Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
File: be80d575-a5bd-4774-a8ce-a1b1655827e4.roa (raw, json)
Hash identifier: HUrNgyyz+hG46ZrdBFV6GtmgukB9wAK/InEgg2SfFYE=
Subject key identifier: FE:68:69:C2:D6:CE:C6:26:80:98:72:0B:83:1B:E9:AA:2D:CF:31:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B4A3609B40181D217DE418B57F82A41CFE4161F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
Signing time: Wed 26 Mar 2025 19:23:36 +0000
ROA not before: Wed 26 Mar 2025 19:23:36 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4a:36:09:b4:01:81:d2:17:de:41:8b:57:f8:2a:41:cf:e4:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:23:36 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:f2:20:71:e4:8d:4b:46:da:b3:cd:7c:d6:
c5:44:b6:1b:a0:c7:b8:9c:4b:20:11:a2:77:4a:9d:
b4:31:7a:11:a6:cc:3c:44:24:cb:b0:15:0f:00:ed:
e6:14:77:48:e6:6f:29:10:a5:ed:11:e2:42:92:c5:
01:74:73:f2:b7:7b:fc:63:65:39:28:8c:c5:e5:a0:
78:ab:cd:96:a9:91:5a:54:6d:69:b5:8a:56:e0:d2:
cc:a5:29:a4:69:0c:a9:c3:89:02:d6:2c:61:87:49:
45:6d:1d:a4:d1:e0:42:e4:8e:10:8e:67:91:15:af:
f4:9a:23:06:4d:84:84:b4:37:18:62:11:98:18:c6:
04:4c:1d:a8:b4:19:99:9b:6f:1e:c5:04:9f:52:67:
46:9f:6b:4c:ba:02:9e:3d:63:7b:02:80:08:c0:21:
85:ac:b4:3c:d5:4a:95:6f:25:fb:a4:38:ca:5c:7d:
47:b8:50:af:b5:f6:ee:40:fb:50:38:80:d8:ec:2e:
47:31:7e:73:6a:d7:23:f6:4a:a4:3b:a0:b1:16:3e:
a7:2b:b7:21:c7:d4:4f:04:0d:30:5c:40:27:42:10:
e3:b0:71:13:ce:7f:5a:9e:d8:9c:27:2d:7e:50:fe:
74:8c:7a:0d:70:7f:fb:32:b4:dd:6f:70:14:10:8d:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:69:C2:D6:CE:C6:26:80:98:72:0B:83:1B:E9:AA:2D:CF:31:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:800::/40
Signature Algorithm: sha256WithRSAEncryption
25:cf:2c:64:50:20:0a:9d:72:ad:17:a4:84:9a:5d:29:34:02:
a6:08:9a:8d:ca:b3:18:41:5c:16:c9:97:cd:f8:e6:01:49:d8:
68:00:24:dd:07:cc:67:8a:a4:14:e7:67:fa:9c:7b:30:09:54:
50:14:5b:ae:cc:03:66:b7:96:ee:b6:d0:24:61:63:4a:7c:25:
3e:51:ae:a4:c8:53:d7:6b:26:e5:95:55:1b:6a:ef:6a:bf:f7:
5c:f7:fe:aa:54:8c:9e:ad:cc:3c:d4:2c:cf:72:22:ba:b5:3a:
3f:7a:65:25:c9:17:fc:4c:06:98:cc:47:73:1b:b1:94:03:56:
4d:23:2b:cc:15:28:5b:51:4b:2a:fe:9d:13:fa:5d:8b:14:97:
67:be:4c:c5:ca:0b:9c:90:5f:89:69:a6:90:88:eb:64:4b:be:
b0:87:78:61:a7:e9:63:4f:4f:6d:b5:7e:7e:4a:91:42:19:15:
3e:9d:a8:ad:3e:60:d0:78:ac:81:27:98:81:81:d1:27:2a:ca:
c4:8a:5d:fa:18:39:72:94:c6:b7:6f:a7:87:8f:d9:12:5e:d7:
9e:83:aa:74:74:5d:1d:6e:08:ef:cf:aa:eb:07:6f:df:3b:78:
94:d6:0b:a1:91:65:60:7c:e8:08:6e:fd:16:c3:17:2a:b3:e4:
7b:7c:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:33 2025 by rpki-client