Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa
File: d7bcc124-bcd8-42ec-911f-1b551dceda68.roa (raw, json)
Hash identifier: juq2Sex/I5o7arAYIwiuzgv0peexj5BkCZGe3hXn2v0=
Subject key identifier: CA:E7:B5:F8:F4:63:E5:A4:BE:FB:E4:22:D9:E2:73:1F:C6:64:94:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E2BA6EAB114BD2ED82744026C7B699B83A4E001
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa
Signing time: Wed 05 Mar 2025 17:21:36 +0000
ROA not before: Wed 05 Mar 2025 17:21:36 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2b:a6:ea:b1:14:bd:2e:d8:27:44:02:6c:7b:69:9b:83:a4:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:36 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:93:73:a8:d9:a5:71:a7:64:3f:f4:cd:0f:
d8:7f:ac:e7:06:0f:93:20:b4:cf:14:42:08:91:79:
ff:34:f2:04:bf:69:fa:3b:62:2d:41:b7:f6:51:db:
e4:7b:56:8e:30:32:80:6a:7e:da:d8:44:94:d9:4e:
7d:d1:64:8a:f7:04:f9:51:fa:2d:5e:01:23:88:4a:
a6:1c:ce:7c:6d:86:8e:10:29:e4:0b:ed:23:2e:4a:
5a:b0:36:a8:0d:ef:a1:3e:fe:7c:b5:1d:b0:ff:a0:
93:ed:aa:05:4c:00:11:da:4e:b1:7a:33:a4:15:8e:
bd:18:aa:6e:b9:20:d8:b6:bc:b9:b3:d2:f8:bd:30:
76:6a:03:45:de:88:0a:68:be:dc:60:06:2e:58:5f:
0f:74:8d:ee:82:4d:a4:ea:84:21:2a:57:d2:93:7e:
96:11:c0:6f:6a:d3:a0:fa:cd:9e:da:6c:49:46:ed:
44:29:c6:1f:6e:20:36:7e:e2:fe:1e:63:91:b9:63:
c1:f3:dc:e9:78:b8:ac:1f:bb:ce:67:9b:99:c1:e3:
53:d3:50:75:8d:ed:ac:ff:9a:a3:21:f7:8d:23:ee:
2c:19:53:9d:09:47:97:90:45:a6:da:2e:ce:95:67:
f1:64:a1:b2:46:ff:18:81:f7:cb:50:73:50:ce:e2:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:B5:F8:F4:63:E5:A4:BE:FB:E4:22:D9:E2:73:1F:C6:64:94:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:e000::/40
Signature Algorithm: sha256WithRSAEncryption
28:54:f1:3d:23:e8:76:b6:98:74:38:67:1e:78:11:24:c4:0d:
ff:67:4a:fb:e6:03:db:d9:39:f0:cc:9c:80:d2:db:3b:c3:19:
d3:d8:ca:a8:85:48:7f:bc:12:2c:bb:d8:fb:67:46:89:13:f0:
6a:5e:da:09:58:6b:ec:5b:82:50:bb:07:5e:71:de:a8:25:ef:
fc:ef:12:06:25:e4:da:63:cb:f4:a9:4b:f2:d6:e9:ce:b5:f4:
d9:75:eb:2d:eb:0b:e0:b6:0b:cf:5b:ed:30:1c:6c:ec:07:d4:
f9:12:73:64:72:7f:19:fe:c1:8a:ff:1b:40:bb:ff:f0:f7:98:
5e:ba:4a:08:93:f6:ff:3a:e8:0c:ae:46:b2:d7:e2:f6:c7:67:
0e:27:5e:7b:e7:46:e2:6a:87:07:b0:53:96:a4:0d:94:a6:b1:
b9:65:25:63:00:08:6a:1a:2a:39:34:0f:77:86:03:98:75:22:
72:03:51:99:7d:86:e9:7f:c3:f9:8e:1e:a8:68:bb:68:27:45:
66:fc:a8:fb:84:42:64:0e:90:d0:46:c8:eb:e1:49:ce:5a:ed:
c1:89:d0:67:6f:93:78:30:de:7a:80:44:53:e1:38:4d:9f:10:
8f:a3:4d:23:b1:bf:f8:ad:9d:6f:40:de:ab:ee:15:70:8b:18:
ca:98:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:34 2025 by rpki-client