Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
File: b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa (raw, json)
Hash identifier: McYFnX6N0owmgVTTyllZPuLAytYOzmFYS7mLcdlodJw=
Subject key identifier: 45:08:DB:5E:3C:8C:A0:91:0E:B7:8C:46:FA:C5:D9:5C:28:2D:28:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 469786B601C9054BD185D6865FC927820A555078
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
Signing time: Wed 05 Mar 2025 17:41:32 +0000
ROA not before: Wed 05 Mar 2025 17:41:32 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:97:86:b6:01:c9:05:4b:d1:85:d6:86:5f:c9:27:82:0a:55:50:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:41:32 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:f8:b7:3a:b3:16:14:ae:46:b4:40:e6:a4:
af:e4:7c:50:1a:41:15:1d:7c:c5:80:19:04:be:9b:
40:7d:5f:33:c6:ef:34:7f:15:f1:a2:f5:10:10:74:
48:d9:8e:53:21:2c:5e:af:1d:8b:e6:7d:3c:8c:b6:
50:a0:dc:f1:ff:ec:86:95:76:43:73:bb:05:b7:30:
45:2a:69:87:94:d8:ee:d5:fb:fa:ae:7f:c7:02:ec:
15:f2:07:2d:90:7a:64:f0:3d:6c:94:62:e3:96:97:
88:47:29:c7:47:d7:e9:70:ef:2e:cf:b8:a2:ee:9b:
fd:8d:64:f4:03:ad:72:92:c1:e4:d2:dc:9b:f5:36:
c6:63:95:a8:9f:be:9d:ff:24:fe:99:33:d4:39:03:
6a:7f:43:1a:8a:58:1c:0c:9a:f8:a0:f6:f8:fe:8a:
69:2b:54:45:d3:d8:b7:09:6a:7b:8f:8c:11:59:f8:
4e:af:71:69:a0:e6:2b:68:bc:a2:c5:68:2e:ee:7a:
39:b2:11:bc:23:7e:17:53:0d:c9:0c:44:4a:88:9d:
84:bd:2a:92:9f:b9:f1:37:46:1a:05:be:9c:ac:5f:
dc:64:24:2e:df:ab:20:49:e0:af:59:34:12:6c:27:
b2:b8:dd:16:28:08:24:40:94:13:e2:63:31:97:9b:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:DB:5E:3C:8C:A0:91:0E:B7:8C:46:FA:C5:D9:5C:28:2D:28:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3b18648-bea0-4f7e-8f0f-5ad2d2f05ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b:800::/37
Signature Algorithm: sha256WithRSAEncryption
a1:74:64:3f:cd:72:90:39:57:5a:e2:5f:33:dc:09:65:1c:14:
c2:1a:5a:4b:71:8f:26:c6:85:af:9e:0a:3b:92:5c:47:0f:48:
9c:f9:31:5f:74:eb:59:6b:bf:d7:18:75:44:1b:88:77:0e:21:
08:e7:70:67:73:74:cf:cc:8b:b4:f8:a7:70:8a:3b:34:12:10:
94:0a:65:0f:34:a2:ed:2e:e0:7d:df:ad:8a:e6:ab:94:d0:2f:
bd:a8:58:c2:5b:b0:8c:ab:16:85:25:f0:e3:1d:98:60:e5:d7:
87:c4:70:b0:03:22:6a:e1:d2:73:9a:5a:64:51:eb:cc:df:d9:
0d:5c:71:54:a1:a5:25:79:53:1f:cf:97:17:e0:bd:47:06:c1:
28:e9:32:b1:28:4b:c0:bf:18:e8:b2:23:0a:45:05:23:2a:0f:
1d:29:3f:64:1c:66:95:db:40:2c:8a:db:7d:3a:ea:65:ce:1a:
76:6d:d1:00:b3:22:ef:1b:57:ee:30:37:36:77:42:a5:c8:af:
9b:9e:3b:06:3e:66:ad:7a:a4:23:07:45:16:9a:6f:27:4c:cf:
4c:67:9b:39:78:3e:16:04:f6:02:fe:d2:e0:84:26:db:00:1f:
6b:07:e2:c1:1f:8d:cd:42:67:05:60:bf:0e:e6:64:66:75:95:
f8:f3:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:00 2025 by rpki-client