Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: VirlVh6DeRtibfCpQXMI60FmdMUMy02rMwo2FU2RQSc=
Subject key identifier: 04:7D:7B:58:6B:36:36:08:9C:8F:FA:C2:11:53:1B:5F:37:3D:3C:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FC836B954FDDCBE604A0FF738755022FE589E42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Wed 05 Mar 2025 17:32:14 +0000
ROA not before: Wed 05 Mar 2025 17:32:14 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c8:36:b9:54:fd:dc:be:60:4a:0f:f7:38:75:50:22:fe:58:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:32:14 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:39:a0:25:d5:34:82:f4:78:7b:63:69:c4:
b1:70:b6:98:23:12:6f:ac:fc:92:62:8c:44:a0:c5:
3b:74:1f:5a:cc:af:dd:78:76:77:a1:0a:c3:ed:cd:
71:8f:dd:cf:00:ef:de:99:a1:ab:66:75:33:b0:28:
6c:b5:42:6f:f8:15:5e:27:ac:44:01:0e:bc:ea:3f:
44:b6:fa:bf:6f:fb:4b:54:12:9e:71:78:11:63:db:
6b:67:a3:bf:48:c0:dd:9f:90:50:fc:5a:9c:a7:1b:
a7:d9:96:51:74:dc:41:bb:5d:0f:e1:a5:01:b2:6e:
e3:77:e2:04:3e:94:b2:b4:da:46:22:ae:cd:a8:bd:
32:82:ef:ec:29:df:ff:25:96:70:70:dc:9e:0b:7a:
63:66:e9:0e:6c:da:5f:5e:a2:c7:56:8f:98:6f:9b:
c4:77:d5:13:12:e3:af:66:aa:28:93:46:78:77:4a:
47:5d:9f:05:ae:dc:33:f7:73:d1:08:c5:30:b5:f0:
70:ab:db:a2:72:f9:c4:8e:a2:09:76:14:64:77:87:
27:3e:b0:20:30:c6:49:11:c0:46:ac:ce:6d:89:b2:
23:7f:a0:06:1b:50:5d:0f:a5:13:45:e7:f9:4a:96:
f9:f6:98:56:c9:e8:9c:6c:4c:99:9e:07:fe:5d:a3:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:7B:58:6B:36:36:08:9C:8F:FA:C2:11:53:1B:5F:37:3D:3C:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
3e:5f:a5:03:e5:dd:65:d1:c3:72:23:ae:4e:cb:b6:3c:af:59:
7d:ba:0f:c4:2f:39:ef:de:58:2d:54:b9:03:0a:89:f1:99:7f:
04:1a:5a:2e:7a:ed:16:76:3d:03:a0:a3:0d:1b:2e:85:76:9e:
88:e8:66:0b:8b:56:c7:7b:32:56:dc:6d:dd:b5:93:4d:f2:12:
91:49:63:3f:f9:9b:64:69:fe:d2:e7:33:ea:58:1c:47:6a:01:
28:44:4a:46:41:f5:91:86:da:cb:05:8f:68:56:ab:84:e6:ed:
f9:89:7a:59:fb:f5:78:d8:e9:5a:f1:81:40:59:bc:9d:2b:90:
0c:87:72:8a:86:9d:f2:1b:8b:9e:f6:b4:fe:d9:ba:41:62:fe:
99:e5:25:18:b7:4b:98:2d:92:bc:bf:53:49:0d:a4:78:ba:82:
e7:7d:9c:3f:d1:f0:a1:1d:86:6a:c9:e4:d6:4c:98:18:6a:8b:
e7:4a:59:7f:32:ee:98:f0:e6:30:f5:b2:dc:33:39:ac:eb:e3:
be:66:7d:4b:ad:a3:46:8c:ab:46:5b:41:02:54:bb:92:81:53:
8c:9d:e2:b4:c1:05:0c:e1:86:78:12:37:f0:b8:a4:21:5f:24:
ed:1d:cd:89:bf:d7:1b:80:7b:77:98:7f:85:fb:c8:a9:c8:0e:
1c:fc:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:02 2025 by rpki-client