Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
File: f6813853-40b9-46d5-be14-0208aaccf095.roa (raw, json)
Hash identifier: NykI3XQzRGsNB7TG7l2UFgmrONAJgrRx4S6NSHR4Yaw=
Subject key identifier: 66:C4:94:D7:DA:81:AE:F2:AB:6E:43:D4:D6:34:DD:CA:E4:24:EE:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16CE5B3355A983639B6408458536967B51295855
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
Signing time: Wed 05 Mar 2025 17:01:49 +0000
ROA not before: Wed 05 Mar 2025 17:01:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ce:5b:33:55:a9:83:63:9b:64:08:45:85:36:96:7b:51:29:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:ec:d6:fa:56:6a:5a:13:58:72:c6:a9:8e:
a1:de:11:84:66:d5:18:9f:cb:72:ed:47:d0:06:54:
d3:79:f7:1f:a3:52:60:24:4c:fb:aa:d2:a5:17:12:
18:df:3b:07:21:0e:ef:71:a6:14:06:ae:66:d4:af:
b4:2a:f2:e6:79:7a:e0:21:2d:9f:a9:16:48:6c:46:
32:f2:01:a9:89:dc:a7:56:f0:1b:a5:2c:a2:94:63:
f9:5a:63:4a:7d:d0:71:01:7e:ef:ae:e8:6e:3f:b6:
9e:1f:0a:be:34:89:6f:ac:5f:8e:47:2e:ba:0d:0d:
97:1c:f7:23:3d:ca:7e:b5:d7:cb:40:e4:3d:98:02:
51:0a:c6:cc:f7:51:e1:3d:31:e1:50:d7:df:2d:4a:
32:df:39:70:06:dc:76:bf:8b:35:a0:65:75:bd:20:
99:41:15:fc:9f:b9:7a:e8:16:79:db:c1:c5:7e:60:
2a:65:09:c5:aa:13:6f:4b:2f:46:ba:32:3c:5d:34:
92:6b:33:0b:61:5b:65:c4:c4:5a:8d:8c:4d:20:33:
20:63:d9:fc:3a:27:9f:de:e4:5e:ac:77:04:2a:7d:
00:15:1e:ee:14:29:44:b4:44:8f:0c:91:18:29:9e:
96:2a:06:47:6d:7d:fb:d4:41:ca:9f:77:b9:82:f8:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:94:D7:DA:81:AE:F2:AB:6E:43:D4:D6:34:DD:CA:E4:24:EE:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4080::/46
Signature Algorithm: sha256WithRSAEncryption
75:ea:39:90:c4:14:3d:d0:c8:9f:c9:e1:21:50:c8:18:cb:0a:
a7:f2:56:a4:29:6f:e8:d4:37:11:e5:f8:76:68:b7:12:3c:90:
a1:fe:ef:47:6e:ae:f9:8c:d6:08:2b:d6:c0:46:69:40:11:83:
19:7f:e2:50:11:53:74:ed:48:96:16:5d:b1:7c:ed:06:7d:ab:
0e:01:4c:17:01:c3:44:bf:ac:e3:e4:0a:82:da:80:84:24:04:
bb:aa:f4:7f:ff:98:89:bd:ff:f3:6e:db:21:e2:c9:ee:f9:4b:
5c:8a:5a:8f:4a:84:a4:c8:8e:4b:55:c5:a0:e4:c3:bd:8a:39:
6a:8a:f4:91:94:24:90:e4:05:31:00:3b:82:28:c3:62:15:6c:
7a:47:d7:a0:77:09:5e:25:d6:ac:d6:11:28:48:cd:46:89:41:
d6:34:82:ce:73:00:06:72:51:f9:92:9f:af:90:93:01:f4:ac:
a0:8b:3d:68:61:6f:57:1e:e5:f2:44:1c:45:6a:8a:00:f3:ee:
d1:b2:3f:27:69:0c:ac:0d:aa:dd:da:e1:c9:70:5f:3a:66:08:
8e:66:7d:a0:b4:16:77:b5:62:96:53:ef:75:b9:43:9c:6e:7a:
a0:e2:4c:11:58:8a:f3:90:5b:bd:07:ce:21:8f:ed:19:34:31:
48:93:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:19 2025 by rpki-client