Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
File: a6ca14a4-0087-442a-b673-75cc23375cdf.roa (raw, json)
Hash identifier: t3g6D4/+BS8eLf2Q9PAAploI24Eyma3hYcoBqGHIuiM=
Subject key identifier: 6E:F4:2D:BD:6F:85:89:1B:77:7E:4D:6C:FF:4E:B4:7E:3F:79:66:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45A169109FC6745E142F3C16B391A15CEBDE4E28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
Signing time: Wed 05 Mar 2025 17:10:09 +0000
ROA not before: Wed 05 Mar 2025 17:10:09 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:9080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a1:69:10:9f:c6:74:5e:14:2f:3c:16:b3:91:a1:5c:eb:de:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:10:09 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:e7:da:60:3f:8e:b3:60:ca:b5:27:ef:6e:
da:2f:03:65:11:fb:98:08:c7:34:a3:01:95:e5:87:
85:aa:fc:d6:65:d5:81:4b:a6:05:94:fb:da:56:18:
09:08:d0:87:9c:e6:ce:20:10:f2:b6:d6:82:6a:5c:
47:38:34:d2:a8:dd:80:96:9f:81:ed:4b:96:56:f4:
74:83:bd:c3:2c:58:6c:4c:52:6c:62:86:70:47:34:
5d:19:a1:2b:69:73:05:4d:80:20:f4:91:6a:e3:1b:
e9:23:fd:10:3b:67:6a:35:37:42:18:b0:e3:8d:ee:
c6:da:89:14:4a:63:b9:04:e5:50:22:be:49:fb:ec:
62:b1:d0:df:98:f6:16:a0:30:1e:0e:80:23:0b:d9:
44:30:d9:30:fb:d0:7e:b4:50:eb:c6:27:9e:2d:d1:
65:e8:3c:ae:a5:c0:0b:7a:90:97:9a:e9:24:6d:64:
2e:29:9d:2c:ae:44:76:38:79:13:96:b3:af:56:e1:
70:96:19:ba:92:c8:9d:cb:6a:b0:a1:b6:50:6d:0f:
af:cb:4c:2e:ce:89:34:29:c8:c1:14:00:e5:6c:28:
39:71:2b:ec:f8:6d:a8:ac:2d:8d:ff:d8:72:e2:4d:
50:88:e9:f1:d8:41:ba:80:d2:c3:dd:19:ad:2b:cb:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:2D:BD:6F:85:89:1B:77:7E:4D:6C:FF:4E:B4:7E:3F:79:66:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:9080::/46
Signature Algorithm: sha256WithRSAEncryption
b7:f2:36:da:14:96:d7:44:f7:cd:57:4b:b0:a6:c3:1d:5f:0d:
33:23:32:f6:c4:25:a4:53:c1:a8:e8:5f:3d:17:5e:47:fa:96:
ad:62:d4:3f:0f:85:b8:7b:70:24:b6:c9:63:8b:71:a6:20:22:
b6:61:1a:84:55:d5:f4:da:6c:91:bb:f1:77:0d:df:a3:ef:95:
e1:6d:71:63:00:98:dc:e8:e5:17:64:dd:a3:86:4d:3a:f5:df:
7e:e7:23:5b:b2:6a:1e:3c:df:da:e1:73:97:ef:17:d2:49:41:
39:da:a4:f8:ff:79:50:0d:d8:78:75:2c:b7:e0:29:f9:86:87:
ad:2d:db:f2:8e:72:80:74:bf:33:97:9b:73:e0:9c:99:21:98:
14:1b:9d:6d:5d:b9:4b:37:44:1d:33:37:c3:eb:2c:33:17:78:
cc:ac:91:75:5a:22:60:5d:9e:46:12:ac:fe:15:45:51:fe:9b:
b4:79:85:83:f1:7d:5e:24:4b:00:1b:48:58:8f:51:95:46:25:
d3:f1:1b:2c:d0:a8:ea:35:26:1a:10:11:85:f6:18:a6:7c:8e:
f8:46:30:f7:f0:23:30:26:eb:41:3f:f3:b3:e5:5e:fb:2b:eb:
98:7d:91:c1:e0:57:ad:8c:ab:f4:b3:6f:04:b2:96:58:2c:04:
be:fc:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:04 2025 by rpki-client