Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
File: d93d911b-44fc-4994-8910-e2c5ecc33624.roa (raw, json)
Hash identifier: Qxh64Y7vUiZ+cvFAt//chNfvL6mk/MeyxGvF4XnWiC8=
Subject key identifier: 88:12:07:79:35:44:36:8F:81:74:3C:04:2B:BF:95:A7:5D:6A:57:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6188CF20BF491E8A3ECAA0AEF977AC1341B68583
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
Signing time: Wed 05 Mar 2025 17:01:51 +0000
ROA not before: Wed 05 Mar 2025 17:01:51 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:6080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:88:cf:20:bf:49:1e:8a:3e:ca:a0:ae:f9:77:ac:13:41:b6:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:51 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:78:ab:cf:5f:59:fe:b1:08:5d:80:e2:47:
90:73:e3:6e:eb:33:5e:d7:03:ed:44:38:9e:66:2b:
e6:31:a6:29:6a:1e:1f:9e:b6:ea:8f:3d:5d:c0:d1:
63:95:fc:d9:75:cc:0a:41:74:ff:06:38:89:e0:8f:
af:09:06:93:9b:d1:93:c0:48:1c:d3:f9:7c:cb:ce:
c1:04:29:88:67:69:a9:06:d6:9a:01:4a:73:7d:9d:
2c:8d:21:67:ac:d4:5f:1b:34:17:dd:39:64:ce:32:
ca:ff:6c:b8:24:a3:fd:76:88:07:44:fd:e6:6e:88:
f9:df:90:28:93:cf:af:ce:36:23:9b:8f:27:1c:cf:
51:20:9d:7f:1a:59:7a:1b:b5:11:d2:a6:81:f6:d9:
6f:28:ab:fa:3d:94:55:cd:47:4b:10:5d:b8:60:20:
d6:a3:10:f0:65:ee:c8:2b:16:4e:57:a4:04:07:4a:
ec:91:d6:83:78:51:5d:57:29:d5:a9:2e:68:85:38:
dd:e0:4b:b0:ae:2e:44:a0:ed:a5:8c:30:cb:38:df:
b9:79:25:ee:b1:5c:63:9f:93:9f:99:70:51:0b:fc:
ae:0f:92:8b:56:32:ac:75:0b:69:25:41:92:17:4d:
84:b8:7b:5a:6d:92:77:e3:ef:d3:98:ac:66:58:5c:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:07:79:35:44:36:8F:81:74:3C:04:2B:BF:95:A7:5D:6A:57:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:6080::/46
Signature Algorithm: sha256WithRSAEncryption
b8:8f:c1:10:b2:d7:cf:ab:db:5d:9a:6a:fc:9a:ae:e4:f8:fa:
7b:c4:f7:9e:f0:de:08:da:05:3e:c7:6e:7d:01:c0:f9:16:71:
fa:b8:fb:7c:5c:41:8a:f5:4d:79:34:25:79:f6:94:08:00:e6:
2b:7c:e6:b1:90:2c:b0:0b:f3:81:da:c9:0d:cb:2e:60:96:07:
51:85:a1:9e:92:02:70:17:3c:dc:64:5f:3e:f1:b7:97:8f:d2:
93:34:68:8e:f9:be:f5:c5:16:14:0c:de:4f:76:c6:74:bf:4f:
f5:de:04:7a:5e:cd:f0:3d:cb:42:15:38:48:45:c9:f5:b5:41:
f1:2f:5c:3e:f4:1e:b9:e3:ac:1d:0a:d7:56:c9:4f:22:b5:0b:
d6:61:6c:ee:45:67:7f:88:09:73:76:2d:ce:fa:e3:d4:22:32:
c9:8a:2a:d5:3b:8d:94:52:3b:ab:f8:82:96:f1:65:2f:59:74:
b3:08:5e:2d:29:6c:0b:82:92:be:23:89:04:bb:b6:c3:49:e1:
bb:eb:b5:1c:74:1c:2c:a5:bc:24:f4:6b:e8:22:34:43:ba:59:
f9:cf:ae:f0:97:85:bf:02:af:d1:a9:03:6b:d8:d4:bd:a4:1c:
cb:55:bf:e0:8e:08:d2:18:73:f3:f9:2d:86:d4:a2:eb:83:2f:
1e:48:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:22 2025 by rpki-client