Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be609ec8-2ad0-42f7-9159-0a3ece35241f.roa
File: be609ec8-2ad0-42f7-9159-0a3ece35241f.roa (raw, json)
Hash identifier: S5AO11suj7/Hb6mVEdImZaQ5p8Xv3RymMrljjI3No/o=
Subject key identifier: 3B:85:63:77:99:E0:FD:5D:1F:0B:F4:38:6B:23:26:01:5E:30:29:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D1B2514DEF6F3B0A317A7942D3648826A3D5F27
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be609ec8-2ad0-42f7-9159-0a3ece35241f.roa
Signing time: Wed 26 Mar 2025 19:21:50 +0000
ROA not before: Wed 26 Mar 2025 19:21:50 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1b:25:14:de:f6:f3:b0:a3:17:a7:94:2d:36:48:82:6a:3d:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:21:50 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:c9:f9:b0:cf:2c:e4:6f:dd:77:66:6c:47:
7d:d4:29:24:84:a0:3b:63:13:40:3d:44:01:c4:c4:
d4:1c:30:7e:4c:bb:e7:3d:da:f7:90:79:f7:5b:29:
89:f4:2c:f9:df:ed:2c:2e:d2:7d:2b:4d:ae:0c:2c:
17:7a:c9:81:16:aa:03:b6:90:4a:e0:52:cf:94:ee:
37:15:6b:92:a3:8e:c7:bf:cb:b1:6d:6f:79:0a:63:
ae:d7:42:11:68:b2:d2:f3:e2:fc:7a:0d:e0:dd:73:
7e:64:8e:6f:17:f0:49:ff:bc:01:83:1f:88:7c:92:
d1:be:f9:b3:16:51:d1:0c:c3:76:c1:10:29:7f:b6:
20:6e:8e:4a:fe:b6:c5:0d:45:a1:11:ee:fa:14:31:
a0:e7:71:e2:06:ad:65:4f:a5:0b:91:ee:b0:11:ed:
cf:1c:57:e8:a9:da:4b:b4:59:b3:a7:9b:05:e6:4c:
ed:16:72:d3:c7:37:33:e9:f0:c3:a4:c7:97:b7:fa:
e7:46:69:9a:d3:bc:52:5e:c1:da:09:eb:31:aa:fa:
7f:61:2d:e5:0d:4e:c3:81:9f:18:5b:23:56:d3:08:
46:18:3a:ec:89:c2:d9:a7:b3:f9:98:60:7f:de:6c:
4d:e3:73:3d:bd:4e:e1:ec:f7:f6:92:09:d6:15:79:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:85:63:77:99:E0:FD:5D:1F:0B:F4:38:6B:23:26:01:5E:30:29:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be609ec8-2ad0-42f7-9159-0a3ece35241f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:800::/40
Signature Algorithm: sha256WithRSAEncryption
c8:43:18:14:10:8a:c3:05:11:2c:59:0f:7b:65:fe:b5:bc:79:
b9:3e:cf:f8:1f:0a:9e:7d:61:75:37:ec:0b:90:d0:42:a8:90:
ff:76:c0:cd:51:4e:02:b8:73:5f:ae:5d:2f:22:b4:db:ac:38:
a1:a0:8b:b4:3a:dd:36:eb:00:4b:48:12:4d:fd:de:13:f0:e8:
78:58:c1:1f:10:cc:48:be:97:12:be:64:1d:28:ab:f3:28:a9:
f3:15:67:ef:cd:ab:42:16:99:51:eb:5e:b5:bf:5b:b3:82:23:
b9:89:7c:92:04:5b:03:83:84:20:01:ca:5c:2f:c0:53:d7:bb:
18:3a:bf:ff:ec:16:8d:b1:8b:35:b6:85:39:fe:88:b7:a5:33:
9b:00:3c:e5:01:ce:28:60:f0:c6:ac:bc:2b:37:fb:09:88:d1:
a5:d5:3d:d4:10:d8:2a:39:ad:eb:0b:19:fe:ae:95:50:fa:70:
70:b9:bc:dc:98:a5:34:f6:74:84:0f:40:90:3d:51:f0:53:a6:
e2:72:9f:31:0b:dd:dd:b6:28:97:c0:70:56:59:fc:ce:c8:50:
24:b0:d4:c2:bc:e0:d7:6b:78:a7:e1:a3:6f:78:0e:f2:de:7c:
ed:62:b2:7c:7a:db:9b:b8:60:13:f8:ec:53:e8:7d:72:15:46:
7b:89:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:40 2025 by rpki-client