Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
File: b0fb422a-c1ce-4269-b503-2c8145fc798a.roa (raw, json)
Hash identifier: E9dQBZbUY4Wk/MdAhFV8sT4kst/WBxvrz1bQJUTUn40=
Subject key identifier: 60:B0:56:58:39:9D:6A:65:A7:74:DE:C3:8E:3D:D1:20:19:A3:5D:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53D2C13BD2EC7D95A7D80030DB1776A83C22C27B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
Signing time: Wed 05 Mar 2025 16:40:10 +0000
ROA not before: Wed 05 Mar 2025 16:40:10 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d2:c1:3b:d2:ec:7d:95:a7:d8:00:30:db:17:76:a8:3c:22:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:40:10 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:79:14:83:b9:34:78:5c:72:6e:a7:e5:e4:
13:5c:8e:16:5a:f6:e8:1f:86:89:07:6f:bc:39:68:
01:f9:3a:d0:b0:43:dd:0b:07:1c:ef:56:14:c5:de:
43:9c:e3:02:9e:6c:b0:df:48:33:7f:43:5a:ec:95:
cf:35:9b:6b:71:cb:17:03:84:15:53:78:c3:8c:16:
f1:fd:c0:4a:65:34:71:88:3a:f9:5f:23:59:4e:cc:
15:7b:fd:f6:8e:83:bc:c3:ea:01:79:3a:12:71:91:
f0:c0:24:00:e3:d0:e8:b8:9e:2c:4b:15:b4:5d:bf:
f7:ac:6b:32:dc:d9:79:09:0d:54:5b:0f:01:ef:20:
60:26:06:2c:c4:04:d4:9d:0c:52:9d:d5:07:02:00:
ed:5e:d9:02:28:83:da:ee:41:9d:d7:4a:81:14:7f:
03:1b:17:f2:d6:3f:de:d8:93:8e:fa:a8:67:a4:2c:
59:ce:97:3e:d4:0e:91:b1:6e:8b:b5:3b:31:38:85:
cc:b6:66:42:09:26:50:83:11:df:99:2c:92:84:a1:
a9:fc:ea:49:99:56:26:19:e8:ef:aa:ca:fd:55:93:
1b:1f:b8:fd:4e:57:1c:6b:2f:60:3d:d6:01:24:6e:
17:98:f3:b0:00:20:3a:84:f1:9c:18:74:6f:d1:ad:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:56:58:39:9D:6A:65:A7:74:DE:C3:8E:3D:D1:20:19:A3:5D:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a020::/48
Signature Algorithm: sha256WithRSAEncryption
95:4d:dd:d1:55:e0:ce:48:bf:5c:ab:dc:9a:f3:05:cb:6a:68:
37:bd:3f:fa:de:29:12:e0:f4:1c:cb:40:f9:e6:f9:cf:35:22:
45:ca:5b:c9:6e:fa:3e:6c:89:61:b5:41:ab:e0:4d:3b:f6:6b:
d4:a0:ed:ef:ae:e4:9a:a7:20:94:38:77:62:50:d5:3a:0c:cd:
64:15:38:0d:f0:9b:c7:b7:8d:fe:39:92:ae:c7:0e:b6:1f:1e:
82:3a:30:42:d4:4d:78:03:f1:9c:77:da:79:e4:65:ca:e1:ae:
d7:b4:1e:29:85:48:60:60:04:a7:6c:c0:7f:4d:4e:00:fc:00:
8e:d4:e1:3a:45:72:0e:cb:3a:bc:88:93:c9:4e:f1:94:60:06:
8a:f9:de:55:d9:a1:b7:fc:8b:fa:e7:cf:87:68:34:41:96:d8:
d0:47:bc:a8:82:30:31:c2:91:4f:53:16:31:0b:4d:5e:bb:8a:
e9:80:5a:30:a5:8d:06:f3:e6:3b:e7:8a:26:3a:a3:7e:ac:c0:
7d:04:44:c3:0c:57:7d:14:78:70:76:83:e7:d6:f8:ff:3c:43:
86:a9:40:27:fa:42:e4:26:78:b3:18:6b:8d:0e:0c:af:d9:5b:
fd:45:f6:e7:cb:74:2a:73:51:14:56:09:b8:9e:40:9b:72:78:
d7:28:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:48:52 2025 by rpki-client