Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
File: eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa (raw, json)
Hash identifier: nmAg5L4GBQEC12ORrrG92TJFX7a5c30t8w5U2/H9xGA=
Subject key identifier: F3:CB:3B:87:73:84:DD:BE:BC:2E:32:F2:32:69:81:DE:4A:71:4A:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40637C810B3BE47839CA77B00121D4B63C123BBB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
Signing time: Wed 05 Mar 2025 16:20:13 +0000
ROA not before: Wed 05 Mar 2025 16:20:13 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:63:7c:81:0b:3b:e4:78:39:ca:77:b0:01:21:d4:b6:3c:12:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:20:13 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:1c:18:1d:64:70:72:66:20:8a:3a:d2:06:
9e:51:3d:3f:d7:be:3b:1d:17:06:17:3a:64:34:5a:
83:c1:fa:d6:28:dd:ce:6f:fb:7d:f6:cd:75:50:0a:
1e:a4:21:35:69:ad:a7:70:1e:5e:b4:45:16:63:20:
bd:ac:05:2f:33:bc:fb:c8:04:4c:a6:af:b4:60:fe:
53:ff:73:09:d3:6d:c3:e8:ec:98:52:2d:04:0a:32:
75:30:e3:0e:16:81:ba:4b:f1:83:e5:f4:a2:ae:fb:
90:d5:d5:f5:1a:1a:d5:95:de:5e:f9:5b:f2:a1:f8:
8f:bf:bf:ae:70:1d:e7:07:a3:2e:f7:fe:ea:df:7c:
d9:1a:82:b4:1b:c8:8c:34:0a:5f:43:4e:f4:6f:3a:
8c:09:bc:03:6c:66:ed:c6:f2:f2:65:e4:ab:ad:1d:
31:c4:32:64:58:cf:3a:dd:43:d3:d4:01:1d:f1:7a:
71:17:e7:0d:6c:50:a6:63:86:86:c8:05:8e:42:f1:
ad:f7:48:4c:b9:eb:c5:60:ad:49:02:c6:19:11:f2:
d7:a1:11:fd:79:11:eb:2b:e1:76:fe:20:55:ef:a6:
f1:6e:0c:d2:67:b5:55:d7:4c:86:23:ce:56:1c:94:
ae:c4:51:9a:f6:16:45:b9:51:14:86:48:15:18:b7:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:3B:87:73:84:DD:BE:BC:2E:32:F2:32:69:81:DE:4A:71:4A:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4040::/48
Signature Algorithm: sha256WithRSAEncryption
b3:f9:99:91:68:d6:af:50:29:a6:d5:3a:f6:69:85:cf:82:d4:
af:3e:d5:99:17:c5:bb:30:5f:fa:f4:5a:2a:9b:74:1c:6e:9e:
71:60:14:1d:ac:f0:f8:27:82:84:1e:13:91:0d:01:f8:74:1a:
14:b2:67:06:bf:1c:f4:a5:7f:aa:89:c9:fb:94:f1:9f:d4:50:
ef:69:c2:9d:2d:c3:ba:00:fd:ea:f2:e0:59:b3:68:06:2d:bc:
cc:5c:2d:93:d3:c6:49:a7:79:7b:7b:83:53:62:ee:b4:7d:6e:
c6:14:47:4b:b8:7f:91:10:3d:e9:e5:f1:91:74:3a:a4:73:3a:
d4:cc:b5:d0:18:1b:66:bc:43:32:24:d4:d7:78:2d:a0:84:f3:
61:83:a8:ea:39:7d:21:90:53:67:71:fb:2d:d3:35:f5:e3:3f:
3f:63:50:1c:1a:c4:a9:7a:6e:f5:67:10:29:9e:e8:4c:46:d3:
ef:4d:92:54:fd:cd:97:a2:64:72:0a:33:77:b6:b3:fc:6d:c6:
c2:45:fd:4f:6a:6a:98:07:d2:ca:04:3d:f0:a6:e4:27:41:82:
af:7a:e6:50:ea:6a:03:52:c6:e0:5e:12:9d:d2:97:b2:79:db:
47:06:f3:c1:a9:5d:8c:a0:a7:8a:f5:de:71:98:14:d7:a7:87:
11:d7:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:49 2025 by rpki-client