Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
File: e348b574-c707-42a9-9b58-f3215857ae07.roa (raw, json)
Hash identifier: ErnSNOiM0AFTUS80WInPRmJlUPMj+O4AXKaxjvoVRXk=
Subject key identifier: 70:49:41:A7:FC:84:E8:04:83:D5:3A:B4:97:EF:39:B4:A1:5B:17:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E97F94950FB4FF04E934D7E201FB4275AF0D09C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
Signing time: Wed 05 Mar 2025 15:30:57 +0000
ROA not before: Wed 05 Mar 2025 15:30:57 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:97:f9:49:50:fb:4f:f0:4e:93:4d:7e:20:1f:b4:27:5a:f0:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 15:30:57 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:8b:20:b3:cd:b3:2c:60:f5:c9:2f:1b:f8:
6d:7b:49:0b:fa:c7:0b:96:64:99:2f:00:d3:da:f2:
59:a2:83:da:1d:f5:21:c3:d7:2f:bc:c3:fb:99:1f:
da:9f:6b:15:05:6d:fe:c1:12:46:9b:e3:31:71:ad:
6a:aa:ca:98:3d:ef:89:5f:5b:75:00:78:35:73:04:
0a:69:d0:98:f3:5f:47:68:1f:41:f1:d4:08:ad:86:
7b:3d:ab:70:9e:98:ea:f6:e3:a4:88:c2:af:8f:68:
75:de:b0:16:84:64:d2:88:dc:b3:1c:fc:3e:75:84:
8f:9d:6e:0d:e4:55:f5:49:48:da:e2:df:03:28:ed:
db:4d:4e:90:8a:3c:c7:e0:78:9d:ad:af:67:c9:64:
28:ec:c2:45:d9:89:78:cb:26:f2:41:cd:c3:40:1d:
3a:f2:c8:ce:82:a2:ca:b9:11:65:d3:c1:b1:f7:b2:
9f:0e:0f:fe:f1:3b:f6:ea:5e:1b:9f:0c:e9:4c:6e:
5e:cf:fa:9b:fc:1f:53:43:ac:1d:f0:28:e0:b9:0e:
ab:04:77:a4:59:71:43:08:29:61:22:dd:d1:39:98:
86:20:50:40:dd:78:32:80:a4:20:d2:44:48:33:d6:
1a:a2:19:a3:1d:e4:f2:f0:9e:90:77:60:a7:0a:b9:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:41:A7:FC:84:E8:04:83:D5:3A:B4:97:EF:39:B4:A1:5B:17:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e348b574-c707-42a9-9b58-f3215857ae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a080::/48
Signature Algorithm: sha256WithRSAEncryption
13:c8:43:23:12:b4:6e:5c:14:70:fa:6e:ee:f2:97:70:33:32:
1e:9f:43:97:0d:a0:b2:ba:cd:e3:59:d2:73:9c:40:c8:b0:53:
ef:7d:25:7a:b9:28:92:38:5b:e2:ec:2c:9b:d2:5e:9a:1d:34:
49:85:2a:b1:1c:c7:0d:95:9c:f4:3a:91:67:0f:1e:85:62:b5:
4f:cc:49:c9:f4:aa:6c:30:05:f8:59:f3:cf:fe:e4:22:9e:49:
94:d5:3b:c9:17:d5:c6:1d:42:ea:67:fb:a2:12:bb:55:22:c2:
0a:cc:90:be:c0:07:f5:db:8d:c5:40:b5:e7:ca:ff:6a:37:9e:
24:cc:cd:83:01:f6:2f:cb:c9:99:c9:03:5d:fb:04:aa:ca:a2:
3d:37:63:9c:5b:d9:51:af:bb:6f:26:d4:cc:c9:5c:1d:e1:98:
1c:5f:23:f4:1c:c7:51:ee:2e:37:59:86:5e:2d:d8:96:44:34:
8b:44:59:d2:fc:39:84:bc:9a:f6:55:b1:aa:08:97:e2:9e:73:
95:76:73:95:33:dd:fd:a5:63:5e:8f:fb:60:fa:cf:af:b2:06:
e3:af:0f:c1:9a:f2:ba:96:0f:6f:91:58:ef:9a:f5:dc:d6:75:
70:75:59:94:45:0e:8f:d7:99:8b:b0:ea:bc:32:8c:61:06:37:
e8:0a:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:15 2025 by rpki-client