Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
File: f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json)
Hash identifier: 730RyuEpL4Pac7FW9LFoqpxaQ9Bmq9ZhHQOuXshj3cQ=
Subject key identifier: B6:73:FF:79:0F:65:72:AE:47:64:7F:27:94:2C:33:91:DA:F0:AD:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18349290A184AA8BCE6EEA6C2998320013E90CB0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
Signing time: Wed 05 Mar 2025 16:00:09 +0000
ROA not before: Wed 05 Mar 2025 16:00:09 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:34:92:90:a1:84:aa:8b:ce:6e:ea:6c:29:98:32:00:13:e9:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 16:00:09 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:5f:b5:fa:62:0c:cb:e9:73:e7:16:94:29:
b0:57:2f:5a:d4:c3:e1:63:5c:04:c8:e7:a3:5d:ae:
f9:53:3e:c5:e0:6f:99:c2:64:26:9f:35:6b:53:b7:
d8:51:7f:73:95:f3:2a:7d:a0:fd:ea:0b:00:38:a9:
12:18:84:4f:2a:1a:df:63:32:ab:b1:95:9d:01:9f:
b9:b4:1e:98:d2:37:48:2f:81:0b:31:d0:b3:65:dc:
e2:42:04:ad:a9:d7:1e:13:84:4f:e5:e7:0f:ff:15:
c5:ac:3d:9f:b2:98:18:b1:bb:81:f1:d4:5d:3f:b2:
45:9b:c1:d5:ae:12:49:f4:6e:e9:a6:bd:b5:f1:73:
45:4c:7d:0e:3d:47:7e:3a:54:3d:f2:dc:1e:22:fe:
30:a3:2c:88:2f:18:b2:f9:e0:84:37:ee:0b:a8:37:
9d:a3:e4:5f:e9:b8:27:76:25:39:43:c0:4d:99:d2:
72:16:f5:70:78:2f:95:1c:bc:ae:40:de:66:54:9a:
48:60:50:6d:e0:84:05:91:34:be:cd:27:0d:1e:64:
b8:26:8c:b0:c1:36:8d:44:a8:97:20:bb:47:e7:25:
a0:35:b4:82:2d:6b:45:6b:39:85:b2:22:da:e8:fc:
73:56:a6:a2:a3:03:c9:fa:d9:00:56:50:27:1c:3f:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:FF:79:0F:65:72:AE:47:64:7F:27:94:2C:33:91:DA:F0:AD:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5080::/48
Signature Algorithm: sha256WithRSAEncryption
88:0b:f4:19:31:ea:42:3f:5e:9e:87:eb:73:fe:77:d9:91:1c:
6e:cb:4e:bc:45:fb:ee:61:8c:c1:b9:d1:fc:bb:75:f5:22:1b:
28:85:77:aa:f4:dc:29:6c:58:b8:63:11:e6:24:be:04:a6:71:
d9:9f:a4:d7:42:cc:18:9d:1e:aa:c6:c6:39:4c:a3:15:5d:04:
75:88:3d:35:a5:3f:c6:df:b4:0a:d0:46:b0:79:9b:c6:e3:00:
47:32:20:13:cf:2a:5d:7e:ff:db:aa:20:0f:28:1e:b9:e7:af:
6f:04:b6:56:83:11:f1:a3:e4:d9:35:80:2d:4c:1f:6a:f2:ae:
e3:33:a8:e2:41:4a:39:74:09:a4:d9:fa:bf:b0:dd:18:9b:5f:
9a:0d:7c:3a:ca:ef:c1:42:44:7a:98:8f:38:ef:8f:71:51:42:
30:56:15:4b:4a:d2:9d:5c:f5:4a:95:28:1e:98:62:26:cc:3a:
ae:f0:8f:cc:05:e9:7b:5b:e4:15:3f:75:b4:96:25:6b:ff:75:
08:dc:b9:8d:f5:7c:2b:43:22:e9:48:a6:eb:ea:fb:1a:95:d3:
d0:74:09:51:26:07:83:cd:7d:9e:35:d7:eb:84:48:f0:3d:cf:
b5:aa:ea:2f:d8:ab:3c:b0:1f:66:16:e7:65:16:14:a0:45:32:
78:7a:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:49:58 2025 by rpki-client