Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
File: ac551e9a-50f2-4eff-9247-e71429bd9c80.roa (raw, json)
Hash identifier: wmuGFodsGcnRqDabTqaCyBLEGfOTR0ixrL9f6ZyNb0k=
Subject key identifier: 5B:85:88:86:E0:38:01:2C:D5:AD:AA:21:2C:1C:76:3B:C8:28:F1:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C8458FC51701256BBEF82C9CA60D3590B478D0E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
Signing time: Wed 05 Mar 2025 16:30:27 +0000
ROA not before: Wed 05 Mar 2025 16:30:27 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:84:58:fc:51:70:12:56:bb:ef:82:c9:ca:60:d3:59:0b:47:8d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:30:27 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:2b:6a:06:0b:47:80:6a:fb:fc:0f:4c:46:
af:97:97:44:80:69:f5:9c:8c:7c:e2:35:92:ee:a0:
d6:ea:40:9e:8d:e4:02:31:11:ea:a9:68:0b:13:6f:
ee:81:5c:16:50:ea:77:20:7b:c9:35:06:7e:88:04:
e7:44:e0:97:c2:c8:99:3d:87:f1:68:00:ae:ea:73:
f8:50:22:21:60:58:02:1f:93:95:8c:94:0e:72:c1:
70:84:fe:c3:bc:e8:f8:20:8d:7e:0c:b4:6f:a3:4f:
89:91:63:62:e0:21:ac:ac:0f:a1:00:b0:fc:82:87:
26:3f:14:08:e3:d3:52:2e:33:76:3a:04:79:99:50:
61:12:8e:d7:0f:80:10:c2:d9:af:e8:0f:78:dc:7e:
3e:aa:97:26:a9:43:3d:98:2f:b4:5e:46:db:b5:3e:
2c:41:6f:29:be:2c:d3:fd:52:cf:d9:41:17:ce:6c:
77:6e:b8:11:57:c0:f4:f3:12:7a:12:17:34:20:ac:
8f:8b:45:b8:d8:ab:c3:55:e2:65:75:33:1e:56:b6:
73:c2:55:26:fe:a6:38:59:35:48:96:73:57:fb:ef:
77:fb:4b:e2:7b:f3:aa:d0:b0:ec:a1:c9:97:de:d4:
62:ef:9e:8c:e4:8f:e7:28:fb:81:74:86:28:b3:61:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:88:86:E0:38:01:2C:D5:AD:AA:21:2C:1C:76:3B:C8:28:F1:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b080::/48
Signature Algorithm: sha256WithRSAEncryption
6f:f7:0d:4b:a3:0a:b4:df:70:c7:f5:73:06:11:33:96:fb:a3:
fb:d6:dc:43:a5:fe:84:6b:56:c7:fe:48:58:19:03:d3:5b:5f:
47:49:2c:de:7e:8a:bd:80:87:e4:51:72:c6:aa:e7:1c:50:d2:
7c:28:a3:e0:2f:5e:a0:ea:ed:85:51:c7:c2:29:80:1c:a3:69:
ba:a4:99:5d:1a:e9:c2:54:76:92:8f:1e:ca:f5:f8:6c:d0:b8:
8d:bc:21:67:4a:10:23:ef:0d:d0:4f:4d:16:54:ae:7a:14:dd:
85:b5:9b:c9:6e:84:71:77:83:53:df:5c:81:ac:af:7c:c2:89:
d4:28:16:55:36:e7:4d:8f:ad:92:74:d9:08:05:87:bc:6c:df:
c7:dc:bd:de:e4:33:f2:d9:7b:93:ee:9e:32:89:6e:3a:82:63:
a6:e6:6e:7d:5f:44:11:87:bd:fd:92:91:64:8d:50:a3:98:9c:
5e:0c:64:b5:30:d8:21:ce:42:3a:5d:91:c7:02:c3:2f:c2:d0:
93:ac:2d:c6:06:22:7b:5d:ce:8d:37:c5:61:0e:5f:5f:71:df:
c5:d7:d1:42:ee:d3:7c:ba:72:33:8e:da:42:8b:cd:a9:2b:86:
f9:c7:9b:94:70:c7:6a:b5:ad:d6:34:7d:66:d9:9b:bc:c3:ad:
88:6b:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:07 2025 by rpki-client