Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File: d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier: 1s5G/Ap3xLeUmgDqqcHxq/TbTdadggIzKPPBhblkI6A=
Subject key identifier: FA:6A:58:19:6A:BC:38:D9:59:29:DD:F2:1E:4B:27:BF:55:B3:84:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2713C0040CF88A3D73C247F6EF1307BDCF111C96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time: Wed 05 Mar 2025 17:40:18 +0000
ROA not before: Wed 05 Mar 2025 17:40:18 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:13:c0:04:0c:f8:8a:3d:73:c2:47:f6:ef:13:07:bd:cf:11:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:40:18 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:e1:97:d2:14:e2:67:1a:6e:f2:93:e6:ac:
a8:74:4e:32:85:4e:7d:5c:c2:2c:16:54:b1:09:2f:
1f:5c:6e:a3:04:07:5a:b7:50:89:fd:71:67:24:5f:
52:fc:3f:e4:62:58:bf:8c:05:64:38:6d:23:09:e0:
f2:b0:03:48:5b:a9:ad:e2:b3:cf:a9:63:64:db:9b:
3b:8a:95:78:98:74:42:39:a5:8c:c2:73:6a:25:09:
21:bb:b2:e8:a4:8d:dd:e2:1a:b7:79:f9:e0:a1:e6:
23:8f:ed:e9:64:16:3e:0b:b5:70:82:97:dd:d1:09:
f1:2d:ae:bc:df:03:09:3d:c5:17:5e:13:67:d3:c7:
bc:0f:6e:78:db:80:ae:43:30:8e:e3:73:45:46:ac:
43:1c:dd:14:6d:2e:ed:47:27:34:b7:60:af:3d:ce:
ee:a0:4a:6c:c0:61:af:52:7c:de:0f:c5:fa:e3:95:
30:b3:64:2f:23:96:40:5a:83:9a:73:f7:a6:0c:de:
1b:0f:d9:64:30:a4:20:a2:27:37:ea:f8:95:00:71:
28:20:2a:4d:96:8e:bb:28:98:80:f4:09:2b:3a:68:
8e:df:a8:74:df:ee:3a:5a:6c:e6:70:f8:21:02:8f:
e1:ce:68:ef:8a:ba:c1:21:fc:d2:73:e7:41:f2:35:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:58:19:6A:BC:38:D9:59:29:DD:F2:1E:4B:27:BF:55:B3:84:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:400::/38
Signature Algorithm: sha256WithRSAEncryption
b3:45:38:e8:7f:c5:34:81:3b:ab:05:54:30:15:c8:33:6a:ac:
15:bf:22:b3:74:47:0d:d8:42:4d:61:d0:05:78:5e:87:5f:c0:
7c:8c:cf:ad:ea:29:6d:db:74:7d:7c:ae:d7:6d:d9:a2:3b:12:
05:7b:2b:da:73:1f:21:87:af:99:0d:9e:05:fe:51:da:a8:90:
b3:4d:9c:bc:ca:f6:5c:8d:59:45:9a:83:c2:f6:4d:e2:c7:e7:
52:fe:90:f8:f3:ba:bc:1d:68:cf:e0:b4:d3:90:df:df:40:b1:
a1:ba:3f:00:c1:c6:15:32:db:93:ce:48:dc:1e:a3:6b:77:6e:
2d:8d:6c:db:14:8e:61:d9:1c:31:54:01:67:e9:d7:55:01:68:
2b:2d:62:53:51:0c:4a:96:db:a2:40:ac:ad:00:c4:83:93:97:
31:0e:14:60:0d:81:50:06:81:81:1b:53:51:14:3d:16:cf:ce:
85:08:82:c5:13:c3:1e:4a:86:1a:59:9f:05:53:7f:51:6c:27:
aa:d3:ca:ef:c8:40:94:7f:72:b6:44:3d:62:de:ab:3a:e5:e0:
5f:4f:f2:8b:38:c1:65:6f:a3:f6:69:55:6f:fc:a3:7f:00:09:
ec:8f:56:33:cf:28:c3:93:84:4e:cf:fd:47:78:6d:f6:b0:83:
52:16:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:19 2025 by rpki-client