Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
File: b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa (raw, json)
Hash identifier: k1T2R1ZZcP4fsqnToAygzvU91S+KIaqGk5sIvSR7szI=
Subject key identifier: 12:0B:23:D9:24:A5:33:DB:D1:8E:D3:29:01:8E:EA:69:02:DC:2C:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 322ED16EB5777190F8CC89D999288EF0B1907C06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
Signing time: Wed 05 Mar 2025 16:20:58 +0000
ROA not before: Wed 05 Mar 2025 16:20:58 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:20c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2e:d1:6e:b5:77:71:90:f8:cc:89:d9:99:28:8e:f0:b1:90:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:20:58 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:74:90:14:de:38:45:f4:92:ed:39:80:9c:
95:2b:4c:01:15:48:69:31:a5:60:c9:96:3a:6a:10:
cc:f1:94:54:46:67:93:46:75:25:9f:e5:07:90:1c:
bb:1a:e6:bc:da:00:67:cf:ba:aa:a2:94:f5:dd:ec:
1c:c3:64:48:a0:a2:dc:f2:70:6c:c1:43:84:0a:5d:
4d:98:8b:c1:80:2f:d0:56:9c:a0:d9:72:0c:f6:91:
06:1d:eb:7c:64:30:38:15:bd:ba:2f:e0:c4:cc:08:
50:8d:ca:be:4b:a7:ad:65:b2:00:23:db:af:89:4f:
32:f8:9a:31:cb:12:6b:53:e1:25:1e:bf:e0:2f:c9:
13:05:c3:50:1a:5c:46:a8:e6:00:55:8a:6d:40:e4:
88:f6:4f:db:a0:12:81:ed:5e:bc:37:f6:a8:27:06:
c3:08:2e:54:cc:73:15:62:ea:e1:51:0d:a6:20:fa:
3b:d0:c7:00:df:f0:5e:f0:16:32:f7:b8:e4:19:8b:
05:c0:0e:f7:e1:97:dc:c6:00:00:75:0b:dd:b1:e5:
2a:02:cb:af:41:80:f2:f5:1a:20:a2:94:26:89:a5:
5e:5b:cc:d3:89:b7:25:71:6a:78:e7:c4:3e:20:78:
c1:33:64:99:f4:b2:b5:5f:f4:2d:05:b7:a9:3f:36:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:23:D9:24:A5:33:DB:D1:8E:D3:29:01:8E:EA:69:02:DC:2C:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
37:e8:07:9e:75:9a:32:bc:22:27:54:3d:1a:74:0c:51:d1:22:
aa:9d:ca:69:20:b6:aa:4f:34:67:51:28:a9:90:6a:72:bc:d8:
5a:d2:95:b3:5f:6d:e0:a3:75:bc:88:6d:51:08:10:30:cf:d7:
18:cd:56:3a:ad:bf:25:b5:f9:7a:6e:79:e8:f1:c1:37:ae:cf:
14:b5:1b:ac:4a:24:81:9a:cd:6b:d1:45:f6:5b:93:87:7b:8c:
c7:9e:42:06:6a:db:ed:b5:d0:bd:31:52:12:d3:91:94:ef:0e:
42:c4:85:0d:bd:d9:ed:2b:e4:3f:c2:c1:2d:1e:45:99:6e:3f:
38:c7:47:12:b4:82:c9:50:00:f8:b3:fd:93:dd:44:1d:1f:c0:
f9:b8:ca:38:ba:b3:62:12:25:b5:57:7b:e0:f6:fd:7c:57:72:
ba:67:46:57:14:24:eb:8c:d7:b7:ef:20:e6:3c:b7:a5:bd:13:
c5:06:6d:b6:73:1b:a7:dc:3b:24:5e:39:29:d6:74:af:07:f1:
0e:bd:48:f3:d8:c7:0b:9d:e0:17:bf:bb:c7:9e:c8:2c:92:a0:
b9:9f:59:40:73:28:46:71:82:a6:3f:84:80:ab:30:b6:b8:0c:
f3:22:a2:c4:85:67:49:c8:30:a9:6b:3f:d3:54:11:6d:c2:54:
45:d2:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:20 2025 by rpki-client