Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
File: aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa (raw, json)
Hash identifier: 5fR5f1ho+zODtE+i7b8PCcd8nr1xTdsemYMdpotfD2I=
Subject key identifier: 4E:6C:33:8F:E8:F1:51:74:A9:B8:B8:8A:A9:8D:02:07:03:17:61:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BE2F585AD6797B3D5B1A1EEA5A57F17B18296FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
Signing time: Wed 05 Mar 2025 15:40:37 +0000
ROA not before: Wed 05 Mar 2025 15:40:37 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e2:f5:85:ad:67:97:b3:d5:b1:a1:ee:a5:a5:7f:17:b1:82:96:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:40:37 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:6e:d4:a6:3c:2d:df:86:df:d5:55:6c:1d:
cf:d2:49:d2:71:8e:e9:05:aa:bf:c6:4c:f8:59:c1:
64:dd:91:28:16:29:cf:13:40:d1:03:7a:46:c6:e5:
3b:cb:34:84:2c:07:2a:4a:76:35:d6:4b:ec:12:1d:
fc:8c:d7:20:fb:c4:73:07:a8:c1:df:d9:fe:24:f2:
50:a3:34:bb:db:80:dc:a4:0d:40:23:8c:51:15:38:
da:05:5a:63:60:74:8e:ac:26:c4:aa:86:7e:42:f3:
05:b8:6e:e4:65:43:19:18:8d:02:ad:0e:23:6d:c1:
96:1f:32:1a:d8:f3:65:a8:11:14:3a:1f:ee:97:72:
19:f1:86:1c:3f:7b:ed:86:c5:e3:5e:4a:e9:84:29:
d9:9e:ea:72:57:2b:bc:59:34:0a:ac:1a:22:7b:db:
5f:71:35:d6:a4:df:1f:62:72:4e:5d:ff:15:74:ba:
10:20:a7:6e:6b:7c:89:f6:18:c1:55:21:83:f1:86:
09:c8:ee:35:d0:9f:78:c8:0d:42:60:7d:88:0e:79:
6c:a1:47:9c:2e:9f:76:86:48:67:ad:ac:69:c4:bb:
07:e6:41:64:fc:00:e5:00:61:69:d3:96:21:27:53:
d6:ce:f7:88:81:e6:15:d7:b1:c3:6a:75:e5:04:48:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:33:8F:E8:F1:51:74:A9:B8:B8:8A:A9:8D:02:07:03:17:61:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a080::/48
Signature Algorithm: sha256WithRSAEncryption
8e:58:7b:1d:02:94:9d:ee:68:e4:de:e2:a6:df:cc:01:29:c5:
d9:bd:bb:f4:c2:48:d9:26:79:03:69:9a:c1:3b:02:72:44:ac:
6f:2c:8c:2f:a3:42:dc:04:2b:8a:fa:c6:a5:6d:f5:85:67:4c:
f7:54:3e:16:b5:cb:b2:a8:55:84:e5:7a:73:59:26:33:f9:5c:
35:74:d3:af:04:6e:92:d3:0a:91:1f:8a:f1:53:bb:a5:1c:07:
91:56:c3:86:c6:9e:66:bc:fb:22:65:26:e4:51:89:96:51:8e:
d4:cd:06:fe:35:b4:fa:81:e7:62:b0:d4:74:8a:99:6d:c8:7b:
b3:5b:2e:bf:72:b5:dd:45:5c:4c:3c:2b:3b:a5:67:18:8d:15:
5e:49:91:99:a0:af:ef:f0:3f:89:80:d4:10:c4:a3:a6:ea:35:
b5:12:dc:dc:c9:ce:24:5c:c7:f5:59:10:4e:5a:aa:28:29:3b:
62:a7:0d:d6:a1:e4:9e:20:86:df:32:f3:bc:fc:8b:89:96:b5:
09:0c:27:7f:d5:ba:c1:b3:92:1d:ee:36:b5:ea:ea:f9:27:f0:
c6:f6:b3:2e:22:50:ae:d0:0e:14:1c:0c:ca:8e:fd:59:0f:b0:
ac:3c:26:25:a6:fc:71:8e:d9:cd:7a:dd:0c:13:74:98:c8:89:
be:45:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:23 2025 by rpki-client