Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98d31ec0-4f9a-44c5-a7bb-227b31886812.roa
File: 98d31ec0-4f9a-44c5-a7bb-227b31886812.roa (raw, json)
Hash identifier: da8aFTkxjvt7IKndB3EeMCj3ASlveQLQXERbKbZxp4k=
Subject key identifier: 03:DB:CC:B5:EF:50:8E:9E:B2:69:50:7E:4F:96:5D:7F:01:BC:71:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17C148AEA250B8EC2DC9C133F6D955872932D682
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98d31ec0-4f9a-44c5-a7bb-227b31886812.roa
Signing time: Wed 05 Mar 2025 17:01:55 +0000
ROA not before: Wed 05 Mar 2025 17:01:55 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:90c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c1:48:ae:a2:50:b8:ec:2d:c9:c1:33:f6:d9:55:87:29:32:d6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:55 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:6e:42:c3:27:39:ab:95:8f:dd:91:22:30:
07:99:48:48:36:05:1f:fe:e5:37:59:25:60:3f:8a:
2a:0c:1b:a5:98:b3:8b:21:eb:b9:a7:7e:b5:b3:80:
74:83:8b:7a:28:44:6f:4c:dc:fd:2b:f0:ab:49:6d:
92:1f:31:42:bf:ea:98:b8:9f:7a:02:8b:88:b8:d3:
32:b1:05:b0:4e:f8:f2:e1:49:24:f5:16:7b:ec:5a:
ae:9d:9f:1c:92:b4:cb:c1:00:2d:62:97:b7:ad:d6:
e6:b5:62:b5:2a:e9:c8:97:aa:e6:4c:da:c2:e3:8a:
a2:54:fc:37:c9:5c:df:af:47:22:0f:1f:3a:6e:c4:
d1:30:12:bb:2f:86:5d:ff:28:87:af:de:e9:96:1c:
2e:60:42:f6:4e:17:3e:48:7d:ce:a4:6e:c0:82:9f:
a6:55:e8:f4:a3:73:a5:6b:32:5a:05:50:f0:a3:2e:
3c:82:7c:7b:f1:4e:e2:c0:b8:b6:b0:81:10:b5:9a:
5c:8b:19:9e:b8:2a:6e:9d:2a:c1:0c:cb:3b:af:8a:
eb:07:a4:65:2a:b8:88:14:5b:2b:9b:04:bd:a5:81:
6d:45:a4:0d:97:11:89:c9:11:9a:e4:4a:78:e4:61:
e0:7f:56:82:2e:17:e3:5e:59:2c:36:a6:f3:2a:db:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:CC:B5:EF:50:8E:9E:B2:69:50:7E:4F:96:5D:7F:01:BC:71:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98d31ec0-4f9a-44c5-a7bb-227b31886812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
c2:66:b7:68:1b:fc:ec:14:a4:7d:bd:01:fd:4e:08:31:5d:94:
c3:30:87:ac:5d:1f:85:6b:00:c7:f9:e0:81:be:4f:e9:0d:3d:
80:cc:a6:bb:ad:ee:4e:f2:8f:80:eb:fb:c3:ac:ce:87:11:88:
83:68:bf:8e:92:ec:d1:4d:8b:57:bf:f2:05:18:31:bd:5a:f6:
16:28:df:6e:3d:df:95:d3:e7:50:af:e2:a2:55:bd:7a:09:8b:
0e:07:00:23:7e:54:30:44:d8:ab:da:00:ce:4d:6e:c9:d6:43:
a9:52:23:cd:fe:38:b1:6f:a4:a5:6d:ff:8e:d5:6a:c1:2b:e1:
f1:c9:bc:45:20:ca:5d:34:1d:53:eb:e6:f5:ae:f4:49:49:8d:
56:88:6f:de:87:4c:b5:4c:9b:38:02:59:fa:6c:d6:0d:84:fe:
f1:1f:e4:34:ee:41:18:45:5c:68:1b:a6:b1:ac:ad:f7:73:cd:
2e:0c:59:78:67:74:11:f6:7d:45:bb:62:06:43:d7:f2:78:55:
92:db:17:04:ef:f4:a2:f9:8c:8f:b3:49:8f:f0:26:de:fa:37:
22:85:0c:f2:e6:65:1c:d6:b6:eb:d8:e1:d9:37:62:d1:b1:a6:
77:ce:d2:a9:17:25:c0:27:1c:ee:f0:a9:a5:11:d5:d4:0f:56:
2a:2b:fd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:48 2025 by rpki-client