Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File: a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier: mybMyWw6WDk25tAlDJ8+42suuhbACpYdETb4ZNIiKwg=
Subject key identifier: 46:69:81:03:3C:E2:A0:31:AF:2D:44:19:58:08:51:A5:50:5C:31:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56968EBC2CAEB35096DF45C05785D65A7B5E5921
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time: Wed 05 Mar 2025 16:11:07 +0000
ROA not before: Wed 05 Mar 2025 16:11:07 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:96:8e:bc:2c:ae:b3:50:96:df:45:c0:57:85:d6:5a:7b:5e:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:11:07 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:6a:69:73:ef:02:ee:e4:da:68:d0:dc:8b:
75:9f:8e:a2:fb:66:96:13:89:db:46:b5:ed:91:86:
18:5b:51:b6:80:ed:8f:cc:56:79:6d:91:37:cc:b1:
cd:65:90:34:91:3d:26:7c:19:af:d0:8b:19:15:ff:
96:e0:bb:8e:d2:a8:d5:a9:fc:cf:ec:21:2d:ee:1b:
96:d9:c3:26:e4:fa:cf:54:48:d7:6f:fa:57:81:a0:
1b:ae:61:2e:19:29:13:d0:5b:5f:21:e6:c4:4e:18:
16:af:04:66:b4:c8:c0:af:fe:43:24:27:17:a8:53:
bc:24:be:e5:f1:c3:66:1b:2a:2a:1f:61:11:72:0e:
ae:3c:00:c2:80:9f:42:82:ab:c2:02:a4:3d:9e:d3:
10:62:c0:c9:2e:cc:f1:ca:96:37:5a:87:78:b4:91:
a4:8c:07:b7:98:24:33:d2:96:1a:f6:90:5c:56:ce:
33:12:08:44:b6:06:8b:5f:89:01:39:8e:8c:cb:60:
1f:bf:37:dd:30:09:99:ad:1b:b9:17:76:8c:55:b9:
59:4b:48:55:38:ac:bc:a4:0c:35:0c:42:d3:cf:a5:
cc:bd:8e:cf:7c:b5:e2:43:6e:02:ab:fd:fe:2b:3b:
f8:6f:8d:98:20:d7:de:7f:e1:bd:0d:e9:f6:61:d0:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:81:03:3C:E2:A0:31:AF:2D:44:19:58:08:51:A5:50:5C:31:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
39:73:e4:d8:c7:b7:fe:7c:91:08:61:82:fc:9e:e9:31:6f:32:
61:22:73:b8:f7:c9:25:ba:ec:5b:96:e3:a7:09:9e:1f:df:68:
86:bd:7d:ba:6f:de:6f:04:83:00:04:87:cc:19:fd:60:1b:4a:
48:a5:48:94:47:30:b4:76:62:fe:c0:e5:df:73:96:22:9d:b4:
11:a8:79:c7:90:ce:53:3d:4e:00:e7:13:d4:c1:72:f2:5f:ac:
85:0d:62:ef:63:39:c6:4c:b3:21:7a:1b:ce:72:aa:cf:54:49:
c8:de:b4:13:59:36:41:43:62:01:08:cd:82:4f:57:8f:20:d0:
33:ea:e6:fd:34:76:d2:c7:a8:4c:c8:eb:eb:3e:0f:06:fb:f1:
a2:20:67:de:f9:fe:7a:03:d2:fe:58:93:b6:24:7d:45:fc:26:
e4:ff:0d:c6:c3:1c:79:e2:ea:2e:8b:c0:82:86:14:ca:47:d4:
c4:8e:00:e7:62:10:21:41:e7:67:dc:e7:d7:7c:7e:28:97:f8:
59:ce:33:ff:a8:9c:28:c8:49:2e:cd:63:a5:3f:28:e4:1d:f5:
76:6c:89:f8:0a:c3:bd:bb:d8:77:1e:fa:36:21:ca:f0:fb:6d:
c7:61:0b:eb:c2:b8:1e:b9:88:d4:10:55:e5:b9:e5:50:50:a7:
cf:be:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:22 2025 by rpki-client