Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
File: ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa (raw, json)
Hash identifier: PWXJttp/JVsFyrj3XNtvn4DxQQNnRyOUvJ6IjcGI+xo=
Subject key identifier: 10:ED:83:47:AE:04:70:58:CD:18:74:D1:86:7D:7F:7A:4D:F8:DB:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F452C3122ECAF14A55A5A965B2C2B81B84A5334
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
Signing time: Mon 17 Mar 2025 15:40:31 +0000
ROA not before: Mon 17 Mar 2025 15:40:31 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:45:2c:31:22:ec:af:14:a5:5a:5a:96:5b:2c:2b:81:b8:4a:53:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 17 15:40:31 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:c8:70:11:8f:33:82:43:0d:f8:57:7c:d3:
85:54:5a:4d:f6:37:cf:5f:ce:4a:9b:16:9b:9f:6b:
bb:4c:5d:bd:45:db:c3:31:dd:79:df:95:06:c6:29:
44:fc:69:9a:d8:71:41:00:5f:67:ea:65:ba:27:e3:
4d:77:2a:44:dd:bb:22:fa:10:de:b7:50:23:a9:a6:
be:be:95:b8:97:53:94:d8:f1:cb:93:83:ed:29:52:
04:3d:5c:75:ba:53:f1:6c:79:1f:2e:7c:41:5f:b3:
3e:ad:52:b6:95:a9:f8:43:f4:29:b7:16:4a:84:2e:
a2:0c:7a:de:a7:ab:ae:e7:f4:1a:12:c8:0c:8b:8a:
70:89:f9:e0:49:26:f2:44:3e:e4:a7:da:56:b5:52:
bf:e8:1c:74:5a:3f:a6:87:35:30:8b:4e:76:df:87:
05:40:82:4e:d9:b8:8f:c3:a6:0e:da:28:3c:19:fe:
31:24:0b:2c:7a:9a:df:fa:a5:fc:8b:27:57:3a:f0:
46:f0:6d:d1:44:8e:e9:67:9f:5f:b0:c2:ab:c2:6a:
3c:ec:5c:0c:69:9c:12:1c:09:d0:81:6c:b1:8e:de:
5e:b4:db:2a:9b:8c:05:98:f9:41:57:d0:21:40:2a:
00:04:89:7c:68:97:36:b2:89:54:de:3b:43:c2:50:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:ED:83:47:AE:04:70:58:CD:18:74:D1:86:7D:7F:7A:4D:F8:DB:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:de:13:24:e9:f5:58:de:38:fb:0a:c2:b6:ea:99:00:18:69:
dd:4e:63:ec:f1:46:6a:f0:a9:96:be:2c:8c:6b:c7:03:74:c5:
92:5a:cd:d5:da:e4:be:98:22:14:f2:62:5a:9b:11:8b:0e:5c:
ad:e5:72:ed:7b:7d:94:ad:a1:e4:e7:ba:13:6a:a4:86:23:09:
f6:a0:d1:66:a2:ea:35:ac:49:fd:b8:57:bc:bb:1e:06:d1:d1:
f9:f3:c2:72:9e:65:2d:7e:c4:3c:ac:bd:db:5c:45:82:f4:a5:
d6:63:d9:e1:f8:c4:c5:04:26:26:26:55:88:dd:d3:56:f0:06:
7e:a4:8e:bb:e2:fb:f5:74:00:07:49:87:d1:bd:65:ef:5f:78:
1c:4d:d7:d5:f4:8e:1f:64:39:7d:4d:23:69:ee:36:6b:11:93:
84:a0:06:24:13:f1:95:89:c9:3f:03:20:82:66:41:31:f1:9b:
84:68:76:bd:a4:b1:cb:c7:68:b8:ae:a8:87:ce:03:b4:d3:8a:
a7:bd:87:5e:75:01:27:e7:99:e0:e4:81:0b:17:f9:64:96:fe:
ea:37:f2:d4:bb:9d:fa:54:bb:3f:a3:28:46:73:8f:cd:fd:47:
11:cf:58:f8:d5:18:3f:60:d7:71:c7:de:b5:cc:9d:f8:ce:61:
24:1d:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:49 2025 by rpki-client