Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
File: bba6d1fd-8b29-4481-a568-7018abbd9103.roa (raw, json)
Hash identifier: usB5nRkW51seII47XfopfA9OK/BAy65FVhmpTyW3AV4=
Subject key identifier: 10:B1:57:F0:E8:A3:B6:76:68:81:FA:60:10:46:5B:78:A1:5A:33:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77D748538CDDBE1583D91F35E77921A9198BB1F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
Signing time: Wed 05 Mar 2025 17:00:19 +0000
ROA not before: Wed 05 Mar 2025 17:00:19 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d7:48:53:8c:dd:be:15:83:d9:1f:35:e7:79:21:a9:19:8b:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:00:19 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:5e:8b:6e:b0:a2:ca:0e:20:7e:55:c3:19:
c3:63:21:51:c6:4d:9c:84:bb:f9:ef:91:88:e8:d0:
b7:f4:6c:67:5a:66:76:86:c7:54:4a:80:8c:90:10:
4a:2d:c5:0f:f8:21:e9:18:c2:b2:5b:9f:b3:de:7a:
c0:3b:b7:33:41:70:07:40:68:89:b3:22:94:0f:d7:
88:c6:94:6e:0c:d1:1e:f1:ab:96:31:52:d3:1d:94:
e8:a9:f9:dc:85:e0:67:bb:78:6f:3b:bc:a3:df:db:
e5:5d:23:69:9d:32:9a:8f:18:38:e4:f6:6a:ea:43:
b2:9e:32:6a:11:f1:bd:99:fa:c4:5a:63:05:6f:04:
03:93:1a:32:af:e6:6e:dd:7f:65:91:90:a8:5a:da:
44:f8:27:78:34:c9:5b:87:5e:09:fb:66:67:3f:a1:
66:1c:12:72:89:0c:fd:f6:b6:45:db:b6:9b:15:80:
14:d0:54:69:6f:51:69:00:7c:1b:bd:67:66:02:0a:
ea:97:68:bd:6c:8c:1c:82:3b:c8:68:d5:70:8e:13:
00:af:2c:7b:c9:92:af:b2:ef:7a:87:cc:76:39:4f:
61:d5:1b:41:15:3e:69:93:86:94:cf:94:27:af:bc:
e5:57:b0:56:3d:b2:a4:a2:86:f5:6e:37:75:34:af:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:57:F0:E8:A3:B6:76:68:81:FA:60:10:46:5B:78:A1:5A:33:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9080::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a7:5e:c1:08:27:f8:44:c7:af:e4:f2:56:18:d9:86:bf:b6:
61:02:f7:ff:43:f4:fb:66:c5:95:29:3b:ba:7b:c7:42:de:d2:
14:5d:db:b0:ba:46:3d:ec:d0:8f:c2:2d:fc:e2:5f:96:0c:f4:
f0:42:ef:09:28:f7:51:d3:d9:0c:c2:64:1a:d7:4e:88:f2:2f:
a4:81:68:13:44:95:bb:bc:f4:bc:8e:31:c8:9c:74:5a:18:2d:
37:bb:bd:be:df:ac:33:93:c7:a9:be:d1:24:40:89:0a:74:54:
63:dc:6b:f4:ad:28:37:c1:7a:4e:09:28:dc:2d:d7:5b:dc:92:
d8:b8:93:61:3d:62:1a:9d:f5:20:9c:01:63:c5:0f:0b:86:f4:
fd:75:6e:49:fd:83:64:5f:73:43:e6:8e:8c:7d:13:b2:41:cc:
66:5c:4c:d7:b7:e0:6f:2c:f8:07:cb:62:35:46:e1:f8:85:18:
45:72:36:d2:06:97:82:c6:75:23:94:dd:85:f9:3c:8a:bb:a3:
ae:ab:0a:c9:dd:a5:48:15:33:81:a3:37:9f:39:03:00:f1:d4:
56:d3:55:4e:c7:99:b6:74:e4:ee:f8:e0:43:53:bb:5b:fd:e7:
2f:69:d6:06:4a:32:13:7b:c9:ca:8c:55:03:40:23:26:ac:8f:
fb:c7:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:22 2025 by rpki-client