Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
File: dedc9540-e267-4454-a449-e65933af6f0f.roa (raw, json)
Hash identifier: AFBZ+pf71e+mF7iCkMfbdxsgah1a1zaulEA0tlUfftg=
Subject key identifier: 32:2C:78:D8:87:54:F4:B5:A7:9A:DE:C9:16:3B:53:DE:E3:A7:4B:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17801593A0C1EFE3D2CADD365226AA0548A77FCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
Signing time: Wed 05 Mar 2025 17:31:16 +0000
ROA not before: Wed 05 Mar 2025 17:31:16 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:80:15:93:a0:c1:ef:e3:d2:ca:dd:36:52:26:aa:05:48:a7:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:31:16 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:e8:52:ce:5c:a1:73:5d:83:e9:ba:b2:61:
13:84:3b:c5:f1:44:c9:08:6d:33:66:aa:4f:52:4e:
49:69:d4:94:8c:89:5e:f0:71:d9:4b:54:c1:31:df:
d6:a0:db:99:97:b0:f8:91:73:45:f3:a1:23:5b:30:
78:22:da:8b:18:a3:ed:82:43:0a:3e:ab:51:bc:ee:
cc:61:8d:22:0d:77:cf:d5:75:9d:53:a8:46:9b:68:
c7:89:e3:c4:83:81:40:f2:52:d0:26:26:fa:03:aa:
4e:a3:c3:2f:d5:5b:e0:6f:77:1b:f0:c9:ea:e4:fa:
3e:94:ce:67:0b:64:04:04:e0:4e:45:a1:dc:b9:63:
1b:6b:b6:75:50:92:11:40:23:a0:0c:fd:9b:46:58:
09:3b:3d:44:8c:50:75:20:4a:0f:42:bc:b6:b9:1d:
61:7b:66:2c:c8:b2:63:f0:1a:62:38:17:b4:ec:32:
5a:94:db:65:6d:3d:4a:21:c4:32:1f:4e:13:8e:51:
a1:bc:e0:8f:05:d9:13:5d:e7:56:97:c1:10:c3:a6:
25:d4:3e:3b:91:8c:c9:2f:03:b7:c5:b0:60:5d:cc:
d6:e2:0e:ca:7d:58:e8:63:b1:ad:26:2d:92:11:bc:
4b:92:34:74:e3:6a:ef:15:a1:5c:ca:85:13:d9:5e:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:78:D8:87:54:F4:B5:A7:9A:DE:C9:16:3B:53:DE:E3:A7:4B:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:1000::/40
Signature Algorithm: sha256WithRSAEncryption
95:10:6c:e4:c0:1c:cb:5b:82:de:24:c2:78:5a:f3:62:6a:09:
48:b4:fe:10:00:19:69:11:3b:6f:3a:19:ee:cb:b0:40:2e:4d:
f0:66:53:e6:b1:46:23:11:cd:bb:2e:6b:24:77:9d:f1:d5:69:
9f:2d:86:c0:2f:56:2b:53:dc:e0:69:b9:8d:ea:7c:ea:c1:68:
fd:56:95:4c:6b:9a:d7:53:56:9b:0a:37:55:e9:a5:31:3a:89:
cf:f7:70:6a:84:66:b6:ce:9d:de:0d:2b:9f:60:7f:6d:b2:91:
54:9b:c0:a4:c5:f2:1b:1a:b2:62:0e:b1:36:b2:7a:6f:16:53:
8b:35:34:5a:f3:0d:1c:45:ca:ed:e9:5b:7f:3e:1c:1e:6f:75:
da:ac:03:5d:54:11:5c:cb:5e:e7:ee:dc:dd:5d:57:b0:21:ea:
3a:6c:59:84:02:e0:f4:1d:e9:da:20:22:c8:08:7c:76:6e:85:
bf:da:24:15:91:ee:84:f0:bb:fd:e2:ae:6a:56:3b:aa:45:00:
32:12:b5:90:36:48:cf:04:4e:02:79:07:79:a4:07:d6:38:f9:
71:31:cd:3d:d9:05:9a:35:90:6a:80:9f:0d:5f:76:67:bb:eb:
8c:1d:fc:d0:03:f7:b4:eb:6d:da:d2:93:4a:73:64:45:40:2a:
5c:bc:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:18 2025 by rpki-client