Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
File: aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa (raw, json)
Hash identifier: HHYrGpJgRiO1yGUhMhzUbqsCuPvAHUYRhG4t4ezNLOE=
Subject key identifier: 0C:7B:54:5B:75:81:FA:CC:F3:BD:BA:85:8B:06:0B:B8:47:9C:F5:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B9EBCAFE8401AF5B02614CC4BC27548798343E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
Signing time: Wed 05 Mar 2025 15:50:51 +0000
ROA not before: Wed 05 Mar 2025 15:50:51 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:bc:af:e8:40:1a:f5:b0:26:14:cc:4b:c2:75:48:79:83:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:50:51 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:fb:14:85:36:d4:44:60:58:d4:2d:e5:09:
92:31:fc:47:3e:7e:66:d5:78:2a:f6:33:1d:4b:c3:
e9:57:5e:51:dd:18:ec:e5:90:1a:e2:fa:e9:6f:b4:
30:04:8b:b1:4f:96:14:3e:c2:83:c4:65:33:22:0a:
7e:e4:54:da:f8:8d:b4:f9:15:3d:cc:1d:84:90:06:
01:58:c6:51:93:5b:91:f2:a2:82:48:90:17:b9:dc:
3a:18:14:aa:2b:20:ad:e9:d0:92:c1:df:58:ea:0f:
4a:4f:07:ae:54:c6:f9:f7:31:de:54:3f:ab:c9:19:
66:3b:c5:5c:94:de:1a:8a:0a:17:37:37:6e:5f:48:
35:41:af:5a:d1:41:76:b0:a9:c0:cc:ed:42:42:98:
3b:9f:fc:cd:79:6d:4c:31:1a:55:8f:60:8a:17:c9:
07:ab:e4:a3:1d:af:a8:f4:d1:cf:ae:82:53:2d:79:
4c:05:c5:a5:8f:f5:14:83:71:a0:8d:72:d4:81:f2:
d7:b3:6b:c3:67:9e:65:2f:f3:1c:14:53:55:c2:bf:
ca:c7:57:c9:da:1e:25:28:65:eb:10:80:71:f1:27:
fa:c5:f2:71:69:59:ec:72:a2:de:99:14:ef:59:40:
fa:e1:c7:5a:65:28:d7:f7:0f:24:c4:19:ee:dc:5f:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:54:5B:75:81:FA:CC:F3:BD:BA:85:8B:06:0B:B8:47:9C:F5:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9080::/48
Signature Algorithm: sha256WithRSAEncryption
6c:18:87:c4:c1:5a:ab:e1:e7:73:5b:23:c3:3c:7a:59:2b:1e:
39:e5:10:87:f6:47:b7:5c:76:0b:be:57:58:38:b0:0c:a1:28:
d4:a2:87:95:da:61:a8:93:74:0b:a0:b9:0e:1d:c1:65:44:33:
5c:64:25:1b:59:f0:78:bb:8e:ec:e2:80:41:31:7e:9d:d2:90:
cf:3f:2a:29:67:30:18:1d:7b:2a:20:58:99:64:a2:44:17:0d:
8d:6d:9d:fd:25:67:b0:a9:c8:d9:39:97:5f:54:59:04:e2:2c:
3f:23:e1:93:7d:61:1b:42:e2:2e:ec:b0:db:3a:00:55:a3:ec:
ce:50:87:ee:c4:2b:d6:b7:9b:d5:4d:71:b8:16:98:1a:2c:f9:
c9:de:ba:70:ec:a7:ba:52:38:b4:6f:84:52:d9:a1:67:67:f2:
19:e8:b1:40:d1:ea:49:93:4c:85:a1:50:b3:0d:4b:0c:54:2a:
35:93:3d:38:d3:25:b1:0d:d6:04:d7:e7:44:51:4f:17:c3:14:
71:7e:26:2d:13:8a:a5:d2:37:85:5a:5f:82:e2:0e:65:2c:6d:
a4:5e:63:6c:f7:a6:d2:76:ab:d1:ee:2b:ae:53:de:9d:8e:02:
fc:25:e7:ca:9a:dd:5e:9a:f1:7b:ba:01:1c:a9:f1:df:d3:35:
8e:09:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:08 2025 by rpki-client