Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
File: a6d14d01-1a1b-448e-bb4a-73279a06c540.roa (raw, json)
Hash identifier: NrokElfrc3mO2ZLZpV+5u2zDMYin7lGdbT5OuHq3qlk=
Subject key identifier: 31:5E:24:1D:83:48:4C:3C:E0:F0:60:B0:FD:A2:20:7B:06:05:42:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D38ECBE1CD62AE8E0C7F581A1C0A77E676E0C65
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
Signing time: Wed 05 Mar 2025 15:40:40 +0000
ROA not before: Wed 05 Mar 2025 15:40:40 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:38:ec:be:1c:d6:2a:e8:e0:c7:f5:81:a1:c0:a7:7e:67:6e:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:40:40 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:d4:29:74:41:d5:54:23:5e:66:4b:f7:13:
57:7d:41:d0:ff:3a:e0:13:a4:0a:35:d3:66:ca:26:
7e:f8:6a:46:de:68:6f:02:ea:ba:84:d0:73:9c:08:
3a:6b:a6:ed:c5:6b:4f:cc:86:3e:83:a4:7e:e8:bc:
2d:60:2c:a5:d7:ad:86:ad:d3:14:1b:e0:80:ec:97:
14:ef:42:4f:80:b3:c5:4d:dc:95:cf:04:e3:b4:6d:
a7:24:b6:59:8d:76:40:d2:d9:6b:e9:07:99:68:f1:
42:48:36:53:aa:7a:5b:3e:8e:3f:5a:6e:af:74:96:
e8:65:ed:98:01:a2:98:9a:94:f9:2d:d3:62:13:7b:
29:26:7e:4c:1e:65:cc:41:59:74:d7:8e:72:ca:a6:
1a:d6:dc:44:8b:66:58:8f:2c:18:d7:9b:9f:cb:26:
0a:73:7b:6b:a6:d7:ad:78:eb:85:25:03:14:66:96:
82:79:5e:a3:b1:e7:d8:c5:21:75:00:e9:7f:9e:1f:
c3:8a:4d:17:e2:d0:e2:78:4b:b8:92:50:09:cd:94:
c6:f8:90:5d:b8:3b:8e:52:35:ef:59:26:6e:69:f4:
87:e6:a6:d6:b5:1c:f8:9d:f7:3c:88:40:e4:a6:ba:
15:94:2d:5b:32:0f:cf:54:53:6d:e3:68:d2:e1:65:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5E:24:1D:83:48:4C:3C:E0:F0:60:B0:FD:A2:20:7B:06:05:42:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6d14d01-1a1b-448e-bb4a-73279a06c540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5040::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8b:ae:48:23:38:ab:30:2a:10:34:d7:65:c9:8b:66:30:03:
37:8d:49:82:73:06:68:12:64:16:f9:f1:92:8d:d0:ac:e8:c6:
ce:fc:d5:d9:ba:2f:20:6e:3d:86:21:7a:bd:4a:36:d9:3c:91:
c6:c0:49:fd:3e:08:c0:b4:8f:c1:e1:b5:5e:53:60:e9:06:dd:
ee:e8:36:8a:f7:7c:ae:38:7d:d2:64:f7:d3:79:b6:59:1f:85:
bc:1f:f2:92:70:28:56:56:a9:26:46:24:38:a0:08:d4:13:9e:
3d:bf:ef:20:a7:45:eb:54:e6:a2:b4:67:30:19:76:4d:9c:86:
08:0c:9e:42:35:e6:e2:8a:96:ab:c7:df:01:b6:dd:48:fe:88:
5b:7d:87:81:c1:b5:fb:f3:5a:ff:f2:47:22:f0:34:ae:82:8f:
83:ad:be:cf:34:0c:69:c6:50:9a:3e:f4:14:4b:c9:38:59:b9:
91:a2:bb:db:5b:3d:5c:8a:e0:b2:c0:8e:86:c6:a1:aa:93:cb:
09:b0:4a:19:d5:08:57:ab:e8:ab:78:36:0f:3a:f6:df:5d:98:
b5:5a:a5:56:80:bb:c5:9a:1f:7a:79:aa:b7:c1:4c:b8:33:c2:
aa:50:8d:9b:fe:82:3d:e2:6c:83:63:e9:45:b5:34:da:2e:f6:
6a:03:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:29 2025 by rpki-client