Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
File: d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa (raw, json)
Hash identifier: I5KOyUnjNfV111wzknC6v9CKmD4p3O6KalSU/bMFF5M=
Subject key identifier: 97:33:AA:BB:D9:A2:1E:29:2A:FF:AB:B3:C6:44:C8:73:FD:EE:87:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 639C35E2123CCB96D6F93C8094C7EF7AF4CEC4E9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
Signing time: Wed 05 Mar 2025 17:01:19 +0000
ROA not before: Wed 05 Mar 2025 17:01:19 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9c:35:e2:12:3c:cb:96:d6:f9:3c:80:94:c7:ef:7a:f4:ce:c4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:19 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:e7:d5:f3:f9:a1:a5:91:9b:2c:df:45:49:
3a:c9:a5:43:8a:85:2b:c5:03:91:43:e8:0a:90:92:
ea:f3:ea:0c:8e:1b:86:8b:69:ec:9d:c9:e7:a8:28:
c2:18:20:29:43:5d:d7:1b:a8:fd:21:3c:04:1f:fa:
6f:8d:39:81:ac:c7:09:c5:2c:ea:c5:2a:85:8b:6c:
5f:fc:2d:57:92:b0:1a:2d:e7:11:63:f7:d1:9d:cf:
f4:b7:b1:35:bb:cb:ba:23:48:f2:6e:28:ea:bb:30:
7b:da:48:86:57:99:f6:dc:62:31:32:7f:b7:6d:9f:
ba:79:c6:25:0a:41:87:ae:42:10:b1:6b:1f:db:01:
7f:e2:91:4a:d9:97:9b:a1:da:c9:4e:b0:20:99:05:
eb:d9:7a:6e:11:82:27:ad:f3:5a:1c:a2:55:c6:66:
25:77:80:34:41:26:f9:e5:bc:d7:fb:2f:ca:ee:92:
1d:8f:9e:4a:83:ba:f4:14:2f:9e:57:c1:73:d4:42:
e6:e4:2e:e1:70:93:ca:63:2e:20:ec:fe:06:99:da:
dd:0f:e6:9d:3e:61:8e:4c:59:51:a9:79:1f:1c:d6:
27:61:3b:53:0e:32:a9:f4:52:96:d3:b7:62:00:ae:
b5:9b:c7:9c:dd:b4:d7:08:00:1e:56:12:3a:b8:db:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:AA:BB:D9:A2:1E:29:2A:FF:AB:B3:C6:44:C8:73:FD:EE:87:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2080::/46
Signature Algorithm: sha256WithRSAEncryption
9b:85:ee:c8:24:2e:54:cd:e3:75:6f:83:1d:5c:dc:e8:8d:90:
20:ff:9a:41:94:9e:54:11:f1:02:3c:be:a0:48:c6:29:9e:fd:
27:19:77:09:01:20:2d:37:2c:7d:c1:43:3f:b8:08:8a:c0:65:
5c:8f:a2:82:f3:d8:e8:98:73:ad:05:eb:0a:77:51:75:17:12:
98:c3:68:23:33:45:9b:5d:b9:df:8f:fb:98:af:93:c7:a6:c6:
c9:a0:19:77:f7:41:3a:25:9b:dc:8b:77:1c:f6:2c:0f:b0:b1:
0f:99:57:d4:83:69:ae:8e:25:24:6f:29:95:de:3a:a8:14:43:
39:64:f9:f0:40:3c:9e:87:18:ed:9f:5e:53:78:35:b3:de:e3:
1d:2b:9b:3c:11:4e:c7:40:a4:ff:b5:dd:ce:d4:1a:7d:4c:aa:
13:c8:d6:f5:70:4e:d5:61:cf:b3:9b:0d:8c:a7:fe:37:1a:ca:
3e:d9:96:4a:a3:8a:f7:d4:bb:31:89:12:7a:0f:83:d0:51:67:
c3:6f:d1:79:05:76:58:da:2d:d5:a8:85:2a:45:a7:08:2f:dd:
c4:f2:23:8a:57:a1:30:d2:14:ed:3f:5e:41:0f:4a:aa:17:76:
a9:54:92:1b:ae:68:1d:7a:81:87:61:f5:4f:16:f4:a1:e2:66:
cd:e1:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:12 2025 by rpki-client