Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json)
Hash identifier: ZGA2tJ55O11upz4Y/jI+9uwLuu+9ZRnAlKWngyw8ow8=
Subject key identifier: 10:C0:7D:6D:0D:E2:CC:6F:7B:CE:DA:C4:8F:BC:51:C3:46:B5:B6:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0421994F341578D5C89FD940FC167C611B7275F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
Signing time: Wed 05 Mar 2025 17:00:35 +0000
ROA not before: Wed 05 Mar 2025 17:00:35 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:21:99:4f:34:15:78:d5:c8:9f:d9:40:fc:16:7c:61:1b:72:75:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:00:35 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:aa:1e:17:5f:1a:82:ee:bb:6c:3c:d2:13:
5d:27:74:fb:83:bd:e6:2d:23:30:73:56:d2:3b:97:
f8:f9:52:0b:cf:8d:08:57:ee:1c:cc:b8:c6:86:ae:
9c:da:5c:1d:bb:20:b0:6c:a3:b5:bb:2f:b3:e5:68:
cb:af:a1:14:98:f2:97:1f:81:17:37:ef:e4:c1:6e:
7e:af:cc:f7:a9:db:04:0d:37:5b:cd:77:ed:c4:c7:
27:8e:9f:29:cd:c8:e7:fa:8d:d6:4c:6a:42:29:d6:
f0:d7:34:14:0b:f5:cb:9e:ae:4e:ee:de:76:c0:26:
49:ea:d2:51:b9:fe:95:31:10:2d:3f:f0:42:e8:02:
48:5f:b4:19:23:b6:ec:59:47:6c:ee:a0:42:2a:8f:
2c:3f:d2:9f:3a:15:90:24:0c:82:69:38:e7:09:f1:
1b:64:14:7f:92:f4:ca:22:54:0b:95:70:bc:39:f3:
26:8c:af:fc:b4:4c:4c:58:0b:7f:3f:ba:42:77:8c:
4f:fa:c8:e4:a2:e9:f7:94:c9:0c:b1:87:47:c2:aa:
e7:ef:5e:2f:f4:8c:68:c9:74:13:b3:0b:7d:2d:b7:
c8:12:75:43:c0:ff:0d:56:7f:76:5e:4c:dc:e0:7d:
4f:14:c5:c8:20:cc:0f:af:13:0d:51:5c:8e:6f:65:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C0:7D:6D:0D:E2:CC:6F:7B:CE:DA:C4:8F:BC:51:C3:46:B5:B6:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:bf:ac:95:76:db:ee:8e:f5:f3:b4:23:ea:f1:7b:02:4c:87:
4a:f2:fa:e5:57:5c:56:70:16:06:06:53:ea:ef:eb:42:e1:a1:
1b:29:7c:57:32:71:47:7e:3b:63:ad:d3:5c:bc:e1:13:c3:ab:
f1:bd:fa:c5:a7:0a:e0:67:38:b3:46:df:79:d3:89:97:a7:9e:
f9:70:56:f4:16:b9:67:d1:a6:45:d6:7e:18:9b:dc:cd:d3:31:
c3:02:77:20:f3:ac:a8:79:d8:1a:eb:f3:cd:32:bf:47:6a:05:
0f:05:d2:7b:b2:49:aa:60:b0:cc:81:50:04:a2:e5:53:66:11:
82:99:77:1d:9a:3d:cf:c3:4f:f3:59:e7:31:ee:d4:ee:fb:f9:
9f:f7:7a:00:45:21:9e:22:b4:43:fc:9b:b1:e6:95:eb:e7:0e:
9a:81:9d:32:49:bc:d0:07:a4:71:1c:59:da:08:0f:59:8e:6e:
58:2b:48:d1:28:bb:9c:7a:d0:f8:5b:00:08:a8:4e:10:03:3c:
c6:f5:ad:01:d7:c4:f1:48:cc:f4:86:bd:5c:c9:6c:3f:aa:d1:
aa:b6:b2:a7:9a:7e:40:ed:b1:4d:af:ab:69:70:32:73:ee:64:
97:04:c1:2b:28:5a:eb:a4:05:92:81:1e:33:de:ce:8a:3c:89:
17:bd:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:21 2025 by rpki-client