Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
File: f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa (raw, json)
Hash identifier: Pc1rqvtRpPukCi68Z0wt0tqpnUnAYiZvEtImRjAWMHY=
Subject key identifier: B0:44:65:7E:FB:8D:01:BD:5B:6C:43:C1:67:29:3A:DF:30:31:DB:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05E72661A58C4D0DBD0F8214D2C9F32540E82277
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
Signing time: Wed 05 Mar 2025 17:11:21 +0000
ROA not before: Wed 05 Mar 2025 17:11:21 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:80c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e7:26:61:a5:8c:4d:0d:bd:0f:82:14:d2:c9:f3:25:40:e8:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:11:21 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:23:f9:75:fd:0a:07:6d:0b:62:0d:84:10:
ad:95:3c:29:f0:c8:e9:a8:c5:af:bb:90:ef:d2:41:
1f:37:66:6f:4e:6a:c9:18:6d:ff:5a:13:16:45:5e:
29:55:75:72:0d:88:62:c9:ee:5c:65:d0:6c:b1:d1:
0b:a5:d7:cf:fe:fd:ed:02:06:94:5f:f9:7f:01:9a:
7c:c5:2d:50:88:0e:67:2f:05:7b:a9:6e:41:31:ff:
bc:e4:2c:c2:50:6a:ec:de:5c:f4:8e:ae:05:6b:9c:
72:c1:95:0e:67:78:e0:f8:f9:56:a0:d6:c8:7a:59:
3f:ed:5f:93:0f:a6:da:71:a8:1f:3f:6c:1d:05:a3:
de:71:a2:58:74:6d:f2:36:fd:d3:cf:7c:f0:ef:4b:
2b:5b:6c:b9:1a:94:7e:b0:dd:12:24:99:54:54:5e:
81:99:16:d3:93:45:6a:c9:8b:9d:3e:5e:18:6d:99:
ff:8f:3f:f8:b9:6b:42:18:09:c2:c7:3d:2f:15:f5:
f6:85:d2:21:7c:17:a2:ed:e6:b0:da:64:ec:dd:63:
8b:ca:af:2d:d4:8b:5b:99:eb:bd:31:44:6b:4c:1b:
cf:f9:e8:9b:fa:f5:c4:e6:f7:ff:d9:2b:09:5f:61:
5f:11:5f:58:74:43:f2:75:b8:30:3b:24:2f:5b:ea:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:65:7E:FB:8D:01:BD:5B:6C:43:C1:67:29:3A:DF:30:31:DB:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
a3:d2:02:38:26:03:36:66:ce:ba:a0:78:3f:3f:af:83:9f:f3:
41:1c:b7:f5:04:d2:1f:7a:cb:e2:7d:e2:d8:cd:be:a5:03:a3:
d5:c4:c1:9c:64:42:90:f0:6d:d2:ab:69:08:8b:2c:fc:72:85:
17:3f:06:e6:e8:3c:67:4f:73:1c:8b:d5:23:a3:3a:bf:8d:62:
d8:b0:cb:e1:cf:04:4d:32:41:f8:29:2e:fd:e9:d9:02:e6:21:
41:fc:58:f2:cf:a1:9a:17:e0:42:24:f8:83:36:31:ba:1e:e3:
a0:c7:74:90:0c:3a:fa:be:3b:d2:31:b7:e5:5a:36:d6:4a:f3:
ae:81:73:82:14:63:a3:d2:f8:46:42:b1:31:c3:c4:7a:f2:d2:
ff:99:b5:c2:a8:38:32:54:4b:ad:89:0d:4c:51:1d:51:ad:eb:
f1:45:77:e1:26:e0:c1:b3:f2:e3:6d:33:72:bf:0f:b3:7a:7c:
0f:a2:f4:5e:d3:db:c7:76:c3:c1:20:39:de:12:9c:ff:aa:09:
34:b8:33:87:17:e2:b6:57:07:a4:9c:86:e3:4d:3b:b2:aa:d1:
54:9f:61:f5:fc:ca:0d:66:69:46:7a:86:4f:c9:59:21:a7:dd:
07:72:d1:70:cd:0b:e8:0b:59:d5:07:66:85:71:8f:85:ad:52:
e0:78:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:42 2025 by rpki-client