Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
File: cead5bc0-2620-45bc-b97b-adb00020a426.roa (raw, json)
Hash identifier: 41Lt5lNOVVac05mRUCaxJAq5XT/0o6ziyDsRlGpSxK8=
Subject key identifier: 48:78:E1:5C:19:9E:60:1F:51:3A:CE:39:C0:FA:28:37:35:D2:37:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46F03014322D9F67E1C811777413E12FE7C799DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
Signing time: Wed 05 Mar 2025 16:50:58 +0000
ROA not before: Wed 05 Mar 2025 16:50:58 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f0:30:14:32:2d:9f:67:e1:c8:11:77:74:13:e1:2f:e7:c7:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:50:58 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:1f:44:3d:e7:41:14:e3:41:46:de:46:3a:
85:cb:ac:d5:1b:51:19:08:8e:ad:33:ef:6c:94:67:
8c:00:7c:1a:85:c4:fb:b3:e1:09:ba:f3:4c:f7:ec:
d2:4a:47:4d:7f:b0:19:38:59:ce:c9:27:92:53:e0:
3b:fc:28:9e:c5:a2:26:92:13:cb:4f:7f:62:47:ef:
fe:f1:42:1e:b6:62:92:ad:26:a0:2d:b3:52:30:2d:
2f:2f:6a:79:16:c8:32:d0:bd:a7:13:28:23:02:24:
8d:18:f5:38:45:91:7c:a8:a9:65:73:30:47:46:ef:
41:da:cd:95:19:14:3c:35:08:da:b3:19:54:ff:24:
fd:22:8a:a8:5a:a9:14:ad:9b:83:38:d7:44:94:4f:
95:83:6d:dd:e7:ea:2d:1c:92:2b:a7:af:c4:7d:80:
30:4d:68:e3:64:46:de:f8:3f:3b:79:a2:27:7b:d9:
1e:a9:99:b3:ea:5e:b9:88:66:97:05:f8:52:85:ff:
71:b7:ca:e3:f6:80:5e:a0:f3:26:6e:89:f0:a3:fa:
4a:6a:be:e2:25:30:b9:39:5b:ed:a0:a2:49:b0:cd:
ee:bd:0c:7c:8d:56:7a:fc:71:8d:30:c6:b9:87:f1:
29:c8:29:e8:35:ea:20:03:58:25:64:a3:6d:27:ba:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:E1:5C:19:9E:60:1F:51:3A:CE:39:C0:FA:28:37:35:D2:37:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e080::/48
Signature Algorithm: sha256WithRSAEncryption
6d:14:72:4d:0f:7c:21:4f:51:6c:4f:b0:50:d3:81:91:06:ac:
f1:cd:62:b0:8a:c8:ef:38:d6:99:ad:ee:45:2c:a6:41:ac:58:
e6:c1:64:e7:b5:c6:b4:7c:29:0a:d8:5b:64:a1:6d:d3:c4:63:
61:93:30:60:ba:15:b5:51:74:5d:e1:e1:96:2c:c3:d3:43:6e:
ff:7f:ac:e4:6e:78:4d:38:3c:9e:07:3e:1a:14:2f:79:ad:0d:
6e:52:60:55:66:95:24:a8:25:18:2e:f6:b9:e7:52:a9:54:38:
eb:ac:72:b0:0f:82:45:79:05:4c:2a:be:02:51:22:03:1b:32:
15:ce:04:35:de:b4:87:7e:21:cf:da:c0:c2:34:ea:35:eb:68:
dd:7f:cb:82:7f:be:0f:06:13:e2:ef:4f:81:5b:bf:29:25:c6:
35:1b:2f:9a:95:0e:19:d2:21:8c:01:1e:91:b4:45:cb:bd:35:
7d:74:24:05:b8:32:6a:46:ef:b9:25:3c:e7:a8:74:01:1b:07:
e3:93:06:a1:46:fd:31:3a:a2:2d:f4:d2:f2:b8:9c:99:50:e3:
28:7a:5c:8a:ab:46:23:2a:75:4f:86:0c:a4:30:a9:fd:b8:38:
8e:a6:3f:20:29:ae:a6:16:cf:6d:23:a2:01:c9:2b:e9:b5:e0:
2f:f0:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:06 2025 by rpki-client