Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
File: e9508335-e447-4b74-99f5-98b04a3a6b2f.roa (raw, json)
Hash identifier: 6yVW36GbssVOwFrdI8Re/b5cVwvAlclig8nQosU2AhM=
Subject key identifier: DB:F9:0A:89:6D:DA:17:B7:81:08:44:07:23:54:E4:51:36:E5:B6:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5902B2D4E0C0BB028F2301BBFC332CDD75918B1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
Signing time: Wed 05 Mar 2025 17:00:37 +0000
ROA not before: Wed 05 Mar 2025 17:00:37 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:40c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:02:b2:d4:e0:c0:bb:02:8f:23:01:bb:fc:33:2c:dd:75:91:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:00:37 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:19:59:b1:72:3f:ee:d1:9d:8b:00:7f:b0:
91:cb:d4:b5:69:d1:6f:6c:46:fb:61:62:2f:df:3d:
bb:c4:9b:a2:d7:f1:42:54:eb:b4:dd:65:a4:7c:b2:
d3:5d:8f:45:ad:64:51:46:1e:99:d8:84:c1:6a:a0:
87:f5:44:2e:42:c2:0f:d8:0f:5f:48:fd:91:b1:16:
69:f9:d6:dd:fd:b0:33:16:50:ed:90:75:d9:1c:06:
22:92:02:c0:17:d0:79:d2:4f:80:09:30:b7:88:b7:
0c:ae:aa:c7:11:1b:65:47:dd:95:cc:b8:4c:2b:a5:
6b:48:94:f9:60:dc:17:d2:55:4e:00:3b:0b:0a:a4:
b8:43:c6:1a:b0:19:62:40:aa:4b:56:64:5e:0c:cc:
da:e6:d8:cb:e2:71:6f:92:c6:73:8d:28:df:a6:1a:
11:33:89:e1:ad:9f:fb:0f:84:c7:0c:c8:79:66:a6:
6d:8e:86:8b:44:d6:af:7d:62:73:3e:da:fe:18:e9:
e2:5c:fd:ce:18:9b:20:22:cb:ad:b8:9c:9e:cc:c7:
b5:be:a0:89:12:2c:31:17:5b:5a:ab:fb:56:29:31:
d0:3a:58:1f:15:9e:76:e6:3b:2c:ff:54:cb:37:81:
57:7c:a3:f6:92:cf:97:c7:7a:ef:e0:ee:ac:58:cd:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:0A:89:6D:DA:17:B7:81:08:44:07:23:54:E4:51:36:E5:B6:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
3e:14:d1:a1:a8:68:80:ce:1d:42:b3:d6:9b:e0:27:88:39:10:
7c:71:c9:d3:f7:9d:5f:29:7f:2f:0c:06:a1:20:df:01:a6:be:
9b:09:62:6c:66:08:82:95:e2:3f:53:7a:60:18:43:03:49:22:
8e:41:cf:3f:16:8c:e4:81:95:5c:7e:24:a6:5d:98:56:c7:5f:
14:6f:53:20:f1:13:43:32:a0:01:5a:4f:86:9a:be:c4:50:66:
c0:26:81:2d:48:0c:b4:8c:de:fa:e1:32:d7:17:42:f0:39:39:
8e:26:5c:c6:4a:41:37:b3:df:49:9a:76:59:20:c2:7b:77:f3:
be:97:08:de:dd:9c:fb:b3:df:7e:a7:47:7d:c9:53:50:29:d6:
3f:6b:45:1d:43:89:3d:7e:e4:b6:b3:ed:cc:f3:1d:ad:1b:47:
11:96:3c:26:74:65:a0:ac:7e:63:f5:53:78:b8:9f:94:66:c0:
60:be:4e:3e:b7:af:84:ae:09:ee:19:e0:f9:a2:a8:a2:3b:e0:
65:88:8c:2b:2d:c8:19:d0:50:55:66:16:14:14:07:61:c5:cd:
be:b8:0e:2b:a4:8f:f9:b6:7f:80:f0:82:bd:e6:57:ff:f3:22:
ce:e3:8f:2a:55:92:2c:2d:97:fe:c3:49:d3:6a:cb:91:67:aa:
33:05:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:19 2025 by rpki-client