Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
File: ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa (raw, json)
Hash identifier: uMUFS7/qT0saUOhBwc5jwurK/VGwgVQbxdby7efvccI=
Subject key identifier: 3A:C5:94:D5:01:B8:AD:58:9A:03:F2:3F:58:71:7C:34:F5:3C:7C:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37C017794E6C914D91FC6D6AB517FEC2A44B5524
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
Signing time: Fri 07 Mar 2025 15:00:17 +0000
ROA not before: Fri 07 Mar 2025 15:00:17 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c0:17:79:4e:6c:91:4d:91:fc:6d:6a:b5:17:fe:c2:a4:4b:55:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 7 15:00:17 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:57:e1:56:02:a9:61:fd:c9:61:17:14:5f:
f4:fb:89:5c:51:14:61:c9:4d:f3:d6:9f:5d:fe:f0:
0e:75:13:45:db:0c:3f:7d:b6:38:22:55:9b:21:64:
2c:8c:ee:ef:96:4a:f5:bb:f4:2e:86:ae:2e:08:98:
7a:4b:64:00:fa:75:65:22:86:ac:34:72:b2:b2:b3:
b6:80:92:52:78:88:69:77:27:2a:8a:3c:07:02:5e:
16:42:26:59:79:b2:2a:64:07:fe:52:e0:2b:72:30:
b6:4e:70:47:54:96:19:13:06:f2:5c:65:6c:1d:8f:
9b:1a:c3:45:28:a5:bf:7d:1f:14:83:52:73:82:29:
c6:03:3a:75:17:1b:2d:96:cc:a4:f1:3b:53:06:f9:
c2:cc:55:c6:48:15:3d:f6:ae:99:51:c0:06:c9:b8:
b7:ef:3a:25:4c:16:bb:a0:1d:3b:8f:69:1a:f0:77:
41:49:5d:f5:4f:b0:ae:69:43:ad:08:49:2a:c0:96:
11:18:1c:1c:14:7a:7c:c9:40:a0:da:b1:07:ef:21:
80:d6:63:6f:80:38:fa:d0:d5:a5:01:eb:55:73:e6:
25:b4:1e:83:7d:34:bc:64:f1:ba:ad:d4:5c:3a:0f:
2d:75:d3:73:d7:cc:3f:14:98:cb:3a:f8:40:7c:ad:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:94:D5:01:B8:AD:58:9A:03:F2:3F:58:71:7C:34:F5:3C:7C:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:68:88:90:34:f8:5f:ad:8e:d9:e8:40:d8:fb:19:81:3f:46:
6d:af:91:81:ee:61:13:83:ae:6e:3f:7e:f3:d3:ba:4b:61:dc:
a9:31:72:c7:58:9d:76:88:3e:58:51:ca:a9:34:ed:7c:ed:2e:
bc:df:73:05:b9:59:14:88:ef:43:89:70:c1:fa:8c:8e:a2:34:
2d:fc:fc:f2:96:59:4c:e8:3d:c8:39:52:de:72:83:97:19:9e:
9c:d4:f1:28:cd:7c:c1:24:7a:ba:ba:fc:7a:28:ec:c2:2c:42:
59:ac:1a:83:c8:70:a3:49:af:d8:d6:cf:b7:ad:bc:a3:2d:53:
6a:4f:78:51:fb:8b:7b:9d:ed:29:91:06:1a:66:6e:70:ba:cd:
f4:e3:a7:3d:bb:9f:31:bc:dd:a2:c9:cb:5b:ff:90:93:e6:10:
80:a7:be:60:8b:4e:0e:1c:4d:ed:2d:fe:45:ac:09:2e:92:45:
41:c0:17:72:18:16:0c:0a:05:78:a1:96:5a:20:c2:09:f4:a7:
79:86:ae:ed:6a:5f:c2:22:53:9c:65:a1:96:99:2b:35:40:e4:
e7:4f:14:23:54:45:ed:0f:d8:ba:bd:04:07:17:af:15:ee:22:
4a:f4:8f:9b:d6:ba:99:77:f9:4b:77:45:86:8d:f2:d7:00:a4:
f5:89:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:25:05 2025 by rpki-client