Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
File: 9d9b5cac-e262-4659-a49b-3c498d1bc516.roa (raw, json)
Hash identifier: rzPegr0EaG0jGq+e4xyxc2ujSfD+WgRliX4jmwJX2Rs=
Subject key identifier: 7D:08:1C:72:55:B3:DD:8B:4B:63:5A:A1:00:96:0A:57:49:95:FB:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C4C909B0B8675B1E5B8AED0CCA45BDA52065EF0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
Signing time: Wed 05 Mar 2025 17:12:03 +0000
ROA not before: Wed 05 Mar 2025 17:12:03 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:b080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4c:90:9b:0b:86:75:b1:e5:b8:ae:d0:cc:a4:5b:da:52:06:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:12:03 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:6e:ef:09:89:95:7b:10:2b:a9:be:ab:4a:
f7:d3:39:8c:2c:75:c6:e2:75:7d:cd:54:68:8d:2f:
37:a8:9a:39:2f:92:1b:b1:35:ce:5f:10:22:32:75:
35:c7:f9:43:7f:be:a5:97:16:83:43:53:f7:90:73:
78:d3:91:80:af:d2:37:5a:d0:43:ff:e1:07:9d:d9:
dc:00:0b:8f:d7:08:0b:5e:22:01:5b:69:25:e3:59:
10:97:0b:23:74:88:73:c7:a5:f7:fd:61:0b:cb:d3:
48:b5:85:6c:d9:aa:3c:34:21:36:c1:66:5c:ef:91:
e9:d1:33:ad:80:c5:55:78:06:30:e6:16:e4:66:2e:
70:07:e6:b3:43:44:c9:b0:6f:8a:d7:a2:4d:05:4e:
9f:c7:37:5b:61:4c:e1:0f:b7:70:56:4a:a3:bb:54:
ec:ed:07:16:29:37:9a:76:63:dd:be:d2:07:bb:26:
1d:d8:4e:7b:b5:9e:14:f2:50:9a:85:a4:45:df:9e:
9e:b1:bd:7f:84:08:d3:f4:e3:5b:86:4d:24:6f:4f:
d9:53:bf:9a:b8:22:30:3e:a6:2e:63:5a:b2:95:b6:
55:0f:87:ba:78:74:6b:2e:c9:70:76:8e:a4:03:cb:
08:d3:3c:6c:07:59:67:7c:ec:c6:96:86:65:aa:6b:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:1C:72:55:B3:DD:8B:4B:63:5A:A1:00:96:0A:57:49:95:FB:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:b080::/46
Signature Algorithm: sha256WithRSAEncryption
00:4c:58:27:45:18:58:57:1e:45:89:3d:eb:79:e4:38:ba:62:
26:2a:f5:c9:be:4d:f5:33:7e:49:d8:fb:f4:6b:45:e5:21:19:
a3:ee:d9:e2:44:6f:9c:4f:97:68:19:58:54:ab:61:f7:8e:97:
19:96:10:9c:14:67:aa:ea:cc:4d:cb:20:d5:e7:58:1b:41:1b:
f9:80:93:a7:21:b6:14:73:0f:ba:7c:0f:15:9a:6b:c8:05:20:
29:0a:ab:2a:3c:a8:ac:94:32:cd:d7:c5:1d:66:b9:13:89:ea:
96:ea:33:a9:e7:52:79:a3:f0:b9:3a:1c:52:0a:ae:a1:3a:ca:
ce:55:12:d0:55:f1:a5:b1:d7:1e:5e:d7:3f:22:2b:9c:40:15:
d4:5a:42:7f:10:e7:a0:e5:8e:84:b1:1c:44:30:19:56:70:cf:
fd:0d:61:b4:15:bb:c9:b9:e2:fd:9b:e2:a6:5f:a8:62:c1:40:
db:4a:06:4d:a6:ec:45:32:38:a9:0f:6f:22:d5:b2:7f:f7:80:
69:95:11:3f:93:aa:05:99:68:e7:89:72:e2:9f:32:b1:f6:46:
9e:a0:9f:5e:7e:c8:3f:8a:7b:7a:75:85:b3:16:5b:b9:60:f4:
c8:0f:a8:37:1c:8d:d1:57:49:5b:8c:33:b8:7b:d6:45:f1:e8:
84:3d:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:23 2025 by rpki-client