf:98:07:c2:7f:d8:c2:d5:1b:ff:
06:8a:f8:42:b2:bd:5c:d9:b1:78:16:48:f4:70:d9:a0:b3:cb:
fd:87:9d:87:b8:f2:33:33:98:2e:13:37:95:9b:19:a9:62:b5:
39:2d:ba:4d:da:32:9b:e1:10:33:fc:2e:cf:e8:86:4d:51:bf:
c8:4b:64:13:0d:7f:b6:0f:5c:96:c7:6d:d8:db:c4:9d:36:53:
9c:1c:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:25:18 2025 by rpki-client