Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
File: f3736ec9-491c-43bd-b672-c821fdae78f1.roa (raw, json)
Hash identifier: y1wg2NBgqQl38TxuIYlfcyiF1QjN8iZwIt8dxYZea60=
Subject key identifier: 6B:CC:EE:43:9B:D7:74:CD:F5:25:3F:AF:61:E0:61:64:E1:4C:9C:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C18947CD30BD31A76F063592C8EB619C4E4BCA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
Signing time: Mon 24 Mar 2025 19:30:23 +0000
ROA not before: Mon 24 Mar 2025 19:30:23 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:18:94:7c:d3:0b:d3:1a:76:f0:63:59:2c:8e:b6:19:c4:e4:bc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 24 19:30:23 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:73:23:00:4f:73:53:5e:9c:76:79:3b:c7:
92:6f:3f:5e:6f:dc:2b:ed:1a:df:d7:c8:42:c3:cd:
35:d5:4f:d4:79:b1:f8:05:30:08:57:77:10:aa:6c:
0b:57:29:90:88:2f:ed:f5:6d:93:61:dd:7a:da:72:
30:b4:55:e3:ea:bd:ce:76:13:ce:e5:37:a9:42:89:
a5:3f:66:87:2e:b5:f4:1d:df:72:1d:18:36:6d:17:
a9:2c:c8:85:49:cb:16:f3:d3:d0:e6:e5:cd:77:c4:
aa:22:9a:4b:cd:9c:6d:7f:27:4d:cf:4b:d5:03:2c:
6a:53:91:70:e1:f6:2b:11:54:42:d2:58:6e:df:c8:
00:d9:c7:dc:9a:94:5d:3c:a4:6f:01:9c:73:ed:f1:
cb:b5:10:fa:65:89:dc:0a:d7:fe:f4:06:56:58:13:
97:2d:f2:2e:9d:1e:50:68:82:0a:e3:62:1f:41:32:
76:b9:85:98:f6:5e:91:18:af:53:60:62:10:d3:10:
5a:5e:57:4b:a4:c5:de:be:9b:d2:86:68:db:14:14:
21:11:73:38:24:fe:4b:2e:60:7e:49:b0:5e:98:8c:
e8:e0:6b:88:00:51:5e:7c:15:eb:df:a4:cf:12:f3:
c8:35:9b:02:96:9b:c3:de:5c:f6:c9:f6:ab:e8:f3:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:EE:43:9B:D7:74:CD:F5:25:3F:AF:61:E0:61:64:E1:4C:9C:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/48
Signature Algorithm: sha256WithRSAEncryption
44:ff:ac:43:2d:17:86:29:5e:90:a3:40:7e:66:45:54:ee:f8:
38:89:1e:cb:37:70:69:45:2e:c9:0e:4f:fd:4b:80:36:6d:c3:
a8:87:ef:b4:5a:3d:6d:e8:97:96:c4:c3:a6:e5:60:d6:b6:7b:
20:ae:54:67:d7:fb:00:9e:00:e2:03:02:5a:58:4d:12:3a:f1:
00:1e:73:1e:b5:9e:1c:61:6c:79:29:4a:90:2e:4f:9b:9d:4d:
a1:03:e4:6f:f1:0a:8e:85:a5:6a:8f:8b:ea:21:cd:ee:3c:b6:
86:9e:d8:58:2d:1c:f8:3e:1e:ef:75:11:21:2c:1e:3a:79:04:
95:35:a0:b8:fd:c2:84:bf:79:57:d0:84:72:8a:e9:78:b9:c9:
10:26:62:28:0a:e6:12:e1:08:e8:b7:ca:80:dc:cc:4d:4d:33:
d8:6f:72:ec:1f:94:3b:82:72:93:02:75:69:81:30:6a:8b:84:
41:5b:90:3d:40:60:04:fd:d3:8a:95:b6:4a:27:a1:26:d0:f1:
6c:6f:8a:b9:af:a2:ae:d2:9e:21:cb:10:58:ff:b4:9e:66:77:
d4:28:5b:ff:94:05:80:77:2b:98:75:b5:16:3d:d0:fc:84:b1:
10:28:e8:55:45:c7:7a:d0:dd:41:64:4b:9d:7d:57:c9:79:70:
ce:4c:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:29 2025 by rpki-client