Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: LfJg4+sk6xXIzBOld4ri/TmZHqWW0ft+UybzY9VPUDI=
Subject key identifier: 15:7B:27:04:72:8A:1B:58:94:93:72:46:60:CE:9A:7A:49:0F:67:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A89CB6A4D1FA8010DE436927EAEBAA5503B359F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Sat 08 Mar 2025 00:30:44 +0000
ROA not before: Sat 08 Mar 2025 00:30:44 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:89:cb:6a:4d:1f:a8:01:0d:e4:36:92:7e:ae:ba:a5:50:3b:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 8 00:30:44 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:08:68:3a:46:88:1a:3b:df:4d:4d:4e:4d:
bf:17:7f:f2:2c:9c:db:f2:e5:9c:01:bc:99:2b:2b:
6e:33:66:0f:45:c9:27:eb:e8:27:06:23:7d:d4:e4:
35:89:b4:f2:ec:a4:1e:4e:6a:ca:f5:a4:3c:73:ea:
93:9d:2a:23:9c:6c:0e:09:12:c9:c6:45:c9:00:9a:
03:1a:5d:a1:be:b3:6c:d3:0b:7b:a8:ba:a6:a5:7f:
8a:d8:f7:39:fa:e9:64:bc:66:39:92:40:18:e9:0f:
3c:7c:52:64:3e:ad:83:0a:6b:25:12:1a:43:27:a7:
4d:52:5d:cd:c5:14:cc:48:12:58:5e:27:7a:bc:ce:
38:25:3f:71:2a:14:46:fa:98:31:d8:a2:9e:08:1c:
f5:82:6e:5c:be:50:8c:ef:e5:d7:fc:48:34:cc:f0:
a5:b6:ef:71:98:40:51:4f:aa:df:88:e1:4c:93:49:
b2:32:e1:91:fe:e1:59:c5:47:6c:c4:d4:81:e8:7f:
65:ed:68:ab:8d:e7:a8:17:9e:ac:08:70:d9:7a:00:
51:a5:9e:96:40:f0:a0:c4:a5:d5:a7:43:2e:cd:8f:
56:e9:07:55:ea:fc:a4:fa:7c:68:4e:9c:9e:f9:c1:
64:cd:7a:c1:11:56:c7:ba:81:29:4d:7b:6f:27:ab:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:27:04:72:8A:1B:58:94:93:72:46:60:CE:9A:7A:49:0F:67:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
3a:41:b2:be:0a:0f:45:2c:6f:9d:96:9a:4b:85:40:65:a9:28:
7b:bf:68:0e:d8:69:a3:de:09:58:95:c3:e5:92:a9:e2:55:35:
a0:df:83:ca:ad:e9:df:8b:58:b2:0b:20:c8:9f:ae:26:d3:62:
d8:ad:69:3e:38:53:6a:6a:f8:84:fd:0d:82:f9:c6:4c:02:55:
7d:27:a0:36:f0:c7:44:b4:5f:1b:9e:f7:06:82:a5:f9:21:e4:
05:c9:66:ef:12:ca:66:59:6a:4e:de:04:6d:cd:0b:af:21:3c:
73:67:2e:00:6c:2a:ba:b0:f5:0c:da:fb:46:01:d5:0f:1b:a4:
16:b9:8f:c4:7a:23:9b:c8:af:b8:3f:00:63:97:38:74:75:a0:
69:f5:86:dd:5b:14:b5:9c:6f:61:8f:04:5f:da:8d:aa:c3:80:
20:de:fd:3a:29:04:4c:ac:d2:07:32:6f:c1:34:c3:ab:d0:42:
97:1a:72:10:d6:85:73:ca:9d:95:46:c5:8b:bd:a7:5a:0e:80:
39:fd:e7:53:7c:3e:e0:ea:7c:1a:cd:1f:1e:1d:55:76:b8:11:
25:27:8a:eb:4b:85:e4:39:5c:5e:9a:be:14:1b:57:6a:d4:87:
8f:66:68:05:c3:c2:96:38:e6:25:4f:d8:c0:da:c2:5b:f5:02:
23:51:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:00 2025 by rpki-client