Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
File: e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa (raw, json)
Hash identifier: gqfXY6wThuFIi9YCIxIP5tvKE9AsXku55eQNIbfOU20=
Subject key identifier: F0:63:23:EF:2A:1C:E8:34:A1:12:84:7C:3E:A7:50:86:98:E7:89:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 451BE469F58AF583FE4EF01611E3CEAADF274222
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
Signing time: Mon 24 Mar 2025 19:30:19 +0000
ROA not before: Mon 24 Mar 2025 19:30:19 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1b:e4:69:f5:8a:f5:83:fe:4e:f0:16:11:e3:ce:aa:df:27:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 24 19:30:19 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:91:91:f2:cc:e6:49:36:ac:17:d7:2e:f5:
30:06:3f:77:ab:07:69:77:3b:d4:1f:67:d7:3b:8d:
21:fc:92:8b:04:09:70:d1:48:a4:79:9e:17:af:95:
47:84:d6:61:97:22:f9:44:8c:46:0b:9c:88:2b:48:
ca:1c:52:56:94:74:45:e1:c9:01:0e:c4:a6:89:67:
c3:ae:61:60:92:43:75:d3:b9:e8:03:c0:bc:50:0a:
3f:cb:83:90:f3:c9:f8:55:03:2b:3d:01:e8:48:1b:
e8:b7:13:b2:9a:bc:62:c7:c8:23:4e:46:67:a8:bf:
d4:35:6f:41:f4:47:4f:84:38:9e:f3:8c:d9:a0:31:
73:7d:45:31:4c:55:76:74:a0:0a:d0:59:3d:16:39:
bb:43:fc:40:3e:5e:e2:19:e7:f7:07:1a:d8:36:ec:
a4:cf:92:56:84:db:0c:2e:bc:ce:ed:c8:e7:37:5f:
72:fb:84:af:1a:d6:7b:c6:90:3e:a7:58:58:cf:22:
33:ca:b4:f6:1f:fe:30:68:8c:e8:be:6d:24:72:7c:
f8:4b:91:f2:e0:d2:bc:bc:82:00:67:1c:0d:d5:77:
f6:d5:72:4d:ed:4f:b2:66:08:01:48:11:c4:bd:77:
c4:6c:46:58:39:76:ab:91:2b:fb:01:2c:94:2b:f2:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:23:EF:2A:1C:E8:34:A1:12:84:7C:3E:A7:50:86:98:E7:89:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:f7:56:b0:f2:ef:33:b7:80:69:39:ca:cf:83:6c:99:9e:5a:
09:5b:e0:93:3f:1b:87:f2:67:55:68:66:fb:5c:a2:c8:09:9b:
41:42:62:95:47:cd:d0:8c:f3:a3:39:0d:0a:1f:a9:f3:67:d3:
3c:ac:6b:20:6e:1a:3e:2f:1f:15:9d:f7:72:04:09:65:df:b2:
d4:5d:c3:61:60:cc:a0:0c:27:d4:1b:09:a6:61:17:c4:d5:cd:
a7:e3:ba:de:f2:6c:b1:97:1f:52:a7:5c:72:5f:2e:9a:f2:9d:
ad:44:f9:6f:d5:bd:a2:8b:4e:9b:10:ce:19:24:2a:9d:37:5d:
d7:21:49:8d:85:42:31:89:26:bd:49:ca:f5:fa:33:0b:34:08:
e9:fb:0b:fb:af:e9:39:df:97:80:5e:bc:3d:0b:6c:2c:e6:c4:
e5:2a:14:f6:b3:3a:14:02:92:79:fc:3f:e0:f4:77:48:da:d5:
24:1b:6a:bf:df:77:49:bb:48:fb:46:23:13:ec:fe:b4:48:a0:
6f:cd:a9:34:ce:69:0f:c0:d7:2f:fd:11:6e:99:db:ce:03:30:
a0:c9:68:2e:6c:31:8a:c7:7c:31:e7:a2:8a:4c:12:47:ca:ad:
e7:80:17:63:49:2a:f3:f2:8b:4d:c1:10:7e:0e:c7:59:54:1c:
14:c6:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:30 2025 by rpki-client